Slashdot Mirror


China Says It Is the Target of US Hack Attacks

An anonymous reader writes "Officials at the Chinese Defense Ministry say hackers from the U.S. have been attacking Chinese military websites. 'The sites were subject to about 144,000 hacking attacks each month last year, two thirds of which came from the U.S., according to China's defense ministry. The issue of cyber hacking has strained relations between the two countries.' This follows recent hacks from people in China on high-profile U.S. sites, as well as a report accusing the Chinese government of supporting a hacking group. '[Defense Ministry spokesman Geng Yansheng] called on U.S. officials to "explain and clarify" what he said were recent U.S. media reports that Washington would carry out "pre-emptive" cyber attacks and expand its online warfare capabilities. Such efforts are "not conducive to the joint efforts of the international community to enhance network security," he said.'"

35 of 242 comments (clear)

  1. About time. by Anonymous Coward · · Score: 4, Insightful

    About time. And preemptive my ass. China has been making state-orchestrated cyber attacks for years now. There's a war in cyberspace, did they just think the U.S. wouldn't show up?

    1. Re:About time. by Anonymous Coward · · Score: 5, Insightful

      So it's wrong when they do it but not when the US does it, is that what you're saying?

    2. Re:About time. by Anonymous Coward · · Score: 5, Informative

      About time. And preemptive my ass. China has been making state-orchestrated cyber attacks for years now. There's a war in cyberspace, did they just think the U.S. wouldn't show up?

      So has the USA. More facets of the Stuxnet story are slowly being unearthed and it now appears the thing was already under intense development in 2005. It makes one wonder how widespread this kind of thing really is and how early the various intelligence services started doing it... Post 9/11? In the early 90s? Stuxnet was a pretty sophisticated piece of kit, especially in 2005. It makes these Chinese hack and snatch attacks look a bit crude. Stuxnet was only discovered when the spooks tried to make it 'more aggressive' to increase the infection rate and found out that it's really easy to make it too aggressive and when that happens and your spyware starts infecting civilian computers in large numbers you also blow the lid off the operation.

    3. Re:About time. by Baloroth · · Score: 2

      So it's wrong when they do it but not when the US does it, is that what you're saying?

      That depends. Self-defense is not wrong, so if the US is doing it in self-defense, then yes. Since we know the Chinese have been launching attacks against the US for many years now, it seems likely that the US is in fact doing it in self-defense, so yes, it is OK when the US does it but not when they do it. Ideally, neither one would do it, but in the case of war the aggressor is in the wrong (barring any other extenuating circumstances, like the defender attacking it's neighbors, or committing genocide).

      --
      "None can love freedom heartily, but good men; the rest love not freedom, but license." --John Milton
    4. Re:About time. by BasilBrush · · Score: 4, Insightful

      Self defense? He started it! No, he started it! No I didn't! Yes you did! It's the stuff of children.

      In Britain, we used to have a "War Office". in 1947 they changed that to "The Ministry of Defence". They still do the same thing. It's words. Propaganda.

      If you honestly think when China does hacking it's attack, and when the USA does it it's defense, you've fallen for the propaganda.

      Do you know what real defense to hacking looks like? It looks like like patching up vulnerabilities. It looks like using better encryption. It looks like not connecting things to the internet that don't need to be connected to it.

    5. Re:About time. by kilfarsnar · · Score: 5, Insightful

      No, in real life outside of liberal art college where everything is abstract, the truth is subjective, and we're all one happy global community of free thinkers (damn I have to go wash my mouth out now).

      No matter how much people think we are capable of rising above war, selfishness, ambition, pride, arrogance, etc the fact is that we all have those elements. They are embedded in our DNA. I happen to believe it was because of the fall, but regardless of how it happened I think anyone who is honest with themselves knows that what I'm saying is true. If you think you've risen above it, it's only because you've turned a blind eye to your true nature. Knowing that, and that the Chinese people are every bit as bent on world domination as we are, I'm going to go ahead and side with the guys whose soil I happen to be standing on.

