8 ms·
Hi, foreigner working in Chinese high tech company here. I wonder a bit, on which ground is this attack attributed to Chinese gov? It looks a bit unlikely to me
by gbog 12y ago
Hi, foreigner working in Chinese high tech company here. I wonder a bit, on which ground is this attack attributed to Chinese gov? It looks a bit unlikely to me. China has some cyber military but they are more likely to be pragmatic and choose wisely their targets. There's a bunch of script kiddies but they would choose also something else. However it seems possible that many servers hosted in China are not secured and could be used for this attack, by some other people.
Just my first thought as an insider...
- polysics 12y agoThe MITM on HTTPS traffic that seems to be involved in the first attack stages is actually pretty good evidence.
- diminoten 12y agoThis might be part of the attribution: https://news.ycombinator.com/item?id=9275381 https://news.ycombinator.com/item?id=9275381
- gbog 12y agoThanks, so if I understand well, every js gotten from baidu cdn from outside China has a malicious code attacking github. Weird. It could be some test gone wrong, but I still don't buy Chinese gov attacking purposely and openly github like that. It's like showing your one time secret weapon way too early and on some wrong target. Or maybe it's a way to make some big noise to the left while the real target is discretely owned on the right.
- geoffharcourt 12y agoNo one is buying that.
- amaranth 12y agoThis isn't the first time [0] China has been accused of using it's filtering to DDoS enemies. It's not a secret weapon really, it's an obvious capability of being able to redirect a large majority of your country's internet traffic at will. [0] http://furbo.org/2015/01/22/fear-china/ http://furbo.org/2015/01/22/fear-china/
- gbog 12y agoChina and Chinese have been accused of all sort things. From ten years spent there I can tell you accusing their gov to be stupid is really dumb. Attacking github is the most useless attack they could invent. Therefore it's not them. Or it is a side effect.
- Ygg2 12y agoNever underestimate the stupidity of a bureaucrat.
- diminoten 12y agoThere's no secret weapon, and how do you know it's the "wrong" target?
- Matumio 12y agoI agree it seems to be a stupid move for a government, and maybe someone else has gained access to the right routers. But "some test gone wrong"? You can't be serious. This is a carefully targeted attack and includes packets that can't be generated from a web browser.
- nick89 12y ago> Weird. It could be some test gone wrong, but I still don't buy Chinese gov attacking purposely and openly github like that. A "test" that specifically targets two projects that promote anti-censorship. Yeah, that's some "test"...
- yzzxy 12y agoThe official cyber force of China is not the biggest suspect in most attacks like this. The loosely controlled civilian hacker force (think privateer pirates) launch most ddos-style attacks on foreign soil.
- bonestamp2 12y agoWhy would they care about protecting the great firewall?
- danpalmer 12y ago> China has some cyber military... China has approximately 2 million people in its 'cyber army'. Not all of them are going to be experts, but sheer volume makes them probably the most effective 'cyber army' out there.