3 ms·

This may be related to the NYT article about China's political elite. A basic tit-for-tat to say "don't think that posting things in the US about us is without

by kposehn 14y ago

This may be related to the NYT article about China's political elite. A basic tit-for-tat to say "don't think that posting things in the US about us is without consequences". Of course, they couldn't possibly be that dumb as to make a massive DDoS in retaliation. snicker

lifeguard 14y ago
China looks inwards, not outwards. They fire-walled off the NYT awhile ago from internal users. The USA has been fighting a very dirty fight against Iranian science programs, including using the stuxnet worms. Iran was also recently fingered for attacking Saudi networks. EDIT: The West also crashed Iran's currency, where it lost 40% value in one week. FYI: most serious attacks come out of Chinese networks and are managed by Eastern Europeans where the attack software is written.
- aes256 14y ago
  Apparently China did not have the NY Times blocked until today, in response to the article (obviously going back further it might have been blocked previously): http://www.nytimes.com/2012/10/26/world/asia/china-blocks-web-access-to-new-york-times.html http://www.nytimes.com/2012/10/26/world/asia/china-blocks-we...
  - wasserain 14y ago
    Wasserain is an senior Linux SA in an ODC located in Pekin, we meet hugh pack lost from Pek office to US DataCenter this week; when we check the openvpn log, many TLS Error happened, it started from last last Friday (2012-10-12), but the shutdown-time is tiny in last last week, but it became longer and loonger this week, about down 6mins for every 30mins at Mon & Tue from Telecomm 's line, then we switch to Unicomm, but it still the same -- almost worse 10mins per 40mins, TLS handshake is hardly be done; at Friday, we try a new way to link, separate the plan-txt data and openvpn data on 2 link, that make a better status, but we can't sure that is the real reason, maybe the GF\/\/ is in it's maintain date. Guess: GF\/\/ is made a pre-Graet-18 exercise on the funczion of shuting-down-TLS/HTTPS/OpenVPN. Prophecy： some outage likely will happen again in the next 30day. (until the Graet-18 finished;) Other issue met this week, Yahoo msger report TLS error sometime when login at 0900-1000 in the morning.
    - lifeguard 14y ago
      https://isc.sans.edu/portascii.html?port=443&start=2012-04-28&end=2012-10-28 https://isc.sans.edu/portascii.html?port=443&start=2012-... Doesn't look port 443 specific.
taligent 14y ago
Yeh no. China has banned countless US sites. NYT is just another one and not even the most high profile. And China isn't some rogue state despite perceptions within the US. They aren't going to deliberately attack core routers out of spite.
- javajosh 14y ago
  >They aren't going to deliberately attack core routers out of spite. Umm, weren't the Chinese fingered (by Google and the USGov) in a giant attempted incursion only a few months back?
  - nl 14y ago
    That was industrial espionage rather than a DoS attack. Very different attack profiles.

by kposehn 14y ago

lifeguard 14y ago

China looks inwards, not outwards. They fire-walled off the NYT awhile ago from internal users. The USA has been fighting a very dirty fight against Iranian science programs, including using the stuxnet worms. Iran was also recently fingered for attacking Saudi networks. EDIT: The West also crashed Iran's currency, where it lost 40% value in one week. FYI: most serious attacks come out of Chinese networks and are managed by Eastern Europeans where the attack software is written.

aes256 14y ago
Apparently China did not have the NY Times blocked until today, in response to the article (obviously going back further it might have been blocked previously): http://www.nytimes.com/2012/10/26/world/asia/china-blocks-web-access-to-new-york-times.html http://www.nytimes.com/2012/10/26/world/asia/china-blocks-we...
- wasserain 14y ago
  Wasserain is an senior Linux SA in an ODC located in Pekin, we meet hugh pack lost from Pek office to US DataCenter this week; when we check the openvpn log, many TLS Error happened, it started from last last Friday (2012-10-12), but the shutdown-time is tiny in last last week, but it became longer and loonger this week, about down 6mins for every 30mins at Mon & Tue from Telecomm 's line, then we switch to Unicomm, but it still the same -- almost worse 10mins per 40mins, TLS handshake is hardly be done; at Friday, we try a new way to link, separate the plan-txt data and openvpn data on 2 link, that make a better status, but we can't sure that is the real reason, maybe the GF\/\/ is in it's maintain date. Guess: GF\/\/ is made a pre-Graet-18 exercise on the funczion of shuting-down-TLS/HTTPS/OpenVPN. Prophecy： some outage likely will happen again in the next 30day. (until the Graet-18 finished;) Other issue met this week, Yahoo msger report TLS error sometime when login at 0900-1000 in the morning.
  - lifeguard 14y ago
    https://isc.sans.edu/portascii.html?port=443&start=2012-04-28&end=2012-10-28 https://isc.sans.edu/portascii.html?port=443&start=2012-... Doesn't look port 443 specific.

taligent 14y ago

Yeh no. China has banned countless US sites. NYT is just another one and not even the most high profile. And China isn't some rogue state despite perceptions within the US. They aren't going to deliberately attack core routers out of spite.

javajosh 14y ago
>They aren't going to deliberately attack core routers out of spite. Umm, weren't the Chinese fingered (by Google and the USGov) in a giant attempted incursion only a few months back?
- nl 14y ago
  That was industrial espionage rather than a DoS attack. Very different attack profiles.