13 ms·
North Korean internet downed by suspected cyber attacks
- iso8859-1 5y agoI thought the internet would route around failures. Why does that not apply to North Korea?
- brimble 5y agoIf you are the failure, no, it does not. [EDIT] I immediately saw that that could be read as a swipe at NK, which wasn't how it was intended. Just that if you're on the wrong side of a failure, you're not gonna be able to "route around the failure".
- a_t48 5y agoI’m not so sure this applies with centralized tracking/filtering.
- theandrewbailey 5y agoNorth Korea is poorly connected to the rest of the internet, by their own design. I know that a few years ago, there was only one link to the outside; not sure if that's changed, but I have no reason to think that it would have.
- RL_Quine 5y agohttps://bgpview.io/asn/131279#upstreams-v4 https://bgpview.io/asn/131279#upstreams-v4 https://bgp.he.net/AS131279#_graph4 https://bgp.he.net/AS131279#_graph4 They have two peers, AS134544 in CN and AS20485 in RU.
- c0nsumer 5y agoAm I seeing that right in that .nk only has four /24s?
- RL_Quine 5y agoAll four announced prefixes are part of 175.45.176.0/22, for a total of 1024 IPv4 addresses.
- hhh 5y agoYes. If I recall correctly from when I used to follow NK related news, there’s enough coverage from a subset of Chinese satellites from satellite ISPs that there could be viable connections made there. No way to say if they are being used for this or not, though.
- Fordec 5y agoIt routes around failures, the timelines for delivery are not promised though.
- Jtsummers 5y agoThe ability to route around failures is predicated on having a sufficiently high degree of interconnectedness. Even your home network won't magic up a new connection if someone decides to cut your cable line. NK's network is poorly connected to the rest of the Internet, and so there is limited ability to "route around failure".
- jaywalk 5y ago> Even your home network won't magic up a new connection if someone decides to cut your cable line. Well then wtf am I paying for this LTE backup connection for? (joking, of course)
- user-the-name 5y agoHas it ever actually done that?
- jaywalk 5y agoLiterally all day, every day.
- deleted 5y ago[deleted]
- bravetraveler 5y agoPretty much constantly [edit: for those who take the time to implement], a common approach is called anycast. You essentially announce your address at two (or more) geographically distinct places, and BGP routing 'magic' can get you to the closest (or sometimes only responsive) one
- woodruffw 5y agoThe Internet is "failure-resistant" in the senses that (1) individual networks going down don't take down the entire Internet, and (2) networks that peer with other networks can still be routed to so long as at least one route is still online. North Korea's failure demonstrates both of these properties: the Internet is still online, and the routing failure has manifested because all of their peering routes are down.
- hirako2000 5y agoand the aws/Facebook recent cases demonstrate that the Internet is slowly loosing that property. People called me up and asked me why the Internet was broken. they normally use apps to communicate, but they thought the Internet was entirely down...
- woodruffw 5y agoThis is pedantic of me, but: the Internet isn't losing that property. Social groups on the Internet are consolidating their behavior onto individual networks/ASes, which then go down. It's a social and political problem, one that people can solve by changing their behavior.
- bagacrap 5y agowhy is the assumption a ddos (external?) as opposed to some internal cause such as incompetence or power loss
- ivanbakel 5y agoThis is answered in the last sentence of the post: >During the incidents, operational degradation would build up first with network timeouts, then individual servers going offline and then their key routers dropping off the internet, Ali said. "This indicates to me that this is the result of some form of network stress rather than something like a power cut."
- Frost1x 5y agoThat doesn't rule out internal incompetence and/or just dealing with network infrastructure complexity. Remember not too long ago when AWS and Facebook were down for a fairly significant time period? I'd hardly call either org technically incompetent, and it's probably safe to say that either org has as much (if not significantly more) technical staff and capability onboard than a small nation state like North Korea (especially North Korea). While it's certainly possible external nation state cyber attacks are going on (who knows with the confusing Russia/Ukraine shenanigans going on), I wouldn't be quick to rule out simple technical issues and/or incompetence without a bit more evidence.
