Slashdot Mirror


US Inadvertently Enabled Chinese Google Hackers

Phrogman writes "In this CNN article by Bruce Schneier, he states that the US Government inadvertently enabled Chinese hackers access to Google's Gmail. The article states 'Google made headlines when it went public with the fact that Chinese hackers had penetrated some of its services, such as Gmail, in a politically motivated attempt at intelligence gathering. The news here isn't that Chinese hackers engage in these activities or that their attempts are technically sophisticated — we knew that already — it's that the US government inadvertently aided the hackers.'" Update: 02/22 20:26 GMT by S : As readers have noted, Schneier said not long after he wrote this article that he no longer thinks this is what happened.

14 of 103 comments (clear)

  1. Olllddd by Trailrunner7 · · Score: 4, Informative

    This is a month old, and Schneier has since backed off this assertion.

    1. Re:Olllddd by ratnerstar · · Score: 3, Informative

      Exactly. See: http://www.schneier.com/blog/archives/2010/02/more_details_on.html

      The rumor that China used a system Google put in place to enable lawful intercepts, which I used as a news hook for this essay, has not been confirmed. At this point, I doubt that it's true.

      Seriously slashdot, you're not even trying. Although, I have to say it was somewhat irresponsible of Schneier, who in general I have enormous respect for, to write an essay predicated on an unconfirmed rumor.

      --
      Just because you sold your soul to the devil that needn't make you a teetotaler. --The Devil and Daniel Webster
    2. Re:Olllddd by Lunix+Nutcase · · Score: 5, Informative

      Okay.

    3. Re:Olllddd by Anonymous Coward · · Score: 2, Insightful

      Backed off? Looks more like he retconned it.

      In his original CNN article he stated it as hard fact, omitting any mention of rumour or speculation.

      In his revisited article it is suddenly an unconfirmed rumour that he used as a newshook.

      If he actually had backed off and said something along the lines of "I thought this, I was wrong" he would have lost a lot less respect in my eyes.

  2. Re:Open letter to Chinese computer professionals: by Anonymous Coward · · Score: 4, Insightful

    Nice sentiment, but Capitalism isn't the problem. Crony Capitalism is the problem. The wealthy gamble with the people's money. If they win, they keep all the profits. If they lose, politicians make sure the taxpayer bails them out. This needs to stop.

  3. I think Bruce has taken this back... by Saint+Aardvark · · Score: 4, Informative
    Bruce appears to have taken back this assertion here:

    The rumor that China used a system Google put in place to enable lawful intercepts, which I used as a news hook for this essay, has not been confirmed. At this point, I doubt that it's true.

    The original essay, linked to in TFP, is dated January 23rd; the update I quote from is from February 8th.

  4. Re:Booga booga by TubeSteak · · Score: 2, Insightful

    I don't see how doing what is required to not be put in prison, is "inadvertently aiding" anything.

    You're an idiot if you can't understand how government backdoors into our (tele)communication infrastructure is at least as bad as backdoors resulting from coding mistakes.

    Hint: Both can be exploited by bad actors, but the government backdoors can also be exploited by anyone authorized to access the system.

    --
    [Fuck Beta]
    o0t!
  5. Probably social engineering by SnarfQuest · · Score: 3, Funny

    The chinese probably called up Googles secretary, and talked her into giving them their password (ChuckNorris).

    --
    Who would win this election: Andrew Weiner vs Andrew Weiner's weiner.
  6. Not only that, but even more relevant... by daveschroeder · · Score: 3, Insightful

    ...is the fact that 30-some other companies -- companies without any such lawful surveillance facilities -- were also compromised as part of this Chinese operation, and all accounts indicate it was via 0-day vulnerabilities in IE and JavaScript-enabled PDF documents, not via any mechanism to enable surveillance intercepts.

    This was Schneier using the incident as a platform to grind a political axe (probably based on a bogus tip), from which he wisely backed off.

  7. Opinion Section by rm999 · · Score: 2, Insightful

    Every article I have read that explains who committed the hacking, how, and why has been an opinion piece, and ends with "the opinions expressed in this commentary are solely those of X". I have no problem with this per se, but we should all take it with a grain of salt; Slashdot should preface it's headline with "Theory:" or "Opinion:".

    I prefer my news to be my news, and my conspiracy theories to be my entertainment.

  8. Re:Open letter to Chinese computer professionals: by node+3 · · Score: 4, Interesting

    Nice sentiment, but Capitalism isn't the problem. Crony Capitalism is the problem. The wealthy gamble with the people's money. If they win, they keep all the profits. If they lose, politicians make sure the taxpayer bails them out. This needs to stop.

