this post was submitted on 18 Dec 2025
507 points (99.0% liked)

World News

51420 readers
2724 users here now

A community for discussing events around the World

Rules:

Similarly, if you see posts along these lines, do not engage. Report them, block them, and live a happier life than they do. We see too many slapfights that boil down to "Mom! He's bugging me!" and "I'm not touching you!" Going forward, slapfights will result in removed comments and temp bans to cool off.

We ask that the users report any comment or post that violate the rules, to use critical thinking when reading, posting or commenting. Users that post off-topic spam, advocate violence, have multiple comments or posts removed, weaponize reports or violate the code of conduct will be banned.

All posts and comments will be reviewed on a case-by-case basis. This means that some content that violates the rules may be allowed, while other content that does not violate the rules may be removed. The moderators retain the right to remove any content and ban users.


Lemmy World Partners

News !news@lemmy.world

Politics !politics@lemmy.world

World Politics !globalpolitics@lemmy.world


Recommendations

For Firefox users, there is media bias / propaganda / fact check plugin.

https://addons.mozilla.org/en-US/firefox/addon/media-bias-fact-check/

founded 2 years ago
MODERATORS
 

A North Korean imposter was uncovered, working as a sysadmin at Amazon U.S., after their keystroke input lag raised suspicions with security specialists at the online retail giant. Normally, a U.S.-based remote worker’s computer would send keystroke data within tens of milliseconds. This suspicious individual’s keyboard lag was “more than 110 milliseconds,” reports Bloomberg.

Amazon is commendably proactive in its pursuit of impostors, according to the source report. The news site talked with Amazon’s Chief Security Officer, Stephen Schmidt, about this fascinating new case of North Koreans trying to infiltrate U.S. organizations to raise hard currency for the Democratic People’s Republic of Korea (DPRK), and sometimes indulge in espionage and/or sabotage.

top 50 comments
sorted by: hot top controversial new old
[–] JoeBidet@lemmy.ml 254 points 5 days ago (2 children)

Sounds much better than "Amazon surveils keystrokes of its IT workers"!

[–] stoly@lemmy.world 29 points 5 days ago (4 children)

This was also my takeaway. Sounds like a security nightmare if they are logging any data.

[–] kieron115@startrek.website 7 points 4 days ago

Normal ass websites will monitor user inputs to do things like profile users. I’m pretty sure those “click to show youre not a robot” captchas actually capture how your mouse moves to the box, for example. It’s not that crazy honestly.

load more comments (3 replies)
[–] Tangent5280@lemmy.world 7 points 4 days ago (1 children)

Well it isn't paranoia if North Korean impostors really are working in your company.

[–] Evotech@lemmy.world 5 points 4 days ago

Yeah, hate it all you want. But risk scales with the amount of employees you have. At the scale of Amazon you have to do literally everything to minimise risk.

[–] Wispy2891@lemmy.world 34 points 4 days ago (3 children)

On one side I feel like "cool, they managed to find a spy on this sophisticated way"

On the other side I'm thinking what kind of intrusive keylogging malware did they install on all their employees laptops...

[–] amzd@lemmy.world 9 points 4 days ago

This article is just building justification for spying on your employees

[–] lka1988@sh.itjust.works 3 points 3 days ago

I mean, if it's a company-owned laptop, they can do whatever the fuck they want with it. I bring a personal laptop to work for browsing and YouTube and whatnot, attached to a VPN.

[–] Echolynx@lemmy.zip 3 points 3 days ago

Way too fucking much.

[–] SpaceNoodle@lemmy.world 154 points 5 days ago (2 children)

How am I the first person to ask why they're measuring the latency on everyone's keystrokes?

[–] a1studmuffin@aussie.zone 79 points 5 days ago (1 children)

Given they've had 1800 recent infiltration attempts, I understand their suspicion.

[–] CanadaPlus 24 points 5 days ago* (last edited 5 days ago)

Literally, catching North Koreans might have been the idea. It's become a big issue.

Probably one of the less shocking things they track.

