The FBI issued a press release on December 19 stating it has "enough information to conclude that the North Korean government is responsible" for the Sony Pictures hack. But it won't say much about how it came to that conclusion, citing a "need to protect sensitive sources and methods."
The FBI is probably wrong, says Marc Rogers, the director of security operations for DEF CON and a security researcher for a mobile security company. The hack is more likely to be the work of a "disgruntled employee," not North Korean hackers, he writes in The Daily Beast.
Rogers lays out his case pretty convincingly, knocking over the FBI's flimsy arguments one at a time. He concludes:
You don't need to be a conspiracy theorist to see that blaming North Korea is quite convenient for the FBI and the current U.S. administration. It's the perfect excuse to push through whatever new, strong, cyber-laws they feel are appropriate, safe in the knowledge that an outraged public is fairly likely to support them.