From DeSmog Blog, we are directed to this story from IT-Networks, which looks at what we know about the CRU hack an IT perspective. Short version: it was a deliberate, skilled attempt to target
Phil Jones, the head of the CRU; Professor Keith Briffa, who studied tree rings; Tim Osborn, who worked on climate modelling for modern and archaeological data; and Mike Hulme, director of the Tyndall Centre for Climate Change Research.
A couple of details mentioned in the story that I have written about previously.
1) The hack was launched from a computer based on the east coast of north America.
This is deduced from the naming conventions used by CRU's email system, which also serve as time-stamps. More here.
2) Digital forensic analysis shows that the zipped archive of emails and documents was not produced on a single date. Instead it was created by copying the files over a number of weeks, with bursts on 30 September 2009, 10 October and 16 November. On the last date a folder of computer analysis code by Osborn was added to the package.
Early on, BBC meteorologist Paul Hudson implied that he had been shopped a subset of the hacked emails on October 12th, though it is not clear whether these were from the hacker (Hudson did not specify). He later went silent on the topic, but if the hacks were taking place over a 6 week period, then the idea that the emails came from the hacker becomes much more plausible. In fact, there is an interesting possible sequence of events here. On October 9th, Hudson writes a piece entitled What happened to global warming? which inspires a certain amount of email snark from the four scientists mentioned above, and it is just those emails that wind up in Hudson's in-box on the 12th. Is the hacker "telling tales" on the four CRU scientists in the hopes that Hudson will somehow respond?
Also, given that the N.A. location of the hack puts us in the middle of denier land, it would be interesting to find out what messages were hacked on what date and see how these correlate with what is going on Climate Audit at around the same time.
PS. Might be a good time to mention that Swifthack is still out there, countering the crud.