It's one thing for the government to know who committed a cyberattack. It's quite another for it to convince the public who attacked, writes Bruce Schneier.