Slashdot Log In
Chinese "Cyber-Attack" US Department of Commerce
Posted by
CmdrTaco
on Mon Oct 09, 2006 08:08 AM
from the and-you-thought-your-weekend-was-boring dept.
from the and-you-thought-your-weekend-was-boring dept.
Kranfer writes "The register has an article about how the Chinese have recently launched an attack against the US Department of Commerce. From the article: '...attacks originating from computer crackers largely located in China's Guangdong province are aimed at extracting sensitive information from targets such as the Commerce Department's technology export office. Security consultants and US government officials reckon the assaults have at least the tacit support of the Chinese government...' This is not the first time Chinese hackers have attempted to gain access to US Government systems."
Related Stories
[+]
Your Rights Online: US Government to Have Only 50 Gateways 150 comments
Narrative Fallacy brings us a story about the US government's plan to reduce the roughly 4,000 active internet connections used by its civilian agencies to a mere 50 highly secure gateways. This comes as part of the government's response to a rise in attacks on its networks.
"Most security professionals agreed that the TIC security improvements and similar measures are long overdue. 'We should have done this five years ago, but there wasn't the heart or the will then like there is now,' said Howard Schmidt, a former White House cyber security adviser. 'The timetable is aggressive,' he said, but now there is a sense of urgency behind the program. Small agencies that won't qualify for their own connections under TIC must subcontract their Internet services to larger agencies."
[+]
China's Cyber-Militia 196 comments
D. J. Keenan notes that the cover story of the current issue of National Journal reports in depth on China's cyber-aggression against US targets in the government, military, and business. We have discussed China's actions on numerous occasions over the years. The news in this report is the suggestion that Chinese cyber-attackers may have been involved in major power outages in the US. "Computer hackers in China, including those working on behalf of the Chinese government and military, have penetrated deeply into the information systems of US companies and government agencies, stolen proprietary information from American executives in advance of their business meetings in China, and, in a few cases, gained access to electric power plants in the United States, possibly triggering two recent and widespread blackouts in Florida and the Northeast, according to US government officials and computer-security experts..."
This discussion has been archived.
No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
Full
Abbreviated
Hidden
Loading... please wait.
Not Chinese (Score:5, Insightful)
No decent hacker would leave traces from his own machine when he could easily use a zombie network to carry out the attacks and collect information.
They keep claiming China, China, China.. I'm starting to think it's convenient for them to stick to that version for their own internal affairs.
Re: (Score:2, Insightful)
Re: (Score:3, Insightful)
Re: (Score:2, Troll)
China is a lot scarier than anything else on this planet right now, especially to the US. China should frighten the world though, there's no women for something like twenty-five percent of their male population and given the attitude of the Chinese culture towards women, they're not likely to find a bunch of willing mail-order brides. I mean people are still leaving their girl babies out to die of exposure in that country, you know what I mean?
But to the US it's scary for a different reason: the trade i
Re:Not Chinese (Score:5, Informative)
Other things involve the fact that when you see attacks from China, you usually get one of two kinds of hosts: you get a wildly unpatched Windows box that's being used as a bot, or you get a decently-secured (usually linux or *BSD) system that is doing some rather specific things to a specific target. And last of all, let's not forget that most of the seminal works on information warfare were written by Chinese military officers, and that it's no secret whatsoever that China actually does have a significant infowar capability. We have no rules of engagement that classify hacking as an act of war, so they can get away with it; what are we going to do, bomb them over it? They have the world's largest standing army, are a (increasingly) crucial economic partner, and we're already overburdened militarily with a two-front war where we've bogged down fighting insurgents. They do it because they know they can get away with it, and they're correct in that thinking.
Parent
Re: (Score:2)
Moreover, I'll be suprised and mildly appalled if the NSA and CIA
Re: (Score:2)
Re:Not Chinese (Score:4, Interesting)
Consider you have to hack into Us givernment servers with confidential data. Even if you're not an incredible hax0r, it's obvious that if they find out about you, you're totally screwed. So the first thing you do, the MOMENT you grab the data, is cut the PC off the network.
Then encrypt and record the data on a mobile media (CD, DVD, Flash, whatever), and securely format the PC or even just destroy the original HDD.
Even before this, you'd turn off all possible logging activity, lock up the security, stop unneeded services, so that you can be relatively secure during the attack.
How is it that so much evidence in logs and what not was found on the "source" machines. This is WAY too much evidence. The contrast between the Windows hacked machines and the linux machines may be just a decoy to get the investigators stop tracing right there.
If the boxes were so secure, how did they get in there?
Why were the Windows boxes having "logs" of where the data was sent and so on. What kind of trojan would log their own activity on the compromised machine?
