4 ms·

We're getting closer and closer to cyber and kinetic warfare intermingling regularly. Attacking a US company may become akin to attacking a US citizen. State ba

We're getting closer and closer to cyber and kinetic warfare intermingling regularly. Attacking a US company may become akin to attacking a US citizen. State backed or State sanctioned actors will be looked at as an agent of the state itself. Hacks will lead to proportional responses from governments against governments. It's not much different than our military and contractors protecting domestic oil company interests abroad.

mc32 5y ago
What do you do in the case the actor is using a weak state as cover? Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it?
- midev 5y ago
  > Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it? Work with law enforcement agencies in those countries to apprehend the person. If the country won't cooperate or shields the attackers, then sure, a drone strike could work.
  - smhost 5y ago
    Extra-judicial executions for unauthorized information access is not the right way to conduct yourself as a nation.
    - midev 5y ago
      Hard disagree. First, you downplay "unauthorized information access". Foreign adversaries have targeted our industrial SCADA systems, which can lead to death and destruction. Second, there's no moral absolutes that dictate how a nation should act. I value the lives and information of my family and friends more than I value the lives of someone attacking them. Don't like it, don't attack... :shrug:
      - smhost 5y ago
        Yeah, let's drone strike Edward Snowden because you have a small dick. Fucking moron.
        midev 5y ago
        It's kinda funny that when talking about foreign adversaries attacking the United States, you went to Edward Snowden. You said it, not me.
        smhost 5y ago
        Now that the American empire is going to shit, how are you going to get your dick hard without being able to murder people just because you feel like it?
        midev 5y ago
        > how are you going to get your dick hard without being able to murder people just because you feel like it What's your obsession with my penis? This is your second comment about it. I ignored it the first time, so you try harder the second time? You're a creepy dude.
- whatshisface 5y ago
  >* Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it?* Here's the plan: invade Afganistan, and eventually find the guy years later in a compound in Pakistan.
  - mc32 5y ago
    And then multiply that by all the organized crime hackers out there... lots of bogged down slogs... so maybe let's find ourselves another way.
- LinuxBender 5y ago
  This will be an unpopular opinion, but I would require all allied countries to enforce bcp38/rfc2827 to prevent spoofing. Any country not adopting this would be null routed by all other countries. When a country does not police it's own traffic to make a serious effort to stop known criminal entities, all other countries would null route or remove BGP advertising the IP space of that country until they got their act together. This would create some financial incentive to take out the trash. The null routes or filtered BGP advertisements would be temporary unless a country repeatedly violates policy. This puts the onus on each country to take crime seriously in their own jurisdictions. Side stepping the blocks would result in sanctions as a starting point. I do realize and acknowledge this could potentially lead to privacy issues, as countries would have to enforce identity to at least get internet transport level access. There is also the matter of corruption. Within a country, the same methods would be enforced. If for example, T-Mobile allowed unfettered abuse of its pre-paid wireless cards as they do then the countries they reside in would de-list them from BGP advertisements. The government would have legal immunity in doing so. Or if AWS, DigitalOcean, Linode, OVH, etc... allowed people to abuse their VM's, same deal. De-listing might start with a region then become global depending on the level of abuse and how seriously the company responds and takes action to take out the trash. In my humble opinion, anything short of this would just be meaningless political posturing and the problems would continue to grow and escalate.

mc32 5y ago

What do you do in the case the actor is using a weak state as cover? Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it?

midev 5y ago
> Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it? Work with law enforcement agencies in those countries to apprehend the person. If the country won't cooperate or shields the attackers, then sure, a drone strike could work.
- smhost 5y ago
  Extra-judicial executions for unauthorized information access is not the right way to conduct yourself as a nation.
  - midev 5y ago
    Hard disagree. First, you downplay "unauthorized information access". Foreign adversaries have targeted our industrial SCADA systems, which can lead to death and destruction. Second, there's no moral absolutes that dictate how a nation should act. I value the lives and information of my family and friends more than I value the lives of someone attacking them. Don't like it, don't attack... :shrug:
    - smhost 5y ago
      Yeah, let's drone strike Edward Snowden because you have a small dick. Fucking moron.
      - midev 5y ago
        It's kinda funny that when talking about foreign adversaries attacking the United States, you went to Edward Snowden. You said it, not me.
        smhost 5y ago
        Now that the American empire is going to shit, how are you going to get your dick hard without being able to murder people just because you feel like it?
        midev 5y ago
        > how are you going to get your dick hard without being able to murder people just because you feel like it What's your obsession with my penis? This is your second comment about it. I ignored it the first time, so you try harder the second time? You're a creepy dude.
whatshisface 5y ago
>* Send a surgical strike into a country that aside from having the presence of the bad actor had nothing to do with it?* Here's the plan: invade Afganistan, and eventually find the guy years later in a compound in Pakistan.
- mc32 5y ago
  And then multiply that by all the organized crime hackers out there... lots of bogged down slogs... so maybe let's find ourselves another way.
LinuxBender 5y ago
This will be an unpopular opinion, but I would require all allied countries to enforce bcp38/rfc2827 to prevent spoofing. Any country not adopting this would be null routed by all other countries. When a country does not police it's own traffic to make a serious effort to stop known criminal entities, all other countries would null route or remove BGP advertising the IP space of that country until they got their act together. This would create some financial incentive to take out the trash. The null routes or filtered BGP advertisements would be temporary unless a country repeatedly violates policy. This puts the onus on each country to take crime seriously in their own jurisdictions. Side stepping the blocks would result in sanctions as a starting point. I do realize and acknowledge this could potentially lead to privacy issues, as countries would have to enforce identity to at least get internet transport level access. There is also the matter of corruption. Within a country, the same methods would be enforced. If for example, T-Mobile allowed unfettered abuse of its pre-paid wireless cards as they do then the countries they reside in would de-list them from BGP advertisements. The government would have legal immunity in doing so. Or if AWS, DigitalOcean, Linode, OVH, etc... allowed people to abuse their VM's, same deal. De-listing might start with a region then become global depending on the level of abuse and how seriously the company responds and takes action to take out the trash. In my humble opinion, anything short of this would just be meaningless political posturing and the problems would continue to grow and escalate.