[–] BurnedDonutHole@ani.social 33 points 5 days ago (1 children)

North Korea got better ping than mine ahahaha...

Looking at my 300ms ping with 1500ms jitter....

(Yes, I counted the zeros)

[–] gerowen@piefed.social 81 points 5 days ago (7 children)

I'm never quite sure how to feel about this. On one hand, if the person just wants to make some money and they're doing the job, why bother them. On the other hand though, I know that anybody who has consistent access to an internet connection in North Korea is almost certainly working for the benefit of the great leader and they aren't actually seeing any money or benefit for themselves. I just hate that the citizens of North Korea have to suffer and be punished because of their asswipe of a leader.

[–] pilferjinx@piefed.social 70 points 5 days ago (3 children)

When you look at the ISS pics of NK during the night, you get a sense of how bad it is for most of the population.

[–] brbposting@sh.itjust.works 47 points 5 days ago (9 children)
[–] dubyakay@lemmy.ca 34 points 5 days ago (1 children)

Maybe they just really like the Dark Sky initiative.

[–] nomy@lemmy.zip 18 points 5 days ago

An entire country of astronomy nerds sounds like a tourist destination to me!

[–] bold_atlas@lemmy.world 4 points 4 days ago* (last edited 4 days ago)

I like how they point out that tiny batch of lights near the coast are NK fishing boats while all the other massive clusters of lights on the ocean are South Korean, Chinese and Japanese fishing boats illegally using spotlights to attract fish.

load more comments (7 replies)
[–] Serinus@lemmy.world 15 points 5 days ago (1 children)

It kind of amazes me they don't have better infrastructure. It's not like they're shy about forced labor.

[–] Honytawk@feddit.nl 10 points 5 days ago (1 children)

You can only do so much with forced labour. They aren't doing their best, just "enough" to not get punished.

I'm sure plenty of them also use malicious compliance and sabotage stuff to get back at the top brass.

[–] UnderpantsWeevil@lemmy.world 4 points 4 days ago

You can only do so much with forced labour.

There's a certain irony in this statement, coming from folks who consume it regularly.

[–] mrgoosmoos@lemmy.ca 9 points 5 days ago

seeing the stars instead of light pollution doesn't sound like a bad thing on its own

[–] NOT_RICK@lemmy.world 43 points 5 days ago (5 children)

They’re also a security threat. Any opportunity to exfiltrate potentially profitable or leverageable data will be taken. I’d bet they’re used to sniff out vulnerabilities for ransomware attacks too. I definitley identify and agree with the healthy sympathy (I guess empathy if you’re in the states, our leader more than qualifies as an asswipe) for the citizens of North Korea

load more comments (5 replies)
[–] someguy3@lemmy.world 25 points 5 days ago

North Korea intentionally does this to get revenue for the state.

[–] wheezy@lemmy.ml 3 points 3 days ago* (last edited 3 days ago) (3 children)

North Korea is the result of a genocide carried out by Japan during WW2 and the subsequent genocidal bombing campaign of the US during the Korean war. It was then shut off from the rest of the world as a punishment for successfully resisting US and pro Japanese occupation. What type of leadership and society do we expect to grow out of that? Like, honestly, what type of freedom can be given to people when a country is being cut off from the rest of the world by a large military superpower like the US?

I think people have learned a lot in recent years by looking at Gaza and the conditions the US and Israel have placed on the Palestinians there. I think people understand that Hamas and it's leadership are the inevitable result of that type of occupation. I hope people can learn from that and realize that there is not something inferior with a place like North Korea. It's structures of isolation and state control are the inevitable result of the history and current material conditions it faces.

There is a reason that support for Palestine liberation is nearly 100% among the non western world. Because they all see themselves in the Palestinians.

Do I like the leadership of North Korea? No. Do I like the leadership of Hamas? No. But I understand that they won't change until the threat and oppression of outside powers is stopped.