    That's not "Crony Capitalism", that's just Capitalism. Capitalism done poorly, but still, plain old vanilla Capitalism.

    Crony Capitalism is when you get the contract because of who you know (which is still plain old vanilla Capitalism, actually, just done poorly in a different way).

    The problem isn't with Capitalism per se, the problem is with worshipping Capitalism as the highest ideal form of economic system. It's not. It's really good, but to blindly follow a rule of "Capitalism or bust" is doomed to failure.

    The banking system fiasco is a perfect example of pure Capitalism at work. The banks got your money voluntarily. They then "invested" it voluntarily. They then lost it, all completely voluntarily. Although it should have happened much sooner, *that's* when the government finally stepped in to halt this perfectly valid form of Capitalism. Had they not stepped in, we would very likely be in a depression right now, instead of being in an actual state of economic improvement.

    They should have stepped in sooner, and disallowed the high-risk gambling of something so precious as the savings and checking accounts of the American people. But the ruling party at the time has the motto of "Capitalism or Bust". The problem is they actually got both.

    Now, the standard Capitalist response would be that, sure, *some* banks will gamble, and they will fail, but the smart banks will not and they will outcompete their competition and rise to the top, making the market even *better* than before.

    The problem with that is that in some configurations, that doesn't really work. If it takes a long time for failure to occur. This is what happened with the banks, where it took about a decade for the house of cards to collapse. In the mean time, all the smart banks (of any significant size) *had* to follow suit with the risky practice for two reasons:

    1. They *were* being outcompeted by their competitors. Those that took the risks were seeing the higher rewards immediately. Those that were playing it smart were not, and their boards and shareholders where at their throats if they didn't also see similar earnings.
    2. The cancer of these bad investments where making their way all throughout the system. It's difficult to invest in anything without having it be involved, in some way, with this house of cards illusion.

    Sure, there were a few small institutions that weren't a part of this scheme, but they were hardly capable of taking over the financial burdens of the US.

    And once everything fell apart, *HUGE* amounts of American capital instantly disappeared. This left a huge vacuum, and as the *rest* of the economy began to collapse, the government, and specifically, the Federal Reserve, did the only thing it could to prevent full catastrophic failure. They filled in some of those gaps with printed money. This slowed the collapse and is in fact reversing it as we speak. But at a cost, a huge cost. The cost is inflation. With more dollars in existence, each dollar is worth less.

    This is all thanks to Capitalism. Not Crony Capitalism, not Any-Other-Qualifier Capitalism. Just plain old Capitalism. Some things should not be allowed to happen. *Not* because government knows better than you or I, but because some things are traps. Traps where a profit seeking Capitalism, done completely correctly, has no choice but to fall into. Some traps may be acceptable, if they get us to a better state of affairs, and maybe it means horse and buggy dealers have to lose out to the automobile industry, or electric cars replace gasoline cars, or the Internet topples the current music industry configuration.

    But some traps are far too devastation to be allowed to be sprung. And *any* trap which will inevitably lead to the decimation of our banking system one such trap. For the government to put into place restrictions protecting such a thing is *NOT* Communism. It's the government protecting the very fundamental building blocks of Capitalism.

  9. tired, failed argument by circletimessquare · · Score: 3, Insightful

    the banking system bubbled and bursted a number of times in the 1800s-1920s, because it wasn't regulated. so the government came in and regulated it. it bubbled and bursted again in 2007 because the government was hard at work REMOVING regulations for a decade before that

    and then idiots like you come along and go "look, the government is involved, so its all their fault"

    the only thing at fault in the government is idiots in the government who think the solution is less government

    you WANT heavy government regulation for a healthy functional economy. simple solid fact

    --
    intellectual property law is philosophically incoherent. it is your moral duty to ignore it or sabotage it
    1. Re:tired, failed argument by PPH · · Score: 2, Insightful

      I find it strange that the business community claims that capitalism thrives in a society with a strong rule of law. Except when those laws apply to themselves, of course.

      And I find the claim that the sorts of crimes that business tend to commit are somehow 'less serious' than those of common criminals. "I don't worry about someone approaching me in a dark alley selling unregistered securities", the saying goes. The problem is that, in the long run, its this sort of crime that does the most damage to society as a whole. The individual is less equipped to deal with complex white collar crimes than they are with simple thuggery. If Bernie Madoff had been a stick-up artist, odds are pretty good that he'd have been killed long ago by one of his potential victims. But due to the complexity of things like contract law and financial markets (something our government helped to create) the average person is helpless in the face of these scams. We need a strong regulatory infrastructure to protect us.

      --
      Have gnu, will travel.