      I believe it was Henry Ford who said that whether you think you can or cannot do something, you're right. I think your description may describe the world and humanity as they currently exist. But it forecloses the ability to improve. By resigning ourselves to a future of tribalism, and the chauvinism and hypocrisy that it brings, we miss the opportunity to realize that the boundaries of the tribe are arbitrary. We decide who is in the tribe an who is out. We could expand the tribe to include all of humanity. Or we can reduce it to our own neighborhood. It's up to us, not embedded in our DNA. We reap what we sow, and we get the world we choose.

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
    6. Re:About time. by CanHasDIY · · Score: 5, Insightful

      FUCK CHINA !!!! A bunch of needle dick nerds that steal American ideas.

      "Steal" implies that once they take the idea, the person who had it originally does not anymore. That's just silly hyperbole.

      No, China "borrows" American ideas, then figures out how to mass produce them cheaper than we can. It's called capitalism, it is the basis of both the Chinese and American economies. Hell, if anything, we should be proud - American capitalism won out over Russian communism, isn't that what the Joe McCarthy's of this nation always wanted?

      We should do all we can to destroy them.

      Yea, because scorched earth policies always work out for the best, especially when nuclear-armed states are involved.

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
    7. Re:About time. by RabidReindeer · · Score: 3, Insightful

      No, in real life outside of liberal art college where everything is abstract, the truth is subjective, and we're all one happy global community of free thinkers (damn I have to go wash my mouth out now).

      No matter how much people think we are capable of rising above war, selfishness, ambition, pride, arrogance, etc the fact is that we all have those elements. They are embedded in our DNA. I happen to believe it was because of the fall, but regardless of how it happened I think anyone who is honest with themselves knows that what I'm saying is true. If you think you've risen above it, it's only because you've turned a blind eye to your true nature. Knowing that, and that the Chinese people are every bit as bent on world domination as we are, I'm going to go ahead and side with the guys whose soil I happen to be standing on.

      If you believe in The Fall, then you are likely Christian. Christianity does not subscribe to the "eye-for-an-eye" approach to problem resolution.

      The USA is not - despite what some wish to think - a Christian nation, but the founding principles were based in large part on Christianity, which is why things like pre-emptive warfare, torture, and other extreme or retaliatory measures were always considered "un-American" up until 2001. We strove to be better than that and to provide a better example for others. To rise above our baser natures.

      Christianity notwithstanding, there is a pretty clear case to be made that endless retaliation Old Testament-style may feel good, but it simply propagates the damage down through generations forever. We have some pretty clear-cut examples in recent history on what happens in countries where they say "Enough is Enough" and stop trying to "balance the scales" versus countries that continue on the same old cycles expecting that one day things will be better.

      Having said that, however, there's no virtue in being a doormat, either. If the Chinese attack us, we should take defensive - and if necessary - offensive steps. I only desire that whatever is open and above-board where the world can see and judge. Don't pretend to false virtues, because once established as a liar, it's hard to be believed when you say anything later, even when it's true. Don't do things that you know you'll regret being discovered.

    8. Re:About time. by Shoten · · Score: 3, Insightful

      So it's wrong when they do it but not when the US does it, is that what you're saying?

      There's a difference between taking action against a military target and taking action against a civilian entity. When Country A has its military attack civilian and military entities of Country B, but Country B's military only attacks Country B's military, this means two things: 1, Country B is following widely-accepted norms around military action (and Country A is not), and 2, Country B is unlikely to be the primary (initial) aggressor. Counterforce actions have almost always been the realm of a defending nation, while countervalue actions have belonged to aggressive nations.

      --

      For your security, this post has been encrypted with ROT-13, twice.
    9. Re:About time. by fafaforza · · Score: 4, Insightful

      Defense also looks like trying to get your own data to see what the other side found out from their hacks of you. Satellite photos of the other side arming? Decrypting their communication? Would those not count as steps towards your own defense? Or would you just close your eyes and plug your ears, build the biggest wall you can, and call that defense?