The west fucks with so many countries and then uses the current instability that the west caused as a reason for why they need to fuck with them more. Venezuela being the latest iteration.

load more comments (3 replies)
[–] WoodScientist@sh.itjust.works 19 points 5 days ago (1 children)

I know that anybody who has consistent access to an internet connection in North Korea is almost certainly working for the benefit of the great leader and they aren’t actually seeing any money or benefit for themselves.

Eh, this doesn't sound like the job you would give someone in a prison camp. You're talking about people that you're allowing to interact and work regularly with foreigners outside the country. That does not sound like the type of position you trust to a political prisoner. That sounds like a position you put someone of high trust. It's probably a pretty cushy job as the standards of North Korea go. Sure beats scratching at dirt or working in some godawful arms factory. It's probably the type of job you need some good family connections in the Party in order to get. Sure, the government takes all the direct monetary benefit of the work, but that is just kindof how Communist systems work. I imagine the people working those jobs have some of the highest standards of living available to people that aren't senior party leadership.

load more comments (1 replies)
[–] Diplomjodler3@lemmy.world 21 points 5 days ago* (last edited 5 days ago) (3 children)

These people are definitely not there just to make some money. And whatever money they make will be used to prop up the genocidal regime.

load more comments (3 replies)
load more comments (1 replies)
[–] BoycottTwitter@lemmy.zip 18 points 4 days ago (1 children)

I don't like Amazon but I will admit here I got to respect both the fact that they disclosed this instead of hid it and the fact that they are actively looking for this instead of burying their heads in the sand.

[–] kossa@feddit.org 7 points 4 days ago (1 children)

Oooor it's corporate propagande about their totalitarian surveillance system.

[–] lka1988@sh.itjust.works 2 points 3 days ago

¿Por que no los dos?

[–] flamingo_pinyata@sopuli.xyz 24 points 5 days ago (1 children)

I guess this is inevitable at huge companies. Nobody cares about the actual person you're hiring, it's just another position to fill. Of course there will be fakes of all kinds.

[–] TragicNotCute@lemmy.world 19 points 5 days ago (4 children)

It’s not that, it’s that they are incredibly sophisticated in their techniques. I just had to sit through 90 minutes of training about how to spot fake applicants.

[–] WoodScientist@sh.itjust.works 9 points 5 days ago (3 children)

I don't get why companies can't solve this problem entirely by just flying out applicants for in-person interviews towards the end of the hiring process. Or hell, maybe only even ask the candidate to fly out for a visit after they've already accepted the job offer. Just one minimal and relatively cheap step to confirm the remote worker you're hiring is who they claim to be. For the cost of a flight, a night or two in a hotel, and some meal vouchers, you can verify someone's identity. Sure, maybe not for freelance work. But for any well paid technical field? This is a trivial expense.

[–] oce@jlai.lu 8 points 5 days ago

I feel this can be bypassed the same way remote interviews have been passed, you have a talented dude A actually trained to pass whatever verification is needed, and whenever there's privacy, it switches to dude B, while dude A moves to another recruitment process. I think I have heard about this kind of dude A offering his services online for anyone ready to pay.
Anyone else has never seen the face of one of their full remote colleague? I have one in my team, he does a good job though, however many they may be behind him.

load more comments (2 replies)
load more comments (3 replies)
[–] pulsewidth@lemmy.world 6 points 4 days ago

I wonder how many they've missed over the years, this kind of thing has been occuring since at least 2012.

Reminded me of the 'critical infrastructure company' (I presume utility) software developer who handed all his credentials over to a worker in China, including mailing them his RSA keyfob, and wasn't discovered for months until the company security team noticed VPN logins coming from China.

https://arstechnica.com/information-technology/2013/01/worlds-most-industrious-lazy-man-outsources-all-of-his-work-to-china/

Apparently it's become even easier for malicious remote workers to fake resumes and identities to gain jobs via AI, so I hope all major companies are monitoring their remote access very closely.

https://au.pcmag.com/security/106436/security-firm-discovers-remote-worker-is-really-a-north-korean-hacker

load more comments
view more: next ›