- hirako2000 5y agoit's actually safe to say that aws or Facebook has more competency on-board than all small nation states together, and probably more than the sum of the top nation states. btw internet is also down right now in other places such as small nation States in Africa. i guess there is no meaningful geopolitics into play so it doesn't make the news.
- harles 5y agoNetwork stress can easily be unintentional. This seems to be a common factor in major outages at FAANGs. Something gets overloaded, fails over to another system that’s then overloaded, leading to cascading failures. There’s a big chance this is an attack, but it’s good to have an open mind.
- bitwize 5y agoGiven NK's propensity to launch state-supported cyber attacks, this looks to me like a case of "play stupid games, win stupid prizes".
- perihelions 5y agoExtremely dangerous to attack North Korea's civilian communications, which are largely the same as their military's. Depending on the impact, it could confuse leadership into thinking a decapitation strike is underway. edit: A specific example I was thinking of is the DPRK's civilian cell phone network, Koryolink (particularly this subsection under "Nuclear Crisis Communications"): >"If North Korean leaders rely on the country’s cellular network for crisis communications, there is a real chance of interruptions in network service during a crisis, and they might be misinterpreted as a cyberattack against North Korea’s nuclear forces. While North Korean “special users” have their own dedicated channel, it appears to operate on the same network infrastructure, using the same towers and the same base stations." https://www.nti.org/analysis/articles/does-kim-jong-uns-phone-give-a-window-into-north-korean-command-and-control/ https://www.nti.org/analysis/articles/does-kim-jong-uns-phon...
- numpad0 5y agoBut how is the state of communication infrastructure of NK? I had impression that they have not transitioned to the model that every individuals can be addressed by a personal phone number.
- unchocked 5y agoHard to say, but you'd think there are landlines to the nukes.
- treme 5y agoCellphone privileges' given to 7M~ users apparently. https://www.youtube.com/watch?v=mF6X5LNBnrs https://www.youtube.com/watch?v=mF6X5LNBnrs
- perihelions 5y agoHere's a 2015 view of their 3G cell network (Koryolink), by a foreign technician who helped build it: https://www.nknews.org/2015/08/inside-north-koreas-cell-network-ex-koryolink-technical-director-reveals-all/ https://www.nknews.org/2015/08/inside-north-koreas-cell-netw... He claims they had 1.9 million cell users as of ~2012 (out of a population of 26 million?)
- UncleOxidant 5y agoAre we talking about dozens of people effected? I suspect the vast majority of North Koreans can't access the internet.
- anon_123g987 5y agoIt's true that most North Koreans can't access the real, global internet, but they have an intranet (https://en.wikipedia.org/wiki/Kwangmyong_(network) https://en.wikipedia.org/wiki/Kwangmyong_(network)), which may be used more, and who knows how is that affected now.
- tasha0663 5y ago> An illustration picture shows a projection of binary code on a man holding a laptop computer, in an office in Warsaw June 24, 2013 That's not at all what I imagined Warsaw looking like.
- anon_123g987 5y agoYou get used to it. I don't even see the code. All I see is blonde, brunette, redhead.
- MCneill27 5y ago“I know this kielbasa doesn't exist. I know that when I put it in my mouth, the Matryca is telling my brain that it is juicy and delicious. After nine years, you know what I realize? Ignorance is bliss.”
- MisterTea 5y agoIt's because the Warsaw you know is on the other side of the screen.
- abledon 5y agoThat’s why so many esports tournaments are held there
- kingcharles 5y agoThere is no Warsaw.
- IMAYousaf 5y agoI wonder what the context of the image is.
- counternotions 5y ago> Junade Ali, a cybersecurity researcher in Britain who monitors a range of different North Korean web and email servers How would a researcher keep tabs on NK infrastructure like this? Would it be pinging known IPs for uptime?
- YXNjaGVyZWdlbgo 5y agoHow would you do it for non NK infrastructure? The answer is the same well except scanning NK IP ranges doesn't take that long.
