More on the Sony Hack and Attribution

Apparently I'm not the only security practitioner who's still skeptical about the accusations leveled at North Korea over the recent hack on Sony. I've seen no new evidence implicating North Korea (though the Wired article below cites government sources who claim that some of the undisclosed evidence is more conclusive), but word that security experts question the attribution appears to be spreading.

Wired Threat Level: Experts Are Still Divided on Whether North Korea Is Behind Sony Attack

In Plain English: Five Reasons Why Security Experts Are Skeptical that North Korea Masterminded the Sony Attack

UPDATE: The articles keep coming, and security industry folks aren't backing down on their skepticism.

Foreign Policy: North Korea’s Non-Denial Denial About Hacking Sony

Politico: U.S.: No alternate leads in Sony hack

The Politico story's headline is deceptive: in fact, the article is about how a major security firm, Norse, analyzed the publicly available data for the FBI and concluded that there was no available evidence linking the Sony hack to North Korea. The FBI maintains that those who have come to this conclusion are doing so based upon limited evidence, but they have yet to release any additional evidence directly linking North Korea to the attack. At this point, my proverbial money remains on the skeptics' conclusion, not the FBI's.

UPDATE:: I was unaware until today, but Bruce Schneier has been blogging prolifically about the Sony hack, and as usual, his thoughts are cogent and rational. He links to another item by Marc Rogers, whom I cited in my original post on the topic; Rogers has also posted a third item. I've not had the opportunity to review either of Rogers' new articles, but will do so as soon as an opportunity arises. Schneier, a nationally recognized security expert, was recently criticized by Business Insider's Michael B. Kelley in an article entitled "Stop Saying North Korea Didn't Hack Sony". Aside from Kelley's uninspiring head shot, his bio doesn't exactly lend him much credibility to discuss technical matters: a BA in philosophy and a master's degree in journalism, supplemented by some high school sports writing experience and a few months spent studying Buddhism in India. I remain more inclined to consider Bruce Schneier's take on the matter.