And the million dollar question is: how the f*ck they tied the Chinese *GOVERNMENT* with a Chinese *HACKER*... In fact, the first thought to occur to a government trying to hack into US's servers would be to hire hackers from another country to do it.
All the "evidence" presented is incredibly shallow and inconvincing if you try and put yourself in place of the people who did the attack.
Add to this the constant FUD that US spread that Lenovo puts spying chips in ThinkPads and similar conspiracy theories. It's apparent US find China a convenient target to blame, just the way they did with Iraq after 9/11.
Parent
Re: (Score:2)
You know, the idea that Lenovo would put spying software/firmware in the system is an entirely logical one. It wouldn't even be the first time such a thing happened, although it would probably be the first time it happened on such a large scale.
Ever think that maybe people are paranoid because they know just how plausible it is?
Re: (Score:2)
The ThinkPC's were produced in China even before Lenovo owned the department. So are most other laptop brands, macs and even mp3 players, including iPod.
If you feel it's plausible, t
Re: (Score:2)
Read and weep. [engadget.com]
Re: (Score:2)
Re: (Score:3, Interesting)
How could one do this?
Isn't the first thing that a hacker does when they get their hands on a decent box is apply all security patches so that *another* hacker cannot get into it? What's the point of co-opting a wi
Re: (Score:3, Insightful)
Re: (Score:2)
"I Fart in Your General Direction..."
Since I live in that province, and work in the telecom sector, I think I'll ask the boys in R & D tomorrow if anyone knows of anyone knock, knock, knocking on USDCs' digital door...
lets not talk about the OS that was hacked .. (Score:2)
It's not as if they had access to the hackers computers. They would use evidence of portscans being run against their own computers.
"A few minutes ago, we received a complaint from the U.S. Department of Commerce [google.co.uk] about them being portscanned"
"Attacks on UK government systems using a then unpatched
Re: (Score:2)
Re: (Score:2)
UK.gov repels zero day WMF attack
"The attacks - initiated before [theregister.co.uk] Microsoft's patch against the vulnerability was released on January 5"
Re: (Score:2)
Re: (Score:2, Insightful)
This is why the United States will fall apart. We have two groups, one that se
Re: (Score:2)
WindowsUpdate (Score:3, Funny)
Re: (Score:2)
2) Most of US Govt computers run MS Windows
3) Bill Gates is in charge of MS
Therefore, Bill Gates is a Chinese Spy!!1!!!!11
Re: (Score:2)
A few select business leaders are allowed to run massive monopolies, labor disputes are settled with an AK-47, and there's no noisy press to berate your crappy products or your business leadership.
Sounds like Bill Gates might actually like the Chinese afterall.
Obviously (Score:2, Funny)
US Department of Commerce? (Score:2)
Re:US Department of Commerce? (Score:5, Informative)
If a foreign power could gain access to internal Commerce discussions it would give them some leverage in negotiations; and in the realm of international business a little inside info can go a long way.
Parent
Block China From the Firewall (Score:4, Interesting)
They'd just hit from South Korea then (Score:2)
Re:Block China From the Firewall (Score:5, Interesting)
When the Chinese accidentally rammed one of our surveillance planes was a great example. Bush immediately publicly blamed the Chinese overly-hostile pilots (who were, of course, at fault), and demanded back our plane and it's crew. The correct course would have been to call the Chinese first, and negotiate terms for getting our plane and crew back secretly. IMO, the Chinese can be far more reasonable if we agree to put on a face showing friendship, cooperation, and respect for each other. We could have agreed to publicly call it a freak accident, with no one to blame. That probably would have gotten our guys and maybe even the plane back far quicker.
So, I think changing the web site to shame the Chinese government would be a bad idea. Instead, we should work with the Chinese behind close doors to solve the problem. Of course, that wont end Chinese spying on the US, nor will it end our spying on them. In general, I feel that it is good for world stability when we know the truth about each other. Fear of the unknown can cause major problems (like WMD in Iraq).
Parent
Re: (Score:2)
I hate to break it to you, but the iraq invasion was not caused by lack of knowledge. It was actually the fact that Bush new that Iraq didn't have any meaningful WMD that allowed the invasion.
Countries with real WMD like North Korea dont get invaded. If you disregard the US rethoric, invading Iraq has sent the message that you need WMD in order to keep the americans at bay. That is why Iran and NK pursue them as fast as they can.
