The Secret China-U.S. Hacking War? 107
bored-at-IETF-ntp-session writes "In an article at eWeek Larry Seltzer examines the supposed hacking war between the US and China. He surmises 'Even if you can't prove that the government was involved ... it still bears some responsibility'. He quotes Gadi Evron who advised the Estonians during the Russian attacks. 'I can confirm targeted attacks with sophisticated technologies have been launched against obvious enemies of China ... Who is behind these attacks can't be easily said, but it can be an American cyber-criminal, a Nigerian spammer or the Chinese themselves.' Seltzer concluded 'It's just another espionage tool, and no more or less moral than others we've used in the past.'" This a subject we've also previously discussed.
s/secret/formerly secret/ (Score:3, Funny)
Re: (Score:2, Insightful)
Re: (Score:3, Interesting)
It will indeed. Espionage is hardly immoral, when done by countries vs. one another. But, it is immoral to allow the collateral damage to get too high, to sweep innocent people into the fray, etc.
All science requires the articles of faith that the world
Re: (Score:3, Insightful)
That's of course not the case, but I don't think the issue of morality within espionage is remotely cut-and-dry.
Re:talking about espionage (Score:5, Insightful)
Re:talking about espionage (Score:5, Funny)
Re: (Score:1)
Re: (Score:2)
Conflation has begun. Run for your lives!
Re: (Score:1)
Like it was ever secret... (Score:1)
Not suprised (Score:5, Funny)
Re:Not suprised (Score:4, Insightful)
Also, FTA:
Re: (Score:2, Funny)
Re: (Score:3, Funny)
geez.. some people.
Re: (Score:1, Offtopic)
Re: (Score:1, Offtopic)
(BTW mods, this one is OffTopic. Thanks.)
Re: (Score:2)
Cheers.
Re:Not suprised (Score:4, Interesting)
Yes I understand your scepticism. I used to think along same lines until having had looked at Snort logs.
Re: (Score:3, Informative)
It's well known that China has been spying on us since we periodically catch them and they make the news. It's probably safe to say that a lot of it is quietly supported by the Chinese government or at least they turn a blind eye to it. Much of the espio
Re: (Score:2, Interesting)
Re:Not suprised (Score:5, Funny)
For kicks, I opened up my secure log (just on my home computer, which only has ssh enabled)...
221.120.210.42 - Pakistan
194.19.140.202 - Denmark
201.251.126.210 - Argentina (who tried to log in with "fluffy", among others...)
203.90.124.69 - India (and from a company my company contracts with! small world)
80.55.178.206 - Poland
61.115.238.121 - Japan
218.95.228.154 - China! Finally.
66.166.72.206 - California
88.148.10.32 - Spain
87.204.60.174 - Poland (again! WAR! WAR!)
222.233.120.3 - Korea
212.99.92.150 - France
60.248.103.66 - Taiwan
221.6.5.237 - China! Again! But it's the guy who starts with "fluffy" again...
China has tried to hack me twice, along with Poland. We must be having a secret war! I'm going to declare war on California, too. You'll see my wrath in the form of an earthquake sometime in the next 30 years.
Proxies (Score:1)
Just playing devil's advocate.....
Re: (Score:2)
Going through the logs, you can see patterns emerge - so it's either the same scripts or the same attackers working through many different locations.
Re: (Score:2, Funny)
I can confirm this, too. I work for NetCraft.
Re: (Score:2, Insightful)
More than hacking (Score:1, Flamebait)
Re:More than hacking (Score:5, Insightful)
Note that this wasn't a "hacking war," and it wasn't a "Russian attack". It was a 20-year old Estonian kid with a botnet [infoworld.com]. More details here [techachino.com]
Re: (Score:2)
Re: (Score:2)
Actually, a 20 year old Russian kid who happened to be born and live in Estonia. One of the problems of using the same words for an ethnic group and a nation.
Good point. Here in America, we would call somebody who was born in Estonia, raised in Estonia, and lives in Estonia as "Estonian," but it does confuse things, since in much of the rest of the world, identity really doesn't come from where you're born and raised. (The apex of this was Nazi Germany, of course, where people of Jewish descent whose families had been in Germany for a thousand years were labelled "stateless persons"-- oops, no reference to Godwin's law intended. (But then I don't think I tr
Re: (Score:2)
Setec Astronomy (Score:1)
China ... is evil ... (Score:2, Insightful)
Then again, both Hillary and Obama have said they'd renegotiate NAFTA if elected (and basically blaming canada and mexico for their problems) - which is already skewed in the
Re: (Score:2, Insightful)
Re: (Score:2)
Re: (Score:3, Insightful)
China is the cause of the US problems as its lending the US money so that the US can afford to continue to buy stuff.
I have an idea, maybe the US is to blame for being such a consumer driven society and wasting all their money on useless shipt that they hardly ever use and dont really need.