      Besides, China's hacking has been very much in the news lately. How do you know this isn't just China's PR push? How do you know China isn't simply counting a hacked home box sitting on a cable connection as a governmental hack? Don't you think the US would be a bit better about hiding their source?

    10. Re:About time. by BasilBrush · · Score: 2, Insightful

      Defense also looks like trying to get your own data to see what the other side found out from their hacks of you.

      It might involve hiring outside hackers to probe your own defenses and report any breaches they find. But hacking into some foreign government computers to see what they have in case anything of what they have is yours - that's attack, not defense.

      Or would you just close your eyes and plug your ears, build the biggest wall you can, and call that defense?

      Don't confuse two different issues.
      1) What I, you, they or anyone else WOULD do or SHOULD do.
      2) The nature of the action. (In this case attack or defense).

      Just because you may think your side should do something does not make it defense.

      Besides, China's hacking has been very much in the news lately. How do you know this isn't just China's PR push?

      How do you know China's hacking being in the news isn't just the USA's PR push?

      What's the biggest example of cyber hacking by a government in recent years? Stuxnet. A worm designed to sabotage Iran's uranium enrichment centrifuges. Who's responsible? The USA and/or Israel. And it's attack. It's not defence, even if you happen to be on the side of the USA and Israel.

  2. On the contrary... by Anonymous Coward · · Score: 4, Insightful

    ...this kind of stuff will absolutely enhance network security. It's geopolitical stability that's in danger in the long term. But if we didn't destroy ourselves with nukes during the cold war, I think we'll come out of this one okay too.

  3. Really? by Sparticus789 · · Score: 5, Informative
    --
    sudo make me a sandwich
    1. Re:Really? by Sparticus789 · · Score: 3, Funny

      Those training methods are classified. Please redact your previous statements

      Sincerely,
      NSA

      --
      sudo make me a sandwich
  4. Pot, meet kettle... by Anonymous Coward · · Score: 5, Insightful

    Sorry, can't find it in me to feel at all sorry for them.

  5. Tor Nodes by dfn5 · · Score: 2, Funny

    U.S. claims Tor nodes were running on their machines and so not responsible.

    --
    -- Thou hast strayed far from the path of the Avatar.
  6. Ooooh Website attacks by Anonymous Coward · · Score: 2, Informative

    While China continues to loot the US.

    1. Re:Ooooh Website attacks by Anonymous Coward · · Score: 2, Insightful

      Did they manage to recover any of it?

  7. What if.. by houbou · · Score: 3, Interesting

    If the US is under cyber attack from China and China is under cyber attack from the US.. Anybody ever thought that maybe it's a 3rd party group doing the work? spoofing IPs? etc.. Sheesh.

    1. Re:What if.. by Anubis+IV · · Score: 4, Insightful

      Anybody ever thought that maybe it's a 3rd party group doing the work? spoofing IPs? etc.. Sheesh.

      Or maybe they hacked our Internets and burned down our firewall? Seriously, IP spoofing is not as useful as the movies make it out to be.

      Spoofing IPs is easy, but it's only effective in a few situations, such as when you're sending a message with no expectation of a reply (e.g. spam e-mail, DDoS attack, etc.). If you're trying to break into someone's system, you need to be able to get a response back, and that means providing an IP address you can be reached at to your target. Now, you may try to anonymize your IP address somehow, such as through the use of proxies, VPNs, and other such technologies that can allow you to hide behind or within someone else's system, or you may spoof an IP address of a zombie computer you control and can use to route return packets to you, but at some point, an IP address you control needs to be provided to someone else, otherwise you have no way of getting back a response, and that address can be traced.

  8. World is changing by Anonymous Coward · · Score: 3, Insightful

    This is a pretty good option for small nations who want to get back at larger ones.

    Step 1: buy server time with bitcoin from someone in China
    Step 2: hack some highly visible US companies with basic java exploits.
    Step 3: stand back and watch them hack each other for the next 10 years with professional grade stuff.

