18 ms·
I was working with MISP[0], an open-source threat intelligence sharing platform, and came across a really interesting dataset from the Australian Strategic Poli
by clwg 2y ago
I was working with MISP[0], an open-source threat intelligence sharing platform, and came across a really interesting dataset from the Australian Strategic Policy Institute on China's technology research institutions[1]. I liked the data so much I built a quick cross-filter visualization on top of it to help explore it[2].
The data offers a fairly comprehensive and interesting perspective on China's research priorities and organization, I can't speak to the effectiveness of the programs themselves, but it does make me concerned that we are falling far behind in many areas, including cyber security.
[0] https://www.misp-project.org/ https://www.misp-project.org/
[1] https://raw.githubusercontent.com/MISP/misp-galaxy/refs/heads/main/clusters/china-defence-universities.json https://raw.githubusercontent.com/MISP/misp-galaxy/refs/head...
[2] https://www.layer8.org/8541dd18-ff05-4720-aac7-1bd59d3921dd/ https://www.layer8.org/8541dd18-ff05-4720-aac7-1bd59d3921dd/
- _lvbh 2y ago> we are falling far behind in many areas, including cyber security In terms of quantity and quality of talent, I don't think the western world would fall behind China, especially with their strict control of information. Most people there will have difficulty independently learning about cybersecurity. The difference is that most talent is captured by the private sector with higher compensation or bounties. Meanwhile, China can very easily compel anyone they need into the government so the % utilization on outward attacks is probably higher.
- TaylorAlexander 2y ago> In terms of quantity At the very least China is generally gonna have everyone else beat on quantity of people involved in quite a lot of things.
- tw1984 2y agocheck AI, green energy, EV, mobile computing, cloud computing, quantum stuff, robots etc. it is pretty much China vs US now when it comes to quality. how many people would seriously believe that EU or Japan can possibly compete with China on its own in terms of quality for those above mentioned sectors. just looking at those low quality & high pollution Japanese & European cars.
- easygenes 2y agoIs the last line said ironically? Japanese brands long have and continue to absolutely dominate long term reliability ratings for vehicles, and the first mass market hybrid and full EV vehicles came from Japan. If you’re talking about innovation and mass EV manufacturing, sure the US and China are leading, but the European Volkswagen and BMW Groups are still competitive. Japan is admittedly a laggard in the EV market, but largely because EVs are still a luxury good and Japanese brands are primarily mainstream.
- tw1984 2y ago> Japanese brands long have and continue to absolutely dominate long term reliability ratings for vehicles such hard earned experience is no longer relevant in the era of EV. > but the European Volkswagen and BMW Groups are still competitive none of them is even capably of designing self driven cars on their own. same for the AI based infotainment systems fitted on EVs. they are just Canon in 2024/2025. > EVs are still a luxury good I wouldn't call it luxury. It is the cheapest option to own a car in Shanghai, BYD Seagull is being offered for $9k USD. > Japanese brands are primarily mainstream they have already lost the battle. if EV makers can't build their own self driving systems and those AI based infotainment systems, then they are in the wrong business. Batteries is another story that can not be ignored, Japan and the EU do not have any meaningful control on that. I don't see any chance how European or Japanese car makers can survive in mid term.
- medo-bear 2y agoInteresting also is the type of names that appear in so many western academic journals. What I mean to say is that even in Western journals "Alice" and "Bob" is quite rare
- tw1984 2y agowhen "alice" and "bob" can become a lawyer to talk their clients into paying some stupid amount, why bother studying STEM.
- dluan 2y ago> Most people there will have difficulty independently learning about cybersecurity. Speaking from my own limited anecdata, but since the 90s in order to use the internet in China you basically had to be somewhat proficient in "cybersecurity" just because of all the required hoops to jump through. There were definitely a lot of script kiddies, but the Chinese exploit scene (amateur and professional) has always been bustling. And just personally speaking, the most truly awe-inspiring and resourceful hackers I've ever known have been Russian, or Chinese. Like actual 10x engineers who think that walls put in place for other people don't exist for them.
- coretx 2y agoWestern society is criminalizing and repressing such culture, so China has already won because they fail at doing the same.
- Aeolun 2y agoThey are very clear about who is a valid target though. I think you’ll quickly find that those attacking domestic targets rapidly disappear.
- medo-bear 2y agoKinda works both ways. In many western countries you still go to jail for refusing to give private encryption keys
- coretx 2y agoOr they convict you for money laundry because you developed a crypto phone they can't crack and don't have any legal means to destroy you. ( Dutch example, and yes - the guy payed taxes everything, they made him hang because of a single client of a client his client his client being involved with shady things. ) State-Spite, Repression and such is rising globally. The rule of law is gone.
