3 ms·

Stop using Baidu for one.

FreakyT 12y ago
One of the key effects of China's firewall has been to ensure that China has its own plethora of native internet services -- yet the latest attacks will probably ensure that no one outside of China uses those services. It seems like the perpetrators of the attack are hurting Chinese businesses more than anything else.
- virmundi 12y ago
  Yes and the same can be said for the NSA and US networking tech. (Un)Fortunately, people will continue using what works. If Baidu has a benefit, then people will use it. Perhaps it can strengthen it to say no to the Chinese government in these types of attacks.
  - JohnTHaller 12y ago
    Outside of China, using Google Adsense or Analytics won't make your website visitors the unwitting participants in cyberwarfare. Using Baidu ads or analytics, your website visitors can and will be used by China to attack a website of their choosing.
- unchocked 12y ago
  The effects that you mention seem to be the purpose of these attacks. Like the Great Firewall, the Great Cannon serves to keep the Chinese Internet and therefore population isolated from the outside world. Their Politburo is a lot less concerned with losing market share abroad than with losing mindshare domestically.
Someone1234 12y ago
Could you clarify a little? If you are talking about Github in particular, wasn't Baidu an innocent party who had their scripts man-in-the-middled by the so called "Great Firewall of China" to trick user's browsers into being part of a DDoS? It is no different than if the Google Analytics script got hijacked in the West.
- JohnTHaller 12y ago
  The difference is that China has a Great Firewall and now a "Great Cannon". China has demonstrated that they are willing to use it to weaponize Baidu against github merely for hosting content China don't like. Now that this is known and demonstrated, anyone outside China that uses Baidu's analytics or ad product would be behaving irresponsibly. Basically, you can't trust any traffic going through the great firewall, so you absolutely should not link to a Javascript hosted within China as a non-China-based business. Within China, China can weaponize Baidu, Google, or anything else they choose. That's the nature of their internet connectivity and their ownership of CNNIC, which recently issued certificates that can be used to impersonate Google, Facebook, etc.

One of the key effects of China's firewall has been to ensure that China has its own plethora of native internet services -- yet the latest attacks will probably ensure that no one outside of China uses those services. It seems like the perpetrators of the attack are hurting Chinese businesses more than anything else.

virmundi 12y ago
Yes and the same can be said for the NSA and US networking tech. (Un)Fortunately, people will continue using what works. If Baidu has a benefit, then people will use it. Perhaps it can strengthen it to say no to the Chinese government in these types of attacks.
- JohnTHaller 12y ago
  Outside of China, using Google Adsense or Analytics won't make your website visitors the unwitting participants in cyberwarfare. Using Baidu ads or analytics, your website visitors can and will be used by China to attack a website of their choosing.
unchocked 12y ago
The effects that you mention seem to be the purpose of these attacks. Like the Great Firewall, the Great Cannon serves to keep the Chinese Internet and therefore population isolated from the outside world. Their Politburo is a lot less concerned with losing market share abroad than with losing mindshare domestically.

Someone1234 12y ago

Could you clarify a little? If you are talking about Github in particular, wasn't Baidu an innocent party who had their scripts man-in-the-middled by the so called "Great Firewall of China" to trick user's browsers into being part of a DDoS? It is no different than if the Google Analytics script got hijacked in the West.

JohnTHaller 12y ago
The difference is that China has a Great Firewall and now a "Great Cannon". China has demonstrated that they are willing to use it to weaponize Baidu against github merely for hosting content China don't like. Now that this is known and demonstrated, anyone outside China that uses Baidu's analytics or ad product would be behaving irresponsibly. Basically, you can't trust any traffic going through the great firewall, so you absolutely should not link to a Javascript hosted within China as a non-China-based business. Within China, China can weaponize Baidu, Google, or anything else they choose. That's the nature of their internet connectivity and their ownership of CNNIC, which recently issued certificates that can be used to impersonate Google, Facebook, etc.