Slashdot Mirror


Google Attackers Identified as Chinese Government

forand writes Researchers, examining the attacks on Google and over 20 other companies in December, have determined 'the source IPs and drop server of the attack correspond to a single foreign entity consisting either of agents of the Chinese state or proxies thereof.'"

19 of 651 comments (clear)

  1. But... by Anonymous Coward · · Score: 4, Insightful

    It couldn't be them. China would never do anything wrong.

    That... or they'll just blame it on their status as a "developing nation" and that they shouldn't be held to the same standards as everyone else.

    1. Re:But... by a-zarkon! · · Score: 4, Insightful

      I am the last person to defend the Chinese government - but I read the article and it is not too clear on how they determined that the source is actually the Chinese government? Is it all based on the fact that the traffic is coming from certain IP addresses or is there (hopefully) more than just that to support the conclusion. Not advocating anyone trying to hack google, but if they did - pwning some unpatched pirated copy of Windows in China to use as a launching point wouldn't exactly be the worst approach to keep the heat from finding whoever was doing it.

    2. Re:But... by eldavojohn · · Score: 5, Insightful

      It couldn't be them. China would never do anything wrong.

      That... or they'll just blame it on their status as a "developing nation" and that they shouldn't be held to the same standards as everyone else.

      The original official notification of this from Google's Chief Legal Officer where he mentioned human rights advocates and human rights issues causes this to seem above the average security breach:

      Second, we have evidence to suggest that a primary goal of the attackers was accessing the Gmail accounts of Chinese human rights activists.

      I can understand how "We can't enforce copyright on software and music when we're busy lifting hundreds of millions of citizens out of poverty as a developing nation" works but I can't understand how "We need to arrest and persecute human rights activists because we're a developing nation" works.

      --
      My work here is dung.
    3. Re:But... by FlyingBishop · · Score: 4, Insightful

      They traced it to Chinese government IPs. Unless China comes out and says they were hacked, and are working with Google to find the nature of the attack, that's pretty ironclad.

    4. Re:But... by Nerdfest · · Score: 5, Insightful

      There's botnets running on government computers in most countries, China is probably not an exception. I'm not saying they didn't do it, just that IPs are not complete proof.

    5. Re:But... by geminidomino · · Score: 5, Insightful

      There's botnets running on government computers in most countries, China is probably not an exception. I'm not saying they didn't do it, just that IPs are not complete proof.

      Nor does it have to be. China's government is screwed either way. If they claim they are not the attackers, but were working from owned machines, then their "perfection" and "infallibility" are gone. Given the inherent insecurity in authoritarian cocknozzles, that will hurt them where they live.

      OTOH, if they don't cop to being hacked themselves, they have no other defense to being the source of the attacks.

      Either way, they've gotten taken down a notch (and I bet you they are PISSED about it), and I'm betting that our own cocknozzles in DC are hoping they opt for the second approach. Nothing heavy will come from it, but we'll get a few more of their chips in the big game.

  2. Re:can't say i'm surprised by Cornwallis · · Score: 5, Insightful

    Nothing.

  3. Re:Honestly by snowraver1 · · Score: 5, Insightful

    Bad China! BAD! Now give me more cheap, exploitable labor. AWWWE, how can we stay mad at you!

    --
    Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
  4. Write Google by WiiVault · · Score: 4, Insightful

    and tell them how proud you are that they finally took a stance befitting their "do no evil" stance. Better late than never, and they deserve our support for this courageous action. I for one have changed my mind about them significantly based on this single action alone.

  5. Consequences? by psherma1 · · Score: 4, Insightful

    If the EU can fine a US company for what amounted to unfair business practices, what should the US do to China? Debt? What debt?

  6. Re:can't say i'm surprised by jwinster · · Score: 4, Insightful

    This same thing has been said for a long time. The fact is in the majority of companies (Google/Defense industry excepted), is that security is the first area of a company to get hacked to bits. So I don't think it's so much a procedural issue as much as it is a fundamental problem with visibility. The only time security workers get noticed is when something goes wrong, because when nothing bad happens, it just looks to management like they're not doing anything yet taking a good portion of their budget. All that said, you're probably right, nothing will change.

    --
    Q.E.D.
  7. Re:No, Seriously... by fridaynightsmoke · · Score: 5, Insightful

    If a foreign government had attacked non-digital assets of any US corporation, you would expect some kind of formal reprisal. Maybe not an airdrop of Marines, but certainly something more than Hilary Clinton threatening to write a stern letter.

    What I have not doped out yet to my own satisfaction is whether the tepid response from Washington is the fault of the current administration, confusion regarding the digital nature of the breach and assets, or a little of both.

    I think it has something to do with Chinese savings now being the foundation of much of the western economy, and the fact that China is a major nuclear power.

