<story><title>The Rise of North Korea&apos;s Hacking Army</title><url>https://www.newyorker.com/magazine/2021/04/26/the-incredible-rise-of-north-koreas-hacking-army</url></story><parent_chain><item><author>Veserv</author><text>Well of course, hacking is an activity that has by far the most leverage both criminally and militarily in the modern era.&lt;p&gt;For ~$1M you can successfully attack and completely compromise essentially any Fortune 500 company in the world.&lt;p&gt;For ~$1M you could target the current model year of any brand of car in the world and develop a remote attack to simultaneously target every car of that model year at rush-hour and engage the cruise control at maximum speed, engage the anti-lock braking to disable the brakes, and, if applicable, engage the autosteer to turn slightly into oncoming traffic as these researchers [1] demonstrated could be done 5 years ago on a budget of only $80k.&lt;p&gt;For ~$1M-10M you could likely target the most popular types of generators used in a power grid and at the very least deactivate if not disable their software governors and over-rev them to destroy them as demonstrated by the DoD 14 years ago [2] and as militarily deployed by Russia against Ukraine [3] which could result in the loss of power for months if sufficiently widespread.&lt;p&gt;At the very least our internet-connected stoves with remote turn-on [4] are safe since, as we all know, the software developers for stoves are the best minds of our generation so it would cost far more than the ~$1M to hack a Fortune 500 company to remotely turn on the gas at 2 AM in the morning and then the igniter at 3 AM with results like this: WARNING [5][6].&lt;p&gt;For less than the price of a tank any government can develop a weapons system that is comparable in power to a full scale nuclear first strike that you can deploy instantly in your enemy&amp;#x27;s territory. Not just that it can be tuned to any scale of destruction you want from an individual all the way up to full scale nuclear strike, and it can be done untraceably or, even better, you can pin it on one of your other enemies as the CIA had the capability to do [7]. Frankly, any government not feverishly developing such weapons systems given that they only cost a few measly million to develop for the immense capabilities they provide is either ignorant or fighting the last war. This is &lt;i&gt;The Tool&lt;/i&gt; that a small nation can use to achieve parity with superpowers given their miniscule cost and immense leverage.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.wired.com&amp;#x2F;2016&amp;#x2F;08&amp;#x2F;jeep-hackers-return-high-speed-steering-acceleration-hacks&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.wired.com&amp;#x2F;2016&amp;#x2F;08&amp;#x2F;jeep-hackers-return-high-speed...&lt;/a&gt;&lt;p&gt;[2] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=7GSEchbDuB8&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=7GSEchbDuB8&lt;/a&gt;&lt;p&gt;[3] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;December_2015_Ukraine_power_grid_cyberattack&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;December_2015_Ukraine_power_gr...&lt;/a&gt;&lt;p&gt;[4] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.geappliances.com&amp;#x2F;ge&amp;#x2F;connected-appliances&amp;#x2F;ranges-ovens-cooking.htm&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.geappliances.com&amp;#x2F;ge&amp;#x2F;connected-appliances&amp;#x2F;ranges-...&lt;/a&gt;&lt;p&gt;[5] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=a2JPLMzQjkk&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=a2JPLMzQjkk&lt;/a&gt;&lt;p&gt;[6] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=ZX9-puUjoDU&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=ZX9-puUjoDU&lt;/a&gt;&lt;p&gt;[7] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Vault_7#UMBRAGE&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Vault_7#UMBRAGE&lt;/a&gt;</text></item></parent_chain><comment><author>hooande</author><text>Every one of these potential attacks would require a lot of things to go very right. It&amp;#x27;s easy to do X or Y under experimental conditions. The real world is far more chaotic and the odds of success are lower.&lt;p&gt;Further, none of these things would cause an enemy to capitulate. If an enemy shut off power or caused car crashes in several major cities at once, the US isn&amp;#x27;t going to just surrender or even think about it. They&amp;#x27;re going to strike back with the widest array of options for employing force that earth has ever seen. Every option you listed would be pin pricking a giant.&lt;p&gt;Cyber warfare is super cheap, but it&amp;#x27;s also orders of magnitude less effective than sustained aerial bombardment or a complete naval blockade. Another tool in the tool chest, but not something I would base my national defense on</text></comment>
