3 ms·

This means very little beyond those hosts being potentially compromised as well.

Retric 3y ago
Yes and no. In movies people talk about using proxies around the world, but network latency quickly gets terrible if you ever actually did this. It’s inconvenient enough to suggest most western hackers attacking western targets would choose something else if they had the option. Thus either China’s cyber security is terrible and or these attacks are coming from Asia.
- Geezus_42 3y ago
  Isn't most of the malware these days mostly automated? If so, why would the attackers care about latency? All they have to do is wait for a ping.
  - Retric 3y ago
    Even for automated systems, latency lowers throughout when you’re mostly opening and closing lots of connections.
- iavael 3y ago
  I thought that hacked machines usually used not as proxies for traffic from origin attack hosts but rather than large fleet of cheap throwaway attacking traffic origins themselves. There's a used to be fashionable definition "fog computing" for using computer resources like that. Except it criminals used this approach before definition emerged. And as an attacker you couldn't care less about latency when you schedule a job of scanning bunch of ip addresses for vulnerabilities to one of thousands throwaway hacked home pcs in your fleet.
  - Retric 3y ago
    High latency still makes those machines less efficient to both compromise and them use to scan a bunch of ip addresses. ie US hackers hacking Chinese machines to then hack US machines is really inefficient. Latency doesn’t prevent such things from working, but your better off hacking local resources and then using those resources to scan locally. So all things being equal either there’s a huge surplus of especially vulnerable Chinese machines or a surplus of Asian hackers. To be clear there could just be a huge surplus of easily hacked Chinese machines, but that itself would be noteworthy.

Yes and no. In movies people talk about using proxies around the world, but network latency quickly gets terrible if you ever actually did this. It’s inconvenient enough to suggest most western hackers attacking western targets would choose something else if they had the option. Thus either China’s cyber security is terrible and or these attacks are coming from Asia.

Geezus_42 3y ago
Isn't most of the malware these days mostly automated? If so, why would the attackers care about latency? All they have to do is wait for a ping.
- Retric 3y ago
  Even for automated systems, latency lowers throughout when you’re mostly opening and closing lots of connections.
iavael 3y ago
I thought that hacked machines usually used not as proxies for traffic from origin attack hosts but rather than large fleet of cheap throwaway attacking traffic origins themselves. There's a used to be fashionable definition "fog computing" for using computer resources like that. Except it criminals used this approach before definition emerged. And as an attacker you couldn't care less about latency when you schedule a job of scanning bunch of ip addresses for vulnerabilities to one of thousands throwaway hacked home pcs in your fleet.
- Retric 3y ago
  High latency still makes those machines less efficient to both compromise and them use to scan a bunch of ip addresses. ie US hackers hacking Chinese machines to then hack US machines is really inefficient. Latency doesn’t prevent such things from working, but your better off hacking local resources and then using those resources to scan locally. So all things being equal either there’s a huge surplus of especially vulnerable Chinese machines or a surplus of Asian hackers. To be clear there could just be a huge surplus of easily hacked Chinese machines, but that itself would be noteworthy.