- equestria 2y ago> especially with their strict control of information. Most people there will have difficulty independently learning about cybersecurity. I'm puzzled by this assertion. I know quite a few self-taught infosec folks who grew up there. China is not North Korea. The government, by and large, doesn't monitor what you're doing day-to-day, unless you're a political activist or some other "undesirable". The Great Firewall doesn't stop you from accessing infosec content; and in any case, the use of VPNs is prevalent among techies. To be fair, the parent's claim that China is "ahead" in infosec also feels like fearmongering. The one thing that's true for China is that their government has far fewer qualms about hacking Western infrastructure to get dirt on dissidents, steal IP, and so on. But that's a matter of ethics and law, not tech.
- PittleyDunkin 2y ago> The one thing that's true for China is that their government has far fewer qualms about hacking Western infrastructure to get dirt on dissidents, steal IP, and so on. But that's a matter of ethics and law, not tech. As opposed to the DoD, which strictly fights for freedom, liberty, and democracy?
- equestria 2y ago> As opposed to the DoD, which strictly fights for freedom, liberty, and democracy? Yes, the whataboutism is unwarranted here. The US government is no angel, but is far more constrained in this regard. The bar to become "the enemy of the state" is much higher - for example, your comment won't get you in trouble here. The US government also wouldn't, say, hack Spotify and snoop on their business plans to prop up a competing US startup - something that is commonplace with the Chinese intelligence apparatus.
- PittleyDunkin 2y ago> The bar to become "the enemy of the state" is much higher - for example, your comment won't get you in trouble here. I think you're drastically overestimating the effect of being sarcastic about jingoistic rhetoric on the chinese internet. I imagine China, much like the DoD, is quite proud of their ability to penetrate systems and cause havoc. > The US government also wouldn't, say, hack Spotify and snoop on their business plans to prop up a competing US startup - something that is commonplace with the Chinese intelligence apparatus. I can't imagine there's much worth taking from Spotify. Meanwhile, if you think the US won't steal technology from China when there's something worth stealing, you're a massive fool.
- woctordho 2y agoEvery ordinary Chinese needs to self-learn some cybersecurity to do daily things, like to watch YouTube, or to send messages to others without worrying being censored
- viraptor 2y agoThere's a big difference between using tools intended for general population and being skilled enough in offensive security to make a difference. It may incentivise some people to learn further, but I don't think the effect would be that large. It's kind of like everyone at Uni knowing about P2P a few years ago - but they knew nothing about protocol design.
- throwaway290 2y agoThe ordinary people have their douyin/bilibili and fear of the party so they don't need to learn those things
- roenxi 2y agoWhy would ordinary Chinese people fear the party? The party has been overseeing the greatest expansion of wealth in human history combined with a massive internal propaganda effort which I would assume is pitching them as the good guys and downplays all the brutal stuff they've done If anything I'd expect ordinary people to be far too trusting that the authorities are reasonable and friendly. They must have real problems with earnest, motivated and well meaning people wandering off the approved parts of the internet into censored topics and getting confused by whatever happens next.
- throwaway290 2y agoFear getting disappeared/jailed for doing something forbidden. You're right that they may not see it as "fear of the party" from inside. More like "why would I do something illegal". But in a system like that those things are actually equivalent.
- tivert 2y ago
- blackoil 2y ago> especially with their strict control of information. You have gross misunderstanding of how this strict control works. It isn't like novels or North Korea where some govt agency is creating/curating the info.
- throwthrowee 2y ago> China can very easily compel anyone they need into the government I have worked with people in Chinese tech companies and in Chinese tech ministries, and I don't think this statement is true, any more than in the US. In the US, there are talented techies who work for FAANG, startups, Palantir, NSA, etc etc. Similarly in China.
- Citizen8396 2y ago"Pretend inferiority and encourage his arrogance."
- richardw 2y agoAny state actor who puts in the effort can get pretty good, and some countries make a very specific effort in this area. North Korea is one. Imagine the brightest people in your state (say, population 26 million) were all nudged into one very specific talent funnel, with the goal of stealing money for the government. China is different. Not quite as focused in terms of sheer government directive, but just think of the Chinese people you do know and extrapolate out the level of effort and talent. Being overconfident seems like a mistake.
- seanmcdirmid 2y agoThat doesn’t sound like China at all. Having worked in Beijing for 9 years, they pay techies fairly well, not USA FAANG well, but better than Japan, much of Europe, Korea, even Singapore. So there is a lot of private sector movement in these areas, not just government. Information is easily obtained, piracy rates are still very high so it’s not like anything is really locked down behind a paywall. There are plenty of hackers who are in it with a passion, not just for the money, much like you’d find in the states or anywhere in the developed world.