I'm sure this is intended to provide an excuse... (Score:4, Insightful)
Oh yeah, targeted indeed. (Score:2, Funny)
Oh yeah, I too must be specifically targeted then, because I've seen these sequences in my log:
Re: (Score:2)
--Rob
Export Control, and the Information Age. (Score:5, Insightful)
Why export controlled information? Think about how much money it takes to protect classified information - guards, safes, alarm systems etc., it's a lot of cash, and it's damn secure. Export controlled information doesn't enjoy those same protections, just export compliance waivers to sell or ship said products overseas. As an example: Say we have a dual use technology, both military and civilian use - like jet engines. We won't sell it to certain countries we compete with both economically, and militarily, but they will do their very damndest to steal it, either by forging state department waivers, lying, stealing, black-mailing, hacking - whatever it takes. Why do they want it? To equip their jets to compete with ours on the battlefield, or to sell, or maybe even find it's weaknesses to compromise if we ever went to war with them.
I'm willing to bet here that the network used to launch the attack was a University school network, which to most people seems pretty innocent - except that in China, all schools are state run and owned. Is it an academic institution, or an extension of the Chinese government? Likely both. In this instance, the Chinese government gets plausible deniability - they had no control over, or knowledge of any cyber attack. I'll don my tin-foil hat, and disagree with that assertion only because I'm jaded and cynical enough to know better.
Re: (Score:2)
http://www.americanintifada.com/2005/5/05-06.htm [americanintifada.com]
I've seen similar stories elsewhere. Have we in fact indirectly sold F-16 technology to the Chinese through Israel? Thanks.
Why is this info internet-accessable anyways? (Score:3, Informative)
> Information housed on the department's systems includes sensitive commercial and
> economic data on US exporters as well as data involving law enforcement records.
How many times does this have to be drilled into people? If you put something on an internet-accessable server, it *WILL* be accessed from the internet, and not only by "authorized personnel". For additional giggles, put the following key into a Google search...
inurl:.gov confidential "do not distribute"
The f***ing idiots who put sensitive government data on publicly accessable servers should be shot by a firing squad for treason.
Sensitivity of information? (Score:2)
If they had clear information and data policies, their data would all be on private networks, without access to the outside. Not doing so is just an invitation for crackers who love challenges.
First Strike? (Score:2)
And all we are going to do is sit on our hands and let them?
Re: (Score:2)
Invasion ? Nah (Score:2)
Re: (Score:2)
Re: (Score:2)
Block China (Score:2)
Re: (Score:2)
Hows this for your next headlines? "Mexico and Canada jointly attack the US commerce department."
Surprising and a step in the right direction (Score:2)
All the chinese need to do is put up a pron site. (Score:2)
That would probably be a better vector.
Plus they might make a profit while doing it.
People seem to forget.... (Score:3, Informative)
People seem to forget. The US does this kind of thing all the time. Not only to other countries but to their own Citizens. Remember we have all those three letter agencies that do this sort of thing all the time. So what is good for the goose is it not good for the gander? Or is it like torture these days? We gasp and cry when we see someone get their head lopped off on TV, and say "What savages!" Still it is ok for us to torture people for weeks on end because we are the good guys so this is good torture. Who is the savage really? The person that quickly puts and end to the pain of the enemy by whacking off their head or the person that makes their enemy suffer for weeks without end?
You see I come from a group of people that was once "Branded" savages by the US goverment. One example that even lives up to today. We were savages for taking scalps of our enemies. The part that is ALWAYS left out is we only took scalps in revenge for taking the scalps of our women and children for $5.00 a scalp. Payable by the US Goverment. Funny how that part of history is left out and still scalping is always related back to Native Americans even today. "Scalp'm Braves"
So are the Chinese really the bad guys or are they protecting their own assests? We're trying to pick their pockets all the time so why is it so bad when they try to pick ours?
The simple truth for people and goverments is you can't run around beating up other people all the time. Sooner or later someone bigger and badder than you will finally get tired of your shit and your continued assaults against them and in defense will either gang up with the other guys you are beating up on or if big enough on their own will turn around and beat the shit out of you.
The solution is simple. Leave them alone and they will leave us alone. It is all "Cause and Effect" Don't be the "cause" and you won't feel the effect. You can't blame someone for taking a defensive position to your offenceive moves.
The same rule of "cause and effect" applies to networks. You choose to run Windows that can access sensetive areas then YOU are setting yourself up to get hacked. I find it strange that the NSA would build something as secure as SELinux and the rest of the goverment not use it. Maybe not strange just stupid. The point is they have the tools to lock everything down and if they don't well too bad should have bought a better lock for the front door.
Re:To everyone who says it can't be China (Score:5, Insightful)
If you're a democracy and liberty loving citizen, then yes, the Chinese regieme represents oppression and injustice and stands against you and your way of life.
However, if you're a corporate shareholder, or one of their shills in public office, then the Chinese regieme represents untold potential to shaft billions and make billions in the process. Ergo, you'll want to keep them sweet.
Parent
Re: (Score:2)