Been thinking a lot about the US response.
I think part of their thinking is, was there a better alternative?
I’m as scared of North Korea as anyone in the world – earlier explanation. To me, they’re the most likely trigger for a major conflict that exists in the world today, and probably for the next 20 years.
I don’t know all the evidence that pointed to North Korea, but initially it seems Sony was able to track the attack to a Hong Kong hotel (at least that’s the IP used), the code used was encoded and commented in Korean, and similar to a set of attacks on South Korean businesses. That could all be a setup as noted above, but I’d be willing to bet at this point someone has tracked down that hotel, found the room, found out who was in that room, who paid for the room, and probably have seen security footage of them coming and going.
I’d guess they either concluded that person was acting on behalf of North Korea based on all that information, or they concluded it was someone acting on behalf of China, who wanted to look like they were from North Korea.
It may also have been someone who had the whole thing in place, tried to get some cash from Sony Pictures directly, and when they didn’t pay. They decided to find other people who would pay. Maybe North Korea paid.
I’m not sure it matters when it comes to response.
So, you’re left with two questions.
1) Does something need to be done? I think that line was crossed when people who went to go see the movie were threatened with 9/11 style attacks, right? Before that it was an inconvenience to a business and a few hundred employees had been vaguely threatened. Which sucks, but probably doesn’t get a response from the government. The larger threat did.
2) If you’ve decided something needs to be done, who would you rather takes care of it? Someone was going to respond. Do we want Sony (any division) chasing down international hackers on behalf of a US company? Do we want businesses to handle their own law enforcement? I don’t think so. So you’re left with the government responding.
I think asking China to “help” is just a bit of shrewd diplomacy. If you think they might be involved, but don’t have direct evidence like you do with North Korea, ask them to help and see what their reaction is. It makes them declare their intentions so you don’t have to guess.
I don’t see a better alternative, other than acting like the whole thing meant nothing, which Sony screwed up.