Hacker News new | ask | show | jobs
by willstrafach 3226 days ago
> CrowdStrike, the firm whose conclusions informed much of the intelligence community's assessment

I don't think this is true at all. I do recall CS releasing their own report in early summer, but my understanding is the January IC assessment was a completely separate document which did not cite the CS report in any way.

(If I am missing something here, happy to be corrected, this aspect just stuck out to me)
1 comments
monocasa 3226 days ago
The IC assessment was just regurgitating CS's report. The IC just took CS at their word since they would have contracted out to someone like CS to begin with. The FBI, for instance, wasn't allowed to look at any of the evidence directly. AFAIK, no government entities have looked at the raw data.

Edit: http://www.politifact.com/truth-o-meter/statements/2017/jul/...

> In his testimony in January on the cyber attacks, then-director of the FBI James Comey said the agency never got access to the machines themselves, but obtained access to the forensics from a review of the system performed by CrowdStrike, a third-party cybersecurity firm.

link
willstrafach 3225 days ago
To clarify, this is the report I am referring to, and it does not appear to mention CrowdStrike at all:

https://www.dni.gov/files/documents/ICA_2017_01.pdf

link
monocasa 3225 days ago
Sure, they didn't cite CrowdStrike, but there's no extra information in that report other than what came from CrowdStrike's report.
link
willstrafach 3225 days ago
There definitely appears to be additional information in the IC assessment though.
link
monocasa 3225 days ago
Like what?
link
willstrafach 3224 days ago
They're different reports. I don't quite understand what you are saying.

> The IC assessment was just regurgitating CS's report. The IC just took CS at their word since they would have contracted out to someone like CS to begin with.

The IC assessment appears to be very different. It describes information sourcing without any reference to an analysis of DNC servers (let alone CrowdStrike). There does not appear to be any indication that information from CrowdStrike's analysis or any information from DNC servers at all was used to generate the IC assessment.

link