I don't think that's a fair assessment (Score:3, Insightful)
1) Taxes (35%)
2) Rent (17%)
3) Food (11%)
4) Tythe (10%)
5) Transportation (7%)
6) Student Loans (7%)
7) Therapy (6%)
6) Bills (4%)
7) Other stuff (3%)
Most of the stuff I buy from china comes from the "other stuff" department, which is my smallest expense. I think this is also a pretty typical for other Americans. I don't think it's fair to say that I or people like me waste "all their money on useless shipt that they hardly ever use and dont really need."
A bigger contributor to the trade
Re: (Score:2)
1) Taxes (35%)
2) Rent (17%)
3) Food (11%)
4) Tythe (10%)
5) Transportation (7%)
6) Student Loans (7%)
7) Therapy (6%)
6) Bills (4%)
7) Other stuff (3%)
Drop that whole "tythe" thing and you'd have a boatload of cash for blow and hookers. :D
-jim
Re: (Score:2)
If your theory is correct the spending pattern for a typical american might look something like:
1) Taxes (35%)
2) Rent (17%)
3) Food (11%)
4) Blow and Hookers (10%)
5) Transportation (7%)
6) Student Loans (7%)
7) Therapy (6%)
6) Bills (4%)
7) Other stuff (3%)
Re: (Score:2)
Re: (Score:2)
Who the hell goes to therapy?
I live in southern california.
And "most" christians unless your a mormon don't actually give 10%
I'm not mormon, neither are most of my friends who give 10%. Of course the church does not require it, but how is the church supposed to raise funds and operate without it?
nice to claim on taxes though.
I'm not sure why to government lets you write off charitable contributions. It seems to me that it's still income. They should only let you write off business expenses. Tax law is fubar.
Re: (Score:2)
David Ricardo argued along a similar line in his theory of comparative advantage. Suppose the Chinese can produce cars at half the cost of American cars and can produce computers
Re: (Score:2)
Re:China ... is evil ... (Score:5, Insightful)
There are economists who believe China has a bubble economy built on credit and corruption. So far they've done well for themselves but it's only a matter of time before they hit a downturn. And when that happens they're going to have serious problems with civil unrest. My concern is that when that happens the government will quickly start blaming other nations for all their ills.
Believe me, Chinese people have a lot to be resentful of. All that economic growth has been great, but many people have suffered greatly for it. Thousands, if not millions have lost their homes to what amounts to eminent domain to make way for new development. People have gone off to work only to return to find their homes demolished. Supposedly the government has passed property rights laws but they don't seem to have amounted to much of anything. And let's not forget how they control free speech, although people seem to have largely forgotten about that in the midst of this economic boom.
And they may be right in a few regards. There is already the big issue of low-quality goods coming out of the country. Just recently a number of people in Japan died from having eaten tainted food from China. Sales of Chinese foods have dropped dramatically. Quality clearly isn't improving but it's getting more expensive to manufacture in China. As infrastructure improves in places like India, Vietnam and elsewhere American, European and Japanese companies are going to look to those nations for their manufacturing needs.
From personal experience, a few years ago in Taiwan everyone and their grandmother was chomping at the bit to do business in China. Many gave it a try and most failed. Nowadays, there's still a good deal of interest, but people have are a lot more tentative. China's market is over-saturated with competition and business is too cutthroat. And that's to say nothing of all the corruption.
I'm not saying there aren't problems with the American economy, because there are. But the fundamentals are still good and we're on a somewhat more stable ground. This current downturn is due to speculation more than anything. Gasoline prices are high because of the weak dollar, and more importantly because of speculators. Some economists are saying that oil's value should be at about $70 per barrel, not $100+. Demand has actually dipped in the US. The problem is who the hell knows when a correction is coming. Speculation has led the housing and stock market to the situation we find ourselves today. Look at all the people who overpaid for homes because they expected to continue seeing these absurd increases in values. And that was despite the fact that we were being warned of the housing bubble.
Now, on to the topic at hand, some people have this tendency to criticize the US for it's supposed double-standards regarding this sort of thing. How can the US government complain about China doing the very thing they themselves are engaged in?
Well, here's my thinking, I live in the United States, not China. China is free to do whatever they like, of course, but I want my nation to have the upper-hand economically and militarily. I'm not saying the US should go around pushing everyone around with impunity, nor do I think the US should be invading every second country who looks at them the wrong way.
One thing China does have is a lot of nationalistic pride. Even when they're critical of the government they still manage to have a lot of ambition. When they set their minds to doing something they get it done and don't get mired in all kinds of nonsense like is so often the case here. I think that's admirable and something sorely lacking in the US.
Re: (Score:2)
How would you know if they didn't?
I guarantee you this: lower the firewall, end all censorship and crackdowns, set up livejournal.cn, and then you'll see what they really think of their country and how it is run.
