The logic for that appears to be circular. Schnier himself says he simply "doesn't think" Iran or North Korea are capable. Based on what, exactly? The skills to

The logic for that appears to be circular. Schnier himself says he simply "doesn't think" Iran or North Korea are capable. Based on what, exactly? The skills to find and develop exploits are not particularly rare. This isn't atomic physics during WW2. Primarily what you need is time and money, but not a lot of time and not a lot of money. Both Iran and North Korea have proven capable of building a nuclear programme despite the efforts of the entire world to stop them, so what makes Schnier think they can't do the same for cyberwarfare which is dramatically easier to engage in? Well ... nothing. He just knows it's the Russians.