Hacker News new | ask | show | jobs
by cwkoss 2589 days ago
Crowdstrike seems very well-connected politically. The DNC chose to have them forensically examine their hacked servers to the exclusion of the FBI.
4 comments

George Kurtz is not a Democrat. Crowdstrike is also a giant in this field. I assume the connection is, the DNC wanted to go with a safe, big name.
Political connectedness exists on many spectrums other than the usual Red vs Blue. An interesting one you can see from the outside (that might not have anything to do here, it's just an example) is CIA vs NSA. You can see Nancy Pelosi's statements back that look like "we've always been at war with East Asia" and "we've never been at war with East Asia" wrt to the intelligence apparatus depending on which agency screwed up.

And Dmitri Alperovitch seems to see the shadows of the Russian political establishment everywhere he looks, though, which makes Crowdstrike an... interesting choice for that work.

Edit: added the top paragraph.

All available evidence from credible sources seems to back up Crowdstrike's attribution. I'm sure you can find a countervailing argument or two from some credible source, but, to say the least, it does not look like Crowdstrike took a flyer on this.

I don't think the Russia investigation has thing #1 to do with Crowdstrike's IPO or what their business is like, though. That's much simpler: EDR is the new antivirus, antivirus has historically been one of the most lucrative enterprise technology products (to say nothing of security products), and Crowdstrike has a commanding share of the EDR market.

You also have a former UK ambassador saying "the DNC wasn't hacked. I was part of the process of exfiltrating the files from the DNC".

And I think a general willingness to parrot establishment rhetoric is part of why they're as big as they are.

Well, if the "former UK ambassador to Uzbekistan" says so, who am I to tell you to stop reading Infowars?
I mean, yeah, the former ambassador who lost his job for having too much integrity to play the established game says "hey, the public record here isn't right, and I know because I was one of the players. Here's the timeline that lines up exactly with what happened and my previously published schedule", and the reaction is either not mentioning him at all, or saying the equivalent of "lol, idk, fuck that guy I guess", then yeah I'm going to give some respect to what he says.
Crowdstrike's analysis of the DNC servers arguably started national discussion of the "Russiagate" controversy. A tin-foil-hat wearer could interpret their actions as serving whoever has a vested interest in Russiagate.
It’s hard not to draw that conclusion.
So, just to see if I can follow this: the claim here is that Crowdstrike attributed the DNC hack to Russia --- as did the US IC and DHS --- to curry favor with the Democrats, who were not in power at the time the attribution occurred, presumably so that when they re-took power sometime in the future they'd pay Crowdstrike back? As a reminder: the current administration is deeply invested in a narrative that every aspect of the 2016 election was essentially on the up-and-up, and that the DNC leaks were fair game, as they had to be, since the President enthusiastically exploited them on the campaign trail, at one notorious point even publicly begging for additional leaks. The GOP, which controlled both houses of Congress when the attribution occurred, is also famously indentured to that President, who, again, would like nothing in the universe more than to shift accusations to Russia back at the DNC itself.

The conspiracy theory here doesn't even make surface-level sense.

I think a more plausible theory is that the 'cybersecurity industrial complex' has a vested interest in general increases in cybersecurity spending. DNC had an interest in distracting from the previous HRC email leak.

Guccifer2.0 didn't really leak anything damning - so perhap this 'leak' was a red herring. DNC insiders could have performed the 'hack' and fabricated the evidence of attribution, then perform the 'leaking' themselves. DNC gets a distraction and makes opponent look friendly w/ foreign power, Crowdstrike gets more revenue from increased paranoia.

Probably incorrect... but more plausible.

Your theory is that, in the middle of an election, after there already being an email scandal, the DNC faked another one, and then got Crowdstrike and the United States intelligence community to go along with it? That's more plausible than... what?
The US IC and DHS clearly have strategic reasons for wanting to crack down on Russia, as evidenced by the strong level of centrist support for doing so.

Crowdstrike decided to make a series of announcements expressing confidence that there had been Russian state sponsored attacks on the DNC server, and did not offer any evidence of it.

When the US IC released its report, the report referred to the Crowdstrike findings, but also excluded evidence. The report appears to have been copied and pasted from previous releases, and contained virtually no useful information.

Yes, you can trust the US IC that the attack was a state actor quality, Russian sponsored triumph, but these are the same experts who helped sell the Iraq war. We learned very importantly during the Iraq war that we should simply not trust their claims without hard evidence.

They are now trying to sell a war against Iran, and will ilkely use many of the same techniques and tactics to do so.

I despise Donald Trump at least as much as anyone, but I think the Russia narrative was mostly unsubstantiated and largely overblown. Why? Not due to a conspiracy, but for the same simple reason that anything Iran does at present will be framed as highly aggressive and a reason for war -- the centrist view wants it.

It's important not to involve Trump in the reasoning about any of this. Trump liking or encouraging something, or disliking it, etc., has no impact on whether or not it is true. Trump is a clown who should be ignored.

Crowdstrike most likely enjoyed getting a lot of PR for "finding" the Russian attack. But I have yet to see evidence that the attack was actually Russian state actors and was not either someone else spoofing them or a sloppy third tier amateur funded by some pro-Russian oligarch (or similar).

To those promoting the "get tough on Russia" narrative, it doesn't matter, Russia is Russia and it is threatening. But I think we should all take a step back and realize that most parties involved in this have some skin in the game and are apt to use the factual uncertainty to make claims that support their agenda. I'd argue that even the specific attribution of the attack as Russian, and the implication that the server was only attacked by one government/group is agenda-driven, IMHO.

So is FireEye (and FireEye is inqtel/cia funded). Crowdstrike are the best in the game.
They were also on retainer for many republicans. They are an American cybersecurity company.
That's because Crowdstrike hires plenty of ex-NSA/CIA, who are usually the people FBI would love to hire. Doesn't mean they're the best in the industry but definitely in that mega-corp/gov tier they seem to be #1.