I think it worthwhile, especially for those engaged in hack back and active defense, to take time to compare and contrast these current stories and their narrative styles:

First, “Don’t Punish A North Korean Hacker Just For Following Orders”

My name is Jake, and I’m a former U.S. government hacker. I eventually quit for a number of reasons that don’t need to be discussed here. But for obvious reasons, I have some strong opinions about the American government criminally charging the hackers of other nations. When considering any criminal charges, context is important.

Charging Park Jin Hyok, (or any North Korean government hacker) as an individual is a human rights issue. Even assuming that the intrusions have been correctly attributed to Park, it’s important to note that Park had no choice in his actions.

Next, “Blackwater security guard murder retrial ends with hung jury”

Slatten, a former Army sniper, was found guilty of first-degree murder and sentenced to life in prison in April 2015 for firing the first fatal shots. An appeals court overturned Slatten’s murder conviction in August 2017, ruling that the initial trial court abused its discretion in not allowing Slatten to be tried separately from three other co-defendants and also found that the 30-year sentences violated the constitutional prohibition against cruel and unusual punishment.

Blackwater and its employees have faced legal controversy for activities during the Iraq war. In 2014 the UN Working Group on the use of mercenaries urged stronger global and regulation of private security companies. The call came on the heels of the guilty verdict against the four ex-Blackwater security guards. In 2012 Blackwater agreed to settle federal criminal charges dealing with export and firearm violations. Also in 2012 Blackwater reached a confidential settlement agreement with survivors and families of victims in the 2007 shooting incident. Blackwater ceased operations in Baghdad in May 2009 when its security contracts expired and were not renewed.

And finally, perhaps most significantly of all, “Canada’s special forces kept too many secrets about Afghan missions, says report”

A decade ago, military police launched an investigation into allegations made by a member of the Canadian special forces, who accused his colleagues of crimes as serious as murder.

The soldier claimed another special forces member, who was never identified, gunned down an Afghan man who was trying to surrender during a raid by coalition forces in 2006.

That investigation concluded with no charges, but morphed into a second, larger probe that examined a series of incidents between 2005 and 2009.

A second allegation surfaced — that U.S. forces, on a Canadian-led raid that may have taken place in 2006, executed an Afghan.

[…]

While the board said in its report it is aware of the need for mission secrecy, “the mere fact CANSOF claims something to be a matter of operational security does not necessarily make it so.”

All of the secrecy, said the report, “affected reporting on operational matters,” even within the organization, and many members “relied exclusively on verbal reporting, with a tendency to report only minimal operational information using vague and imprecise language.”

The result of that, said the inquiry report, was to leave senior commanders in the dark.

So in reverse order (no pun intended), (3) since senior commanders may be in the dark and “orders” shouldn’t shield abusers, and (2) since orders also can be filtered through organizational/relativity shifts like government staff taking private roles leading to even greater abuses, therefore (1) a former government employee in a private role saying he doesn’t want anyone following orders to be accountable…sounds very wrong to me.

The first article seems to support the opposite of the conclusion we should end with.

Also note that the author of this article (who wants us to not hold individuals accountable and instead treat people as simple order followers no matter what they do) literally says people in North Korea have absolutely no choice. His proof? He did a google search and believed it:

Let’s bring this example back to the cyberworld. Because Park was born and lives in North Korea, there’s no doubt that he was indoctrinated by the state from birth. The fact that North Korean citizens are institutionally brainwashed to unquestioningly follow the orders of the state is not a matter of debate. For those who defy the orders of the state, the penalties are severe—both for the offender and their families. If you doubt this, just Google “three generations of punishment rule” (caution: I can’t mentally prepare you for what you’ll see).

It is not a matter for debate because Google Search? This is clearly problematic reasoning. Dare I say some people in America are brainwashed to unquestioningly believe the results of Google?

But seriously, regime change study and practice is premised on all kinds of robust debates about the “facts” that this author so blithely tossed aside. He doesn’t like debate probably for the same reason he wants his superiors to take all the blame for his actions.

This is someone who appears to have been indoctrinated by his own state about his adversary’s state, which is not all that uncommon, yet still is disappointing. I’m going to go out on a limb here and say he didn’t bother to independently keep up with the long-time trends of dissent technology in North Korea.

Before flash drives became more widely available, North Koreans relied heavily on DVDs to view illegal movies, TV shows and other content smuggled into North Korea from China, according to North Korean defectors interviewed in a 2012 report by the global research consultancy InterMedia. But North Korean authorities attempted to crackdown by selectively cutting off electricity to certain neighborhoods and seeing if any households had illegal DVDs stuck inside the DVD players.

By comparison, North Koreans can easily unplug flash drives from TVs or mobile devices and hide the devices if needed. That consideration helped push the growing popularity of USB flash drives. One male North Korean who left the country in 2013 recalled having used USB flash drives since 2003, according to an interview included in a more recent 2017 report by InterMedia.

Does that sound like “institutionally brainwashed to unquestioningly follow the orders of the state is not a matter of debate” to you?

So the article that pleads against holding hackers accountable also goes on to make some weirdly relativistic arguments about ethics. If it is going to start out with a broad statement about human rights as inherited (universal), why backpedal into notions of controlled rights and say people under strict order culture can’t possibly understand when they’re told to do something unethical? The whole thing put together doesn’t make logical sense, aside from being divorced from political theory and reality. If the author can appeal to general human rights, then he is exhibiting how hackers anywhere can think independently enough to be held personally accountable.

Anyway, just for good measure I did Google “three generations of punishment rule” and the third result was:

Christians must support North Korea’s “three generations of punishment rule”

It’s true, I’ll grant him, I needed more preparation for seeing that.