I'm the hacker that brought down North Korea's Internet for over a week. AMA

Original Article ↗ Hacker News Discussion ↗

A self-described US hacker who claims to have knocked North Korea off the global internet for about a week has prompted debate over legality, ethics, and personal risk. Commenters question why he has not been prosecuted under Western cybercrime laws, whether such an attack on a heavily sanctioned authoritarian state is morally justified, and what collateral harm it might have caused to ordinary North Koreans. Many also doubt the strategic value of the stunt—arguing it mostly disrupted elite access, not the internal intranet—while criticizing the hacker’s public boasting as dangerously reckless given the power of nation-states to retaliate.

Legality and Enforcement

  • Many ask why the hacker isn’t prosecuted under laws like the CFAA.
  • Explanations offered: lack of victim cooperation (NK won’t work with US law enforcement), low prosecutorial priority, and legal gray area because NK is heavily sanctioned and not part of normal commerce.
  • Some argue states generally don’t investigate crimes on foreign soil; others counter with Interpol/Europol and FBI overseas offices.
  • A few see this as a form of “privateering” against adversary states that Western authorities tacitly tolerate, at least for now.

Ethical Debate

  • Some see the attack as morally dubious: NK is poor and starving; any disruption of infrastructure risks harming ordinary people, possibly including resource distribution.
  • Others respond that almost no ordinary North Koreans have internet access; disruption mainly hits the elite and state hacking operations.
  • There’s concern that low-level NK IT staff could be punished or executed, but some argue moral responsibility for that lies with the regime, not the hacker.
  • Broader point: resistance to tyranny nearly always harms innocents indirectly; whether that makes it immoral is contested.

Risk of Retaliation and Personal Safety

  • Many think publicly identifying himself is reckless: a totalitarian state can be relentless and target him or his family, possibly via proxies (cartels, gangs).
  • Others downplay NK’s operational capabilities inside the US and note past bluster (e.g., over films) that didn’t lead to retaliation.
  • Several say making a nation-state your personal adversary for ego or “social validation” is irrational.

Technical Impact and Significance

  • Clarification: he reportedly DDoSed two border routers, cutting NK’s external internet, not its internal intranet.
  • Some argue this has limited real-world impact since few citizens use the global internet; others say it disrupts elites and state cyber units, which is precisely the point.
  • Several believe US agencies already knew this chokepoint existed and could do far more powerful denial or kinetic attacks; his “discovery” is seen by some as trivial.

Credibility and Motives

  • Commenters note perceived contradictions and self-aggrandizing tone, describing the act as clever but accompanied by “delusions of grandeur.”
  • Some think this behavior explains why US agencies brushed him off: he appears impulsive, willing to escalate and then publicly brag.
  • Others emphasize that he tried official channels first, sees himself as retaliating after NK targeted him, and view him as a kind of vigilante with mixed but understandable motives.

Geopolitics and Double Standards

  • Thread frequently references Western “rules-based order” as selectively applied: actions against sanctioned “bad” states are tolerated or lauded, similar acts against others are punished.
  • Some worry that such unilateral cyber actions blur lines between crime, protest, and acts of war, but others argue we’re already in a low-level cyber conflict where adversaries ignore such lines.