[avn2109]

True. But the absence of sophistication constitutes evidence neither in favor nor against the "State Actor" hypothesis.

[billions]

Until a Russian name or IP address is provided, the accusations fail to hold water. An incomplete proof is equivalent to "'cause we said so"

[stordoff]

If you are targeting a US political entity, using a staging server in Russia probably isn't the worst idea, so unless the IP address directly ties to the Russian government/intelligence services, it's still only weak evidence of Russia's involvement.

[empath75]

Spoofing ips is absurdly easy.

[cmdrfred]

I agree that IP addresses aren't good evidence but it isn't really possible to spoof TCP in practice.

http://security.stackexchange.com/questions/55279/how-easy-i...