- counternotions 5y agoGot it. Out of curiosity tried checking Shodan, and for the NK assigned IP range `175.45.176.0/22` it shows 35 live services: https://www.shodan.io/search?query=net%3A175.45.176.0%2F22 https://www.shodan.io/search?query=net%3A175.45.176.0%2F22 Apache httpd 4 Postfix smtpd 4 nginx 4 Cisco IOS http config 1 Cisco router telnetd 1 MS-SQL Server 1 Microsoft IIS httpd 1
- NelsonMinar 5y agoNK News has more details and some speculation about possible attackers: https://www.nknews.org/2022/01/north-korea-kicked-off-internet-by-suspected-ddos-attack/ https://www.nknews.org/2022/01/north-korea-kicked-off-intern...
- A_No_Name_Mouse 5y agoSome speculation but “Right now, there is really no way of knowing who is behind North Korea’s current internet outages,”
- stickfigure 5y agoTotally wild speculation: NK is assisting Russia with cyber warfare leading up to the imminent Ukraine invasion, and someone in "the west" is taking them offline to reduce the effectiveness.
- crmd 5y ago> websites on North Korean web domains were largely unreachable because North Korea’s Domain Name System (DNS) stopped communicating the routes that data packets should take. BGP, not DNS, communicates routes. If Reuters is getting basic IT factchecking wrong, I wonder how many errors are in articles about topics I know nothing about.
- djbusby 5y agoMost journalism gets these things wrong - not just tech. Old trucks, bread, farming. Any subject you are educated on you'll notice that the "news" is fundamentally broken. Think about that the next time you're getting some news. That same reporter banged up the BGP/DNS on this one, that truck is from before posi-traction, the Model-B was the big deal tractor...flaws of communication about complex systems
- crmd 5y agoWhat kind of things does journalism consistently get right, then? This is as sloppy as writing “the DNA is the powerhouse of the cell” and no one noticing.
- johnebgd 5y agoJournalism is basically a dead profession. People writing celebrity gossip bring in more ad revenue than journalists. Society is not setup to reward educated professionals who report on complex topics.
- hirako2000 5y agoit was setup to reward them not so long ago in those media outlets. journalism has moved elsewhere, it still exists, made by people who do it for the reward and others for alternative reasons, simply not in those kind of outlets which have mostly become ads pipes.
- webmaven 5y ago> What kind of things does journalism consistently get right, then? Generally speaking, journalists quote their sources accurately, even when the identity of the source is concealed (eg. "A senior administration official", "sources familiar with the matter", etc.). That doesn't save the reader from the sources being wrong, having an axe to grind, or straight up lying, but journalists try to mitigate those issues with multiple sources and a healthy amount of skepticism. Keep in mind that the criticism here mostly applies to general-purpose journalists, rather than ones with a specific "beat" they have experience (and even expertise) with. "Science and technology" and "health & medicine" reporters aren't really on a beat, the categories are far too broad, but general interest publications simply can't employ all the people they would need to specialize in every fractal branch on the tree of human knowledge. So reporters maybe specialize a little, and rely on a roster of experts they can call up for a quote or maybe some background explanation. Except they are always on a deadline, and if an expert doesn't get back to them in fast enough, they just do the best they can, file the story and move on to the next one. The flip side of this is that "experts" who are super reliable in terms of getting back to reporters with a hot take get quoted a lot even when they don't know what they are talking about. Reporters know this, but they have to quote somebody before their deadline.
- Ostrogodsky 5y agoStop it with the paywalled articles.
- Crosseye_Jack 5y agoNot extactly paywalled. There is a soft article limit when not logged in, delete local storage to renew that limit.
- hirako2000 5y agohow convenient.
- Crosseye_Jack 5y agoWell you have the option of making a free account on reuters and then not having to worry about it while logged in. For me personally, as I rarely visit reuters apart from when its linked to here on HN I just delete the localstorage for the site when I hit the limit.
- mrctte 5y ago[flagged]