  9. Re:Big surprise by Anonymous Coward · · Score: 2, Insightful

    I'm sure it's a great consolation to be killed by your own government rather than someone else's.

  10. Moooommm, they're doing it toooooooo! by crazyjj · · Score: 3, Funny

    Don't make me have to stop this car and separate you two!

    --
    What political party do you join when you don't like Bible-thumpers *or* hippies?
  11. "military websites" by Culture20 · · Score: 5, Insightful

    hackers from the U.S. have been attacking Chinese military websites.

    Wake me up when the U.S. military is hacking Chinese civilian/banking computers or trying to SSH into everything.

    1. Re:"military websites" by Infiniti2000 · · Score: 3, Insightful

      For the record, it would be difficult for outsiders to discern the difference between true Chinese civilian and Chinese government-owned companies.

  12. China suing US by Grayhand · · Score: 5, Funny

    They're claiming an original art patent on spying on foreign governments using hackers.

  13. Big Difference by Anonymous Coward · · Score: 5, Insightful

    Even if this were true (and all signs point that it's just a knee-jerk reaction by China), what the Chinese are reporting is attacks against their military infrastructure from US IPs. This is way different than what the NYT and Mandiant claim the Chinese are doing which is leveraging the capabilities of it's cyber army (god I hate that term) against private corporations for the betterment of it's government controlled businesses.

    That's a huge difference. Yes the US is probably targeting the Chinese army but it sure as heck isn't specifically targeting Huawei and giving the information over to Cisco.

    Seriously China, grow up.

  14. Re:Me Too - Too Late by Antipater · · Score: 2

    George Washington could TOTALLY beat up Mao Zedong.

    --
    Everything is better with chainsaws.
  15. YAWN by benjfowler · · Score: 3, Interesting

    Wake me when American military hackers are targeting Chinese civilians.

    What's probably happened, is that they got all butthurt at being found out for the criminal hacking and economic espionage, went rummaging through their logs, found a ping sweep from some US IP and said "we're morally equivalent to you, we get hacked too".

    The Red Chinese *still* come across as idiots and piss-weak Third World losers. That hasn't changed in the slightest.

  16. Typical chinese propaganda strategy by Anonymous Coward · · Score: 4, Insightful

    The point of this announcement is to distract from the criticism they are receiving for launching hack attacks by painting a picture of everyone does it. So whether its true or not they would make this claim. I would believe they are receiving hack attacks from the US, but 2/3rds of them having a US origin sounds suspicious.

  17. Re:We really need cajones in this country by jadv · · Score: 2

    You mean, the USA needs drawers? Like, they have a lot of wardrobes or cupboards but no drawers on them? I believe the word you are looking for is COJONES.

  18. Re:Big surprise by gnasher719 · · Score: 2

    US government & corporate groups are hacking too. I cant wait for the "blah blah no proof" bullshit next.

    More likely that the Chinese count every spam email as "hack attack".

  19. coughBULLSHITcough by jon3k · · Score: 3, Insightful

    The Mandiant report links the attacks to the Chinese government. To a specific group in a specific location during business hours Beijing local time. The Chinese see attacks from US IP address and blame US.

  20. Re: Typical Political BS by XopherMV · · Score: 3, Informative

    This is typical political BS so prevalent in the US. When the Dems blame the Republicans for some issue, the Republicans say the Dems do it too. That's regardless of whether either statement was true or not. The point is to deflect blame and raise suspicion of the other side.

    Further, since we can't trust the media to actually dig into the actual truth on this or any issue, the Chinese likely will be successful in their efforts.

  21. Advancement of Network Security by sabt-pestnu · · Score: 3, Insightful

    > Such efforts are "not conducive to the joint efforts of the international community to enhance network security," he said.

    Perhaps statements like "we're just defending ourselves" are not productive towards network security. But cyber-attacking China? China cyber-attacking the US? You must be kidding.

    Even bacteria "know" that being attacked causes the greatest advances in defenses. What greater motivator can there be than an active and verifiable threat?