[est]

> As spring gave way to summer, bloggers and computer-security experts found evidence that the attack on RSA had come from China

They never say what evidence, which is the most interesting part of the article. Does anyone have a more detailed description of how they identified it was China?

[sp_]

I worked on the technical side of the RSA attack analysis and not the attribution/political side but some guy on Twitter (https://twitter.com/yuange1975) who pretends to be Chinese has claimed responsibility for the RSA 0-day and some other high profile 0-day exploits on his Twitter feed in a way that makes him the credible original source of those exploits.

I am sure the people on the attribution side dug deeper than this (for example they most likely tried to verify that this guy is really Chinese and not just pretend-Chinese) but I don't know anything about the non-technical side of things.

[est]

That's cool. Much better than the blah acticle. 袁哥 is actually a very skilled hacker and reputable in China. IIRC He works for NSFocus, NSFocus used to be the de facto operator of China's G.F.W., it was replace by another firm after a Taiwan spy issue.

edit: http://jeffreycarr.blogspot.com/2011/06/18-days-from-0day-to...