How did Amazon know the lag?
Probably a remote kvm system with QOS monitoring. Many secure systems won’t let you connect directly to sensitive resources from your personal workstation.
But the infiltrator hacked the remote worker’s computer.
The actual worker may have been require to use…
https://aws.amazon.com/workspaces/desktop-as-a-service/
But the lag from the infiltrator to that is what was detected. There was presumably no Amazon software installed on the infiltrator’s computer so how can the lag be measured?
Keyboard input over kvm is pretty awful. It’s possible the kvm software was enforcing a delay between keystrokes to make sure they are delivered in order. Seeing keys consistently pressed with 500ms separation would be odd.
I’m kind of surprised the latency was that low. Unless the NK “employee” was spoofing being in SK or something.
And now you know why you should encrypt your data on any cloud provider.
Let’s see if Amazon gets trump to yell at Un.
