Hacker News new | ask | show | jobs
by shiroiushi 720 days ago
>Police officials acted on the information and discovered it came from KT’s own data center south of Seoul. ... They’ve since identified and charged 13 individuals, including KT employees and subcontractors directly connected to the malware attack last November,...

I'm actually very impressed. If this happened in the US, the police wouldn't care about it at all, and would just tell everyone affected that "it's a civil matter" and they'll have to file a lawsuit if they don't like it.

4 comments

I think you're too optimistic. My reading is that the police is investigating low-level employees and subcontractors. I.e., profit for the corporation, consequence for the employees. And especially subcontractors. (Workplace discrimination against subcontractors has been a hot topic in Korea: subcontractors literally die in factories because they're pushed to handle dangerous tasks while "regular employees" get cushy desk jobs.)
Yeah. At they pulled a Sony on a smaller scale and have better relations with the local govt.

The people who ordered it done will be fine.

https://www.fbi.gov/news/stories/chinese-hackers-charged-in-...

It took 3 years but the FBI published the names of the fellows they believe are responsible for breaching equifax and stealing private data about half of americans

Wu Zhiyong, Wang Qian, Xu Ke, and Liu Lei

This makes sense because the US does not have a set of laws that criminalize Computer Fraud and Abuse
Selective enforcement of broad-scoped laws via prosecutorial discretion is how real power works and how the status quo is maintained.
I like the idea that upon seeing a massive and indiscriminate MITM attack all of the various law enforcement agencies with a remit that includes data would just solemnly bow their heads and not attempt to stop or investigate it because a corporation probably wants the attack to happen.
Kevin Mitnick would disagreed
May he rest in peace.
Damn, pancreatic cancer in 2023. I didn't hear until now.
Maybe you're joking, but they certainly do. They'll happily use them against individuals too.

But against a large company? I'll believe it when I see it.

The US law about this is the Computer Fraud and Abuse Act, it's clearly a joke. We're all in agreement it's not really used against large companies.
it's a joke, the name of the law is "Computer Fraud and Abuse Act"
> If this happened in the US

Perhaps this would be a good moment to pause and ask yourself why this hasn’t happened in the US.

Perhaps this would be a good moment to pause and ask yourself IF this hasn’t happened in the US. :)
Definitely not the same but I remember late in the days of Napster there were companies that would upload "poisoned" mp3's of popular artist that were not the actual song requested to thwart piracy.