Slashdot Mirror
China May Have Hacked International Hague Tribunal Over South China Sea Dispute (thediplomat.com)
An anonymous reader writes: In July, the Permanent Court of Arbitration in The Hague conducted a hearing on the territorial dispute in the South China Sea between the Philippines and China. On the third day of the hearing, the Court's website was suddenly knocked offline. The attack reportedly originated from China and infected the page with malware, leaving anyone interested in the landmark legal case at risk of data theft. "By infecting the computers of journalists, diplomats, lawyers, and others who are involved or interested in the case, Chinese cyber units may be able to find out the names of people who are following the case and anticipate what their response might be if the court rules against China. For example, if Vietnamese or Japanese diplomats visited the website and their computers were infected, China could have access to internal documents and understand that country’s next moves over the disputed islands."
At least until it's sterilized
Gently reply
that's why the GCHQ/NSA/KGB each keep ~50k pwned/infected home routers distributed worldwide, to reflect an attack and make it appear like it came from $Eurasia - insert appropriate frenemy of the instant
http://toolbar.netcraft.com/site_report?url=http://www.pca-cpa.org
Apparently its Windows Server 2003. IIS 6
So the fix here is to upgrade/patch IIS or dump Windows.
Back in the real world, China's building an island. It's building an island in Philippines waters, with an airstrip (and no doubt military defenses) so it can claim a large part of the South China Seas as its own. Really these discussions are a side issue, since there is no middle ground possible only chit chat while China builds more islands. Do we act or capitulate? My guess is we'll do nothing due to weak leadership.
And as for malware on a web page, that is a side issue, nobody has reason to visit that website, and these talks won't have an outcome as everyone bows to China.
This post only demonstrates your misunderstanding of things (by talking about "home routers", for example, in this context). And yes, attribution in cyber is hard -- that's one of the most-discussed, fundamental problems of cyber.
You can also go down the Princess Bride-esque rabbit hole of saying that China knows that some people -- like yourself -- will make arguments that "it could be the US or UK making it look like it's China", and thus conduct an attack, or that we know that they know that we know that, and therefore the US did it, etc.
At some point, you have to apply Occam's Razor and ask: who benefits? And the most obvious, direct, and clear beneficiary of this kind of interference is China. Not the US, not the UK, not some imagined Western Illuminati cabal with China being innocent victims; no: China.
Seriously, it's pretty well established that states that have the resources to create "cyber-units" are going to hack systems for intelligence purposes. The recent Chinese-American agreement on hacking even recognizes that hacking for intelligence purposes is totes legit, so why do we frequently get these silly articles on Chinese hacking? It's nothing more than the Western media stirring up a cyber Red Scare. It's boring, predictable, and actually has the opposite effect of what these kinds of articles are meant to do. Instead scaring the public about Chinese hacking, these articles only highlight how bad the Chinese suck at hacking--they keep getting caught at it.
Remember,the razor cuts both ways, both to and fro. The why is never a cause, and preconceived enemies are not always to blame. China may have done it, and the fillipinese have just a good hackers in their pocket also. Could it have been a third party trying to get some south sea retribution? After all, pirates are not the only thing running in the area.
Decent point at the end but tired rhetoric and a sad misapplication of the scientific method to something that is not scientific at all. Also, anyone with half a brain knows the "attributed source" of an attack in the press means nothing. In fact, reading about such a thing in the press AT ALL means nothing.
So, why has the US allowed China to get ahead in the man-made island race?
No. You're limiting it too much.
"Who benefits" could be some 15 year old kid who just got world-wide attention (and the respect of his friends) for his "hacking". So don't limit the list of suspects.
It's not just nations.
It's not just nations and NGO's.
On the Internet, it is EVERYBODY.
I mean, yeah okay let's say they get access to the server and they can upload new files or modify existing ones. How can a server infect a godamn computer via a stupid Web browser? Are we talking about yet another Adobe Reader, Adobe Flash or Microsoft Silverlight exploit here? Are computers running Linux, BSD and OS X safe from this shit?
Fight for your bitcoins!
Nobody expects the Spanish Inquisition!
Fight for your bitcoins!