Re: (Score:3, Interesting)
Wiki tells a different story - about the Chinese Dumpling poison thing in Japan check this out:
http://en.wikipedia.org/wiki/Food_safety_in_the_People's_Republic_of_China#Tainted_Chinese_dumpling [wikipedia.org]
http://en.wikipedia.org/wiki/Chinese_cardboard_bun_hoax [wikipedia.org]
Re: (Score:3, Informative)
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Not that it's bad that they were first to get there. I think
Re: (Score:1)
I love
Re: (Score:1)
And the US is of course totally innocent (Score:4, Insightful)
Now you're INTENTIONALLY duping? (Score:3, Insightful)
I'm thinking... (Score:4, Insightful)
Re: (Score:2)
Re: (Score:3, Informative)
Being in InfoSec where I deal with this stuff a lot, I'd say you're over 99% right on the first part. And about 80% right on the second.
The organization I work for sees a huge number of simple scans and lame intrusion attempts on a daily basis. A handful appear to be more sophisticated, and are sourced from a number of interesting locations: Mostly compr
Re: (Score:1)
http://securityprocedure.com/ [securityprocedure.com]
Reason Behind the Attacks (Score:5, Funny)
Re: (Score:2, Insightful)
Re: (Score:1)
I'm tired... (Score:3, Funny)
Well ... (Score:4, Funny)
2) Blaming "China" is like blaming "America". I mean. How stupid is
oh
they do?
on Slashdot??
never mind
Lax security... (Score:1, Flamebait)
The US Government, the most incompetent show on earth!
Re: (Score:1)
Sounds like somethings Dr Evil would say.
Russian attacks? (Score:3, Informative)
china weakness: limited external links (Score:2)
Secret or Ignored? (Score:5, Insightful)
If I were going to conduct surgical attacks against a government from within a large IP block, I'd allow others with less ambitious nasty plans to use it, and hide my activities within the flood from them, like hiding an artillery attack within a thunderstorm. I have little doubt that there are "Nigerian spammers" and such using Chinese machines. That doesn't preclude their government doing it -- to my mind it indicates the probability.
And they wouldn't want reports to be entirely absent either. Taking over or subverting the infrastructure that carries content is as much a part of psychological warfare as is the content itself. Subversion of the medium is also the message, and that must become known to the system's owners and their allies. It causes mistrust in the system, its owners, and any messages to come from them. The general public wouldn't care or pay attention, but those who did care would get the intended message. And you have.
This is the war that the General who recently answered
Re: (Score:2)
>> I'd especially enjoy it when I found that the majority of "combatants" were somewhere below my own level of expertise, though somewhat higher than script kiddies
> No offense, but it sounds like you're applying for the B squad.
I'm not applying for anything. I put in my time.
> If you remember Titan Rain, you'd know that the Chinese are fielding some high level talent.
Yes, as I said, I put in my time. Some. Fairly high level. There's a lot more talent with generally more experience availa
Sorry, I didn't mean to start a cyberwar... (Score:1)
Here's a link (Score:2)
http://www.apnic.net/apnic-bin/ipv4-by-country.pl?country=cn [apnic.net]
Just stick them in your firewall to drop all packets and go on with life.
Re: (Score:1)
Related story (Score:2)
does anyone bother to backup their firmware, and do a quickie md5 sum vs it and the version that it's supposed to be on the manufacturer's site? that's how i caught a Working Bios virus that blackhats got on my machine... and two of my parents computers... there
How do we know it's the Chinese? (Score:5, Interesting)
One of the comments above mentioned that "just mentioning the words 'network security' in China can land you a lot of jail time." If this is correct, then it seems to me that there are probably a lot of unsecured networks and hosts in China. If that is the case, then how do we know that it is really the Chinese who are trying to hack DoD and business networks rather than some thirteen year old script kiddie in Hackensack who just happened to find a way into a computer in some backwater school in China?
Just because you are seeing hits from Chinese IP addresses doesn't mean the Chinese are behind it. The real question is "how deep does the rabbit hole go?" Unfortunately, there isn't really any way to know unless you hack the originating IP(s) yourself.
Re: (Score:2)
Same thing with wireless networks.
Again with the Anti-China? (Score:1)
A few observations (Score:2)
Secondly, I think espionage is less of a national venture these days and more of an international business. The nationality of a spy may matter less - an Iraeli spy, say, might spy on America and sell to whoever bids the most; China, Russia, UK, whatever. Or perhaps even the U
My vote is for the Nigerian Spammers (Score:1)
I am Mr. Daniel kankan, one of about hundred talented American IT professionals, who at any time are working overseas in secret. Please don't treat this mail as spam but rather give it the priority it deserves because I only resorted to mailing you when my attempt to reach you on ___________ failed due to poor network. I have just returned from the remote deserts of Oman where I swapped the swamps of the Niger Delta eighteen months ago, working for the Software Development Oman Company in tem
Or it could be the CIA...... (Score:1)
I'm one of the attackers from China... (Score:1)
Yes, I was learning Python by myself and wrote a script using the HTTPLib package. Purely for an exercise. The script just greps information from a Web server's HTTP response header. By careless misconfiguration the script started an infinite loop! And I was banned by Slashdot (yes I was connecting to Slashdot, my favorate Website). I sent an Email to expain and I'm here again.
Your missiles, please.
PS. This is really terrible to admit. In punishment to the troublemaking script I mv'ed it to /dev/null. Tha