Slashdot Mirror
How the Code War Has Replaced the Cold War
An anonymous reader writes "After years on the defensive, governments are building their own offensive capabilities to deliver digital attacks against their enemies. It's all part of a secret arms race, where countries spend billions of dollars to create stockpiles of digital weapons and zero-day flaws. But is this making us any safer, or putting us and the internet at risk? 'Estonia is a small state with a population of just 1.3 million. However, it has a highly-developed online infrastructure, having invested heavily in e-government services, digital ID cards, and online banking. ... The attacks on Estonia were a turning point, proving that a digital bombardment could be used not just to derail a company or a website, but to attack a country. Since then, many nations have been scrambling to improve their digital defenses -- and their digital weapons. While the attacks on Estonia used relatively simple tools against a small target, bigger weapons are being built to take on some of the mightiest of targets.'"
I love when reality mirrors sci-fi
Since they seem destined to exist I hope that the cyber weapons being built have adequate safeguards against their misuse or accidental use.
Cyber warfare is worse than submarine warfare in terms of being able to identify an attacker. It provides the means for potentially anonymous devastating attacks. How will the world react to that?
Cyber arms control will be difficult to achieve, at best, maybe impossible.
Will a "Cyber Geneva Convention" be needed? No attacking hospitals, etc.?
How will organized crime and black hats fit into this framework? Will they be in the new era what pirates were in the 1700s - 1800s?
much of left-wing thought is a kind of playing with fire by people who don't even know that fire is hot - George Orwell
So, if the summary is true, Snowden has really hurt one side in this war with his revelations about foreign intelligence gathering. How much (if any) does this negate his whistleblowing about domestic surveillance?
Air gap.
wasn't so downright negligent in their race to adopt new technology, most of the problem would not exist.
"To those who are overly cautious, everything is impossible. "
They're trying to bring the cold war back. Just look at the crisis they're trying to manufacture in Ukraine. Rational people support Russians becoming a part of Russia while they want to start a war over it.
Stockpiles of exploits? Sounds like some reporter is out of his/her depth and can't understand the difference between physical weapon stockpiles and software vulnerabilities. Welcome to the new Yellow Journalism. FUD, FUD and more FUD.
they have information technology, now they need to make sure it's secure, and their fleet doesn't get blacked out at the start of a battle like happened to the Federation and the Romulans as soon as the Breen entered the war.`
Cybersecurity is very important, and doesn't need to be oversexed, but needs to be taken seriously on its own terms instead of being compared to weapons.
E-stoners.
If cyber "war" has replaced nuclear war then that is an excellent trade. Even John Kerry was waxing nostalgic for the Cold War the other day. What a joke! Are people that dumb? Have we so quickly forgotten what it was like to face a REAL threat of annihilation and actual global destruction? I would take another 9/11 over another Cuban Missile Crisis any day of the week. Let alone some computer hacking.
Instead of global thermonuclear war, we now have to worry about WoW going down. Seems like a good tradeoff to me.
... and let me tell you, if Cyber War replaces Cold War, they are winning this time...
If programs would be read like poetry, most programmers would be Vogons.
Is the army protecting us from this?
I.e. in the advent of a cyberwar will our army do anything to protect private infrastructure like the electricity supply or the banking system from harm?
Right now: No.
The book to read on this is "Cyber War: The Next Threat to National Security and What to Do About It" by Richard A. Clarke. A great read and very scary.
...shit
"It's all part of a secret arms race, where countries spend billions of dollars to create stockpiles of digital weapons and zero-day flaws."
In order to be effective, the vast majority rely on Microsoft Windows
Buffer overflows are one important class of vulnerability. They are also fairly easy to prevent /detect in new code. Use strncpy, not strcpy, etc. Static analysis can flag the dangerous constructs 99.9% of the time.
Java and C# are vulnerable to other, less readily identified vulnerabilities because key parts of the operations are hidden in the libraries and programmers are not accustomed to thinking about them. Both can easily have vulnerablities from memory management problems, but they can be harder to positively identify, especially for the typical .net programmer who doesn't normally think about memory management at all.
I'm having trouble finding the right words to express the issue. Imagine cars had a automatic steering mode that worked 99.9% of the time - there was rarely any need to touch the wheel. We can picture young people who learn to drive in these cars would have their hands full while driving, saying "why shouldn't I be texting and eating, the car steers itself". Then that 0.1% would happen - every three years they'd crash into something because they don't even think about steering. .Net memory management is just like that - it works well enough, often enough, that most .Net programmers don't bother to learn under what conditions it doesn't work automatically, and what their code needs to allow it to work as designed. Every so often, it causes .net programs to crash or corrupt data on accident. Beyond accidents, someone actively attacking memory management flaws in a .net application can easily cause damage, just as they can with errors in using the more direct memory management practices.
... mission-critical things like banking and providing essential government services should "play it conservatively" and not be at the forefront of technology.
OR, where it makes sense for them to be at the forefront, the "old way of doing things" should be kept around until after the "new" way has proven it is robust enough for the task.
Being "robust enough for the task" means, among other things, not having unacceptable levels of downtime under normal or abnormal-but-common conditions (such as DDOS attacks) and having an acceptable and well-tested contingency plan when the unexpected or expected-but-rare event happens (such as a large earthquake taking out your primary and backup data centers and most of your communications, leaving only your "hardened" disaster-response and other "can't-fail during a public emergency" systems mostly intact).
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Eat your words, Open SORES idiot https://threatpost.com/apache-...
Code war: What the US and the Soviet Union had during the nasopharyngitis outbreaks of the 1950s through the 1980s.
Knowledge is how to play a game, intelligence is how to win, wisdom is knowing what game to play.
Of course instead of laying off everyone in sight in favor of making everything "web-based" and "self-service" major corps and governments might try using people to deal with people but of course that cuts into bonuses and dividends...
https://flashcomindonesia.wordpress.com/2013/11/06/kursus-desain-grafis/
http://yro.slashdot.org/story/...
Baron Rothschild: We want to control the entire internet, all of the data (We own the NSA) , and all of the bandwidth.
Rothchilds' minion: But how do we take complete control?
Baron Rothschild: We need to convince the people to give up their rights, so let's put on scary press releases to the entire media and entertainment industry (which they own to manipulate public opinion)
Rothchilds' minion: So write a bunch of scary hacking stories to perpetuate a conflict?
Baron Rothschild: Exactly my little minion. Drum up a fake conflict we completely control, like the cold war, so we can manipulate the dumb fucks of humanity into giving up all of their rights to us.
Rothchilds' minion: Brilliant Mr Rothchild.
Baron Rothschild: Not exactly, our bloodline has been doing it for thousands of years. Manipulating the dumb sheep. Isnt it fun while we get rich every single time?
Imagine a 9/11 style attack, or a "poison gas in the subway", but at the same time they take out both the cell phone network and the most important radio trunking system used by first responders. The next day, the bad guys trigger the New York blackout.
Or, think back to how the US won the cold war - slowly, gradually, by economically outperforming the Soviets. The US is already the target of sustained, large scale attacks. If those attacks improve to the point that it costs 1%-3% of GDP in defense or damages, over ten years SIGNIFICANTLY changes the international balance of power.