He'll stop them
not some imagined Western Illuminati cabal
Everything you had to say was spot-on until you sabotaged it with the above horseshit. No, of course the Illuminati isn't real, so repeat after me:
There was no Adam Weishaupt and the organization he was purported to have created certainly doesn't exist.
Take your Koolaid and feel free to give yourself an enema with it.
Remember,the razor cuts both ways, both to and fro.
So we need Occam's Safety Razor®!
Inevitable Chinese government response:
This webserver is in Chinese territory and always has been! There is no virus on our webserver! This 'Hague' organization has no claim to this webserver! The virus was put on the webserver as a warning to browsers from other counties to stay at least 12 links away! We advise the 'Hague'. side to think twice before action, not to conduct any rash action, and not to create trouble out of nothing!
See subject: I take a peek @ this a few times a day http://map.norsecorp.com/ & I found it on HEIMDAL security https://heimdalsecurity.com/bl...
* I like your use of common sense - it's using the old adage in my subject (except it's not about mere money - it's about control & power for those playing these games... worst part is, all it takes is 1 nation state to start pulling it, & the rest are FORCED into it too!).
(MOD HIM UP!)
REPOSTING THIS since the last time this was posted it was down moderated for NO justifiable reason http://it.slashdot.org/comment...
APK
P.S.=> Crazy world - So, I suppose it's best to try to be "sane in that crazy world" is about all we can do @ this point & to protect yourself as best you can vs. it... apk
Let's say a "3rd party" that NO way can stand up to China or the USA (or USSR etc.) wants them out of the way - get them to blow one another away thru devious bs that LOOKS like one or the other attacking...
All while the REAL troublemaker(s) sit back waiting in the wings to take the spoils (since there wouldn't BE a real victor between superpowers imo, only victims from everywhere).
* So, yes, per my subject - you have a point also (as does the GP & other fellow you + myself both responded to).
REPOSTING THIS since it was downmodded for no justifiable reason last time I posted it here http://it.slashdot.org/comment...
(Thanks for blowing those modpoints trolls - I can get around them easily & repost again since I have no ac limits that way + I've just saved someone else from being unfairly treated getting you to blow them & run DRY of them, lol...)
APK
P.S.=> I put up a tool you all may be interested in here -> http://it.slashdot.org/comment... that, for the past few weeks now @ least, does INDEED show Saudi Arabia (#1 by a BIG margin lately the past few weeks), China, USSR/Russia being the biggest 'aggressors'... funniest part is, the MOST ATTACKED is usually always the USA though (which IS why I said what I did here to daveschroeder (since his reasoning uses what I just said - who's most attacked, USA, & who gains? You can see who -> http://it.slashdot.org/comment... & as far as "attribution"? That's only a matter of time... when Chinese jets get downed with UNALTERED Lockheed Martin (or others) PROMS still reading Lockheed Martin, it doesn't take a brain to know China's pulling the shit though, despite all their "deny, deny, deny" bs))... apk
This post only demonstrates your misunderstanding of things (by talking about "home routers", for example, in this context). And yes, attribution in cyber is hard -- that's one of the most-discussed, fundamental problems of cyber.
Given that 'cyber' when not used as an adjective is effectively short for 'cyber sex', this all rather puts an interesting slant on things.
Just like the Russian and Chinese subs lurking off the data cables.
Totally.
That said, it's not like the US complies either.
-- Tigger warning: This post may contain tiggers! --
Yes, when cybering, it is a known issue that you have no idea if that is a male or a female on the other end of the keyboard.
APK likes to ask for responses to the same things over and over. Maybe he just likes the responses?
Good for China. They should be doing everything they can to non-violently gather intelligence that benefits their citizens. And I hope the NSA and CIA are also hacking everybody else. This is basic state craft. What deserves our ire is when the state (china) uses intelligence to benefit business interests and steal intellectual property for economic gain not China trying to gather intelligence for its government to benefit its citizens.
"The attack reportedly originated from China and infected the page with malware" but only if your running Microsoft Windows :)
Yes, when cybering, it is a known issue that you have no idea if that is a male or a female on the other end of the keyboard.
It's a male.
To have a right to do a thing is not at all the same as to be right in doing it
Did I read at some point someone made an extension that filters out apk? Or was that Bennett?