Security guru Bruce Schneier finished yawning and wrote a nice little essay on last week’s hullabaloo over North Korean cyberattacks:
Where were you when North Korea attacked America? Did you feel the fury of North Korea’s armies? Were you fearful for your country? Or did your resolve strengthen, knowing that we would defend our homeland bravely and valiantly?
My guess is that you didn’t even notice, that — if you didn’t open a newspaper or read a news website — you had no idea anything was happening. Sure, a few government websites were knocked out, but that’s not alarming or even uncommon. Other government websites were attacked but defended themselves, the sort of thing that happens all the time. If this is what an international cyberattack looks like, it hardly seems worth worrying about at all.
Schneier said the solution is obvious and old news: Keep computers patched and follow basic security practices. He said last week’s incident was probably “kids playing politics” and turned out to be “a sloppily modified five-year-old worm that no modern network should still be vulnerable to.”
Enough of the hype and the bluster. The news isn’t the attacks, but that some networks had security lousy enough to be vulnerable to them.