    What China realised and the USSR didn't, IMO, is that they could forget the cold war and essentially buy the west with the west's own money.
    /crazy theory

    --
    This is a substitute for a clever sig that fits within the maximum number of characters.
  8. Where is the report? by sydneyfong · · Score: 4, Insightful

    I can't find the link to the actual report in TFA.

    I don't doubt that there's a strong suggestion that the Chinese government was somehow involved in the intrusion attempts mentioned by Google, and generally it isn't Google's habit to lie or deceive in these high profile matters.

    But two days after the Google announcement a report comes out saying "yes it's the Chinese government, yes it's them!"? Without obvious links to the actual report?

    I just sense it's just the "security companies" trying to ride the PR bandwagon. I mean, it's just on everybody's mind, and "somebody had to say it out aloud". So you cobble together related bits and pieces and make a grand pronouncement, making everybody happy. But does it prove anything? Not until we find the evidence. Until then it's all just hearsay.

    Besides, would you really base your conclusions on findings from "VeriSign's iDefense security lab"? From the company who tried to f*ck up NXDOMAIN?

    This is not the end of the story. I suspect more juicy bits will come through.

    --
    Don't quote me on this.
  9. Re:Our response is? by copponex · · Score: 5, Insightful

    1. a body of corporations (those 20 or so affected)

    Nothing of note. If they pull out publicly, they will continue to work with the Chinese through third parties. Shareholders don't give a damn about human rights or free speech. They just want their money.

    2. a nation

    They've already sold us poisoned toys and drywall. They've been using what amounts to slave labor for decades in order to provide cheap products. As long as the aforementioned shareholders are running things, you're not going to hear about the problems, and the American populace is too apathetic to sacrifice any amount of convenience.

    3. a global community of nations (UN)

    They'll pass some resolutions denouncing interference in the sovereign affairs of other countries. They'll slide in some language about Palestine or Iraq, and it will be vetoed by the US and Israel and maybe a pacific atoll that happens to have a bathroom.

    4. a cybercommunity

    Learn Chinese and troll MSN Spaces?

  10. Re:No, Seriously... by ground.zero.612 · · Score: 5, Insightful

    The problem with this theory of winning the new cold war simply by buying the opponent is that it doesn't, and can't, lead to any kind of victory. By investing in US debt China has bound themselves in an unholy blood pact to the U.S. economy. We on some level need them to continue pouring money into the economy to pay for poorly thought out foreign policy, they on the other hand need us to continue to prosper or all of their investments become worthless. If one side wins both sides win, if one sides loose both sides loose. The Chinese have already shown their realization of this in their effort to keep interest rates low to prevent inflation from devaluing their assets.

    Was that a long winded post for "The US is facilitating a Ponzi scheme, with China being the the bottom rung contributors."?

    --
    "Be prepared, son. That's my motto. Be prepared." --Joe Hallenbeck
  11. Re:No, Seriously... by shawn(at)fsu · · Score: 4, Insightful

    What did Google and the rest of them expect, they got in to bed with a country that has little to no regard for the privacy of its own citizens, did Google honestly think they would be treated any different? I surely don't feel sorry for them. Google compromised so much in order to "compete in the world economy", and now they are shocked that they got bit?

    The Scorpion and the Turtle.

    --
    500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
  12. Re:World War III - The Cyber War by WindowlessView · · Score: 4, Insightful
    > the USA CIA has not trained and sponsored the Chinese government.

    We can credit the corporations, the banks, and bonehead economists for this one.

    --
    Leave the gun, take the cannolis.
  13. Re:Overloards by phantomfive · · Score: 4, Insightful

    Western culture goes back to the ancient Greeks, Hebrews, Phoenicians, and even Egyptians. It is extremely likely that Western culture and Chinese culture share a lot of similar roots, and they definitely did a lot of cultural trading throughout the millennia. So clearly you are not referring to culture with your 'few thousand years' statement.

    As for the current government, it's only been around for sixty or so. During that time they killed millions with famine caused specifically by poor government policy (the great leap forward: people were literally eating their own children. It was horrible). Then they killed and tortured millions more, in the temper tantrum of the youth known as the Cultural Revolution. This was once again encouraged and caused by poor government policy.

    Furthermore, I don't think I need to go over all the things the government currently does that violates human rights. Let's just say when the torch came to San Francisco, protesters had to color coordinate so they could keep track of what exactly they were protesting.

    --
    Qxe4
  14. Re:Overloards by mosb1000 · · Score: 4, Insightful

    Sorry, I was about to make a really rude and sarcastic comment here, but I won't.

    Western culture began in the ancient Mediterranean thousands of years ago. You would find most aspects of modern western culture in ancient Greece, but a lot of it was around even before that. The major elements are government by representative democracy, the rule of law and emphasis on scientific legalism (I don't know what else to call it) in the fields of science and philosophy. Also the belief in the right to personal liberty for land owning males remains intact even today. Your claim that western culture is young is patently absurd.

    You're trying to make a comparison between the age of the USA and the age of eastern culture. That comparison makes no sense.