- wordofx 2y agoHahahhahahah no way. Salaries in Japan, Korea, Singapore are WAY better than China.
- seanmcdirmid 2y agoNot in tech. There is a weird de-emphasis of programmers in countries that aren’t the USA or mainland china. So a programmer from Japan with some experience/skills can move to Beijing (yes, there were many Japanese expat SWEs when I was there) for a better salary.
- foohoge 2y agoWhat? I'm Japanese but I've never heard a story about changing jobs to Chinese company. I heard a lot of stories about changing jobs to GAFAM. Could you tell me more about that?
- seanmcdirmid 2y agoMicrosoft paid more in Beijing than Tokyo while I was there, it turns out even experienced programmers in Tokyo don’t make $200k/year. Especially if you have a PhD or research in a hot field, you can get a pretty good job in richer Chinese cities. But an apartment is probably more expensive to rent in Beijing, and definitely in Shanghai, than it is in much of Tokyo, so there are trade offs.
- medo-bear 2y agoI think this is just baseless prejudice. In my experience, having lived in the West and in the East, I found that on average, at least in the urban population, people in the communist and ex-communist space seem to be far more computer literate while computer experts seem to mentally get around "magic and fluff" much easier. Also the authorities are far less concerned about "incorrect" ideologies creeping through (especially through academia) than you probably immagine.
- almaight 2y agohttps://raw.githubusercontent.com/MISP/misp-galaxy/refs/heads/main/clusters/360net.json https://raw.githubusercontent.com/MISP/misp-galaxy/refs/head...
- solstice 2y agoTwo things and one question: 1) While being a fantastic resource to get a first impression of what's out there, the Defense Universities Tracker has not been updated since about 2019. So it is starting to be outdated and anyone using it should be well aware of it. It seems that an update is in an early stage. 2) In order to assess the actual risks, the sources that are provided at each institution's page are crucial. These are ommitted in your version. Please consider linking back to each institutions page under https://unitracker.aspi.org.au/ https://unitracker.aspi.org.au/ The question: What is the value added of your page over the official page https://unitracker.aspi.org.au/ https://unitracker.aspi.org.au/ ? I only see the map. Am I missing something?
- clwg 2y agoI’ve updated my link to include the site and wish I had searched more thoroughly as it would have saved me hours; This visualization was more of a personal thing after I stumbled upon it while working within MISP and the raw data(so that's what I initially attributed it to), and just wanted to see it visualized outside of MISP, it's really good analysis. I've also added the references to the individual institution at the unitracker site as well. To answer your question, the visualization is just a simple cross-filter. I guess the differences are the categorized and topic-based breakdowns/filtering, filtering by description and it includes a map. I did consider adding a network graph, but my focus isn't really visualization.
- morpheuskafka 2y agoI came across that group (ASPI) before and wasn’t too impressed. Their name suggests they are a public agency—in fact, though sponsored by the AUS defence ministry, they are non-governmental and funded in part by weapons manufacturers and foreign governments. Their project [0] describes numerous civilian universities as “very high risk,” unnecessarily raising fears that ordinary Chinese students and researchers are dangerous. Especially since students uni choices are heavily determined by gaokao scores, I don’t think placing labels on people based on their undergrad uni as if they handpicked them for whatever defense connections they may have makes any sense. This is what the US is doing with Proclamation 10043 under both Trump I and Biden. Steven Miller, who will be returning to a similar role in Trump II, recently suggested banning all Chinese citizens from student visas in the US, demonstrating this irresponsible rhetorics effect. Moreover, Australia is basically a vassal state of the US for intelligence matters—-see the debate about whether the CIA ousted the only prime minister to question the NSA’s Pine Gap facility on Australian soil. [1] [0] https://unitracker.aspi.org.au/universities/ https://unitracker.aspi.org.au/universities/ [1] https://en.wikipedia.org/wiki/Alleged_CIA_involvement_in_the_Whitlam_dismissal https://en.wikipedia.org/wiki/Alleged_CIA_involvement_in_the...
- EasyMark 2y agoChina mostly works as a meritocracy. The US has done that mostly int the past but the current leadership is essentially adding witchdoctors and criminals to the government departments that will be overseeing security and infrastructure and we will likely face some dire situations and terroristic infrastructure catastrophes over that for the next 4 years or so as the CCP and Russian hackers do whatever they want with our systems because the fox is now in the hen house.