If any newspaper reported on cyber matters with the same rigour and thoroughness of Krebs I'd be first in line to subscribe.

i suspect that he has incentives beyond money

As long as 100% of the information is true, this is fine. When competing powers reveal each other’s dirty secrets, ordinary citizens win. But we need to be careful about injection of various messages in a factually correct information: let’s say, 99% of the facts are true, but a certain person or business is incorrectly mentioned as connected to them. It can be a genuine mistake or it can be an attack on that person or entity. This is just one of the many scenarios of using information warfare. It would be great if a newspaper or independent OSINT team would verify this information.

Just because 100% of information being true, doesn't make something fine.

To quote some senator "I have never owned a private jet". Which is 100% true. His wife did.

Something needs to be 100% true and 100% complete - the definition of the latter is very difficult, and probably subjective too.

Good point. Omitted details also matter, this is why we need free press - to find them.

Tell the truth, the whole truth and nothing but the truth

Care to elaborate?

Someone please help me understand - did KrebsOnSecurity perform the detective work here to hone in on the IRL perpetrator? If so, that's amazing!

he regularly does- and gets various threats from bad and dubious actors as a result. He and "have I been pwned" (troy hunt) are genuine positive actors with IRL stakes in the game.

If a lot of attacks come from AS44477, why not just block it?

I do. :)

We were seeing a lot of brute force/spraying password attempts from AS44477 a month or two ago, the setup looked fishy enough that it was easier to block the whole AS than waste time with it.

(And it's surprisingly large - ~1550 x /24 - at current market rates that IP space is probably worth something around $10-20 million).