<story><title>The Rise of North Korea&apos;s Hacking Army</title><url>https://www.newyorker.com/magazine/2021/04/26/the-incredible-rise-of-north-koreas-hacking-army</url></story><parent_chain><item><author>Veserv</author><text>Well of course, hacking is an activity that has by far the most leverage both criminally and militarily in the modern era.&lt;p&gt;For ~$1M you can successfully attack and completely compromise essentially any Fortune 500 company in the world.&lt;p&gt;For ~$1M you could target the current model year of any brand of car in the world and develop a remote attack to simultaneously target every car of that model year at rush-hour and engage the cruise control at maximum speed, engage the anti-lock braking to disable the brakes, and, if applicable, engage the autosteer to turn slightly into oncoming traffic as these researchers [1] demonstrated could be done 5 years ago on a budget of only $80k.&lt;p&gt;For ~$1M-10M you could likely target the most popular types of generators used in a power grid and at the very least deactivate if not disable their software governors and over-rev them to destroy them as demonstrated by the DoD 14 years ago [2] and as militarily deployed by Russia against Ukraine [3] which could result in the loss of power for months if sufficiently widespread.&lt;p&gt;At the very least our internet-connected stoves with remote turn-on [4] are safe since, as we all know, the software developers for stoves are the best minds of our generation so it would cost far more than the ~$1M to hack a Fortune 500 company to remotely turn on the gas at 2 AM in the morning and then the igniter at 3 AM with results like this: WARNING [5][6].&lt;p&gt;For less than the price of a tank any government can develop a weapons system that is comparable in power to a full scale nuclear first strike that you can deploy instantly in your enemy&amp;#x27;s territory. Not just that it can be tuned to any scale of destruction you want from an individual all the way up to full scale nuclear strike, and it can be done untraceably or, even better, you can pin it on one of your other enemies as the CIA had the capability to do [7]. Frankly, any government not feverishly developing such weapons systems given that they only cost a few measly million to develop for the immense capabilities they provide is either ignorant or fighting the last war. This is &lt;i&gt;The Tool&lt;/i&gt; that a small nation can use to achieve parity with superpowers given their miniscule cost and immense leverage.&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.wired.com&amp;#x2F;2016&amp;#x2F;08&amp;#x2F;jeep-hackers-return-high-speed-steering-acceleration-hacks&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.wired.com&amp;#x2F;2016&amp;#x2F;08&amp;#x2F;jeep-hackers-return-high-speed...&lt;/a&gt;&lt;p&gt;[2] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=7GSEchbDuB8&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=7GSEchbDuB8&lt;/a&gt;&lt;p&gt;[3] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;December_2015_Ukraine_power_grid_cyberattack&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;December_2015_Ukraine_power_gr...&lt;/a&gt;&lt;p&gt;[4] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.geappliances.com&amp;#x2F;ge&amp;#x2F;connected-appliances&amp;#x2F;ranges-ovens-cooking.htm&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.geappliances.com&amp;#x2F;ge&amp;#x2F;connected-appliances&amp;#x2F;ranges-...&lt;/a&gt;&lt;p&gt;[5] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=a2JPLMzQjkk&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=a2JPLMzQjkk&lt;/a&gt;&lt;p&gt;[6] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=ZX9-puUjoDU&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.youtube.com&amp;#x2F;watch?v=ZX9-puUjoDU&lt;/a&gt;&lt;p&gt;[7] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Vault_7#UMBRAGE&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;Vault_7#UMBRAGE&lt;/a&gt;</text></item></parent_chain><comment><author>Der_Einzige</author><text>Like, in principle you&amp;#x27;re right. In practice, cyber attacks at the level of terror that is equivilent to a &amp;quot;full scale nuclear first strike&amp;quot; simply have not happened (yet).&lt;p&gt;I do believe that you might be making a bit of hyperbole with the scale of possible terror potentially possible for such small amounts of money. Some crazy mofo should have done this by now. You&amp;#x27;re telling me that ted kaczynski types don&amp;#x27;t exist for hacking?</text></comment>