6 ms·
For two hours, a large chunk of EU mobile traffic was rerouted through China
- onyva 7y agoAre there any other reports, maybe less inflammatory and based in facts. As we know, there are very bad people on both sides. Hard to take it seriously when the USA was the one meddling in other countries’ affairs for such a long time (Iran’s Mosadek government in the 50’s being my favorite peeve).
- tdb7893 7y agoPeople here are very critical of the US for similar things, too. I'm not sure what you're point is besides to try to derail the discussion?
- majia 7y agoInternet infrastructure is very complex and some minor telecom configuration mistake can easily cause non-optimal routing of packets. It seems that the accident is caused by an error by a Swiss data center, but somehow Chinese telecom is blamed.
- Xelynega 7y agoFrom my understanding it's an error from a Swiss data center that Chinese telecom is constantly exploiting, so blaming the Swiss telecom is blaming the victim for letting their guard down.
- toss1 7y agoPer TFA, while the initial 'seed' of the error originated in Switzerland, China Telecomm magnified and exacerbated it.
- rando444 7y agoBoth parties are to blame. The Swiss company is to blame for making the mistake. China telecom is to blame for not putting in place basic safeguards to prevent this. Typos happen, everyone makes mistakes. Luckily internet routing has a system to prevent mistakes from spreading across the internet. China is messing up this error protection system that everyone else is using by not participating. You can't stop people from making mistakes, but hopefully you can get the people who are supposed to be preventing the mistakes to do their job.
- SHAKEDECADE 7y agoHere is an earlier (~5 days) post with 33 comments: https://news.ycombinator.com/item?id=20123720 https://news.ycombinator.com/item?id=20123720 https://blog.apnic.net/2019/06/07/large-european-routing-leak-sends-traffic-through-china-telecom/ https://blog.apnic.net/2019/06/07/large-european-routing-lea... edit: Fixed the link
- tenpoundhammer 7y agoAn academic paper published by experts from the US Naval War College and Tel Aviv University in October last year blamed China Telecom for "hijacking the vital internet backbone of western countries." The report argued that the Chinese government was using local ISPs for intelligence gathering by systematically hijacking BGP routes to reroute western traffic through its country, where it can log it for later analysis. While some experts have criticized the paper, Madory is one of the people who stood by its technical accuracy -- albeit not by its politically-charged accusations-- confirming that China Telecom has rerouted western traffic through its network for years many times before. However, Madory couldn't say if this was intentional, or a technical or human error.
- toss1 7y agoEven if the magnification of the error was entirely do to incompetence on the part of China Telecom (vs malice/espionage), any data mis-routed must be treated as if it were fully logged and analyzed by China's security services for military, industrial, and political advantage. Another massive security hole from dealing with China. They are taking advantage of open western societies to strategically run rings around them.
- TaylorAlexander 7y agoThe US has been installing backdoors in network hardware for its own exploitation for years. No ones privacy has been respected by the NSA. The behavior of both sides is reprehensible, but this is absolutely not a case of mean ol China hurting us innocent westerners. Note that England and Australia are collaborators on the NSA’s attempts at total surveillance of the global web.
- CodiePetersen 7y agoWhile I agree with you assessment about western nations doing very similar monitoring techniques. It still doesn't excuse China. They all should be held accountable. In fact the focus on China should be used as an opportunity to bring it to light again. People seem to have forgotten. But we shouldn't ignore it because everyone else does it.
- CloudNetworking 7y agoOne more reason to TLS all the things although it might not be enough to discourage these practices. A VPN would not change much unless the exit node is ran by an ISP/Hosting provider not affected by the route hijacking.
- _ink_ 7y agoTrouble is, if you control the IP you can obtain a valid certificate from many CAs. BGP hijacking gives you control over an IP.
- CloudNetworking 7y agoYeah, good point. What I had in mind is this traffic being redirected for massive surveillance, traffic patterns, etc - which TLS would not fully solve, but it adds extra security or even partial obfuscation over your traffic patterns.
- OBLIQUE_PILLAR 7y agoI don't think you fully understand how BGP is currently used. None of this would happen if all ISPs had proper route filters.
- CloudNetworking 7y agoYou gotta tell me where do you buy your crystal balls mate, mine doesn't allow me to publicly assume the level of knowledge someone has over a protocol and infrastructure, specially when that person hasn't made a single comment about it. But going back to the main topic: None of this would happen if everyone was a nice person and we loved each other, either. Alas, it happens and you better add layers of defence.
- gnu8 7y agoIf we assume good faith, then they’re not committing espionage, they’re just incompetent to an extreme. Why then should we take the Chinese telecom industry seriously?
- iforgotpassword 7y agoIt was a Swiss company making a config error on their side, how is this incompetence on the Chinese end? One thing you could criticize them for is that they're one of the few larger ones that still don't use MANRS, which is most likely since they use BGP spoofing domestically for censorship.
- CodiePetersen 7y agoI recall reading that BGP leaks are common but most ISPs take steps from propagating them within a few seconds to minutes. The two hours is the incompetence I think he is referring to.
- ImprovedSilence 7y agoHow do we know it wasn’t a Chinese agent inside a Swiss company making the “error”?
- iforgotpassword 7y agoHow do we know it wasn't a US agent disguised as a Chinese agent inside the Swiss company making the error?
- sonnyblarney 7y ago"But instead of ignoring the BGP leak, China Telecom re-announced Safe Host's routes as its own, and by doing so, interposed itself as one of the shortest ways to reach Safe Host's network and other nearby European telcos and ISPs." This is not 'good faith'. This is the Swiss leaving their doors unlocked by accident and China walking in and taking a few pictures, purposefully.
- midgetjones 7y agoI've recently (in the last fortnight) started getting voicemails from local numbers, but in either Cantonese or Mandarin. I wish I understood the message; it might make it less unsettling in light of this story.
- skykooler 7y agoThey are scam calls targeting Chinese immigrants essentially saying "your visa has been revoked and you need to pay $$$ to avoid imprisonment". They are in Mandarin to target those who don't speak English and therefore can't ask local authorities for help.
- microdrum 7y agoIt was China Telecom re-announcing the bad routes <s>this</s> every time.
- EGreg 7y agoAs a side note, when was the last time yall saw a zdnet link? I remember Ziff Davis back in the day. But this was a blast from the past!
- enginaar 7y agoThis reminds me the saying "Sufficiently advanced incompetence is indistinguishable from malice"
- uoaei 7y agoThe cynic in me wants to switch that saying around.
- deleted 7y ago[deleted]