4 ms·
I don't think it only affects servers outside of China. Just users loading Baidu Analytics from outside of China. Given that most of these sites are probably do
by auganov 12y ago
I don't think it only affects servers outside of China. Just users loading Baidu Analytics from outside of China. Given that most of these sites are probably domestic, they'd need to take action domestically. All non-Chinese sites blocking Baidu would do little to mitigate the attack.
Also I don't think it's accurate to say "their networks are being used to attack others". Nor does their network have to be compromised. Someone is just MITMing their js. (assuming their innocence and no hack).
Baidu is in a very bad position (govt-relations wise). Best they can do is report it to some department/police and hope for an answer.
- nailer 12y agoSince the consumer traffic to Baidu, that is being told to attack GitHub, comes from outside the GFW, a tier 1 provider could block consumer access to Baidu and stop the attacks (since people can't visit Baidu, and therefore don't have their browsers told to attack github via JS injection). > lso I don't think it's accurate to say "their networks are being used to attack others". It's Baidu's datacenter, and Baidu's bandwidth, which Baidu pay for. > Baidu is in a very bad position (govt-relations wise). Best they can do is report it to some department/police and hope for an answer. Yep. Or add extra capacity outside China.