101–110 of 116 posts
I guess we will be seing baiduu news, baiduu image search, bmail, bdrive sometime soon! :-)
I'd say it's a safe bet that stealing Google's source code wouldn't help much with replicating their datacenter infrastructure.
Earlier quoted context omitted.
Well, sure. But as I understand it, most people at Google are running Linux on their desktops. I'd expect most browser testing to be taking place in VMs or on separate boxes, and under test accounts -- which would have made the level of infiltration described in the article more difficult.
Companies like Google try to make their employees happy. If someone prefers Windows XP they are aloud to use it.
Earlier quoted context omitted.
Specifically, a 0-day exploit in the Adobe Reader software which Adobe knew about and refused to fix for months (since it would break their upgrade schedule).
They're denying it though, blaming it on IE only: http://blogs.adobe.com/conversations/2010/01/no_evidence_to_...
Earlier quoted context omitted.
Looks like the page is setup by a local Christian. It's observable phenomenon that all Christian Chinese favor Google more than any other search engines.
Isn't the Christian/Catholic Church in China run by the Party?
Doesn't stop them though so the author may be one of those.
Why/How is McAffee involved? Would a company like Google really outsource the cleanup/forensics of an attack?
http://praetorianprefect.com/archives/2010/01/the-aurora-ie-...
Earlier quoted context omitted.
> what better place to start than with Google and Adobe's source code? I wonder if Microsoft was targeted too.
i'm dropping linux and going to use openbsd as my desktop. see ya.
For example having white-listed software only able to run (of course engineers need to install stuff all the time so they might have to be a different case, but joe bloggs shouldn't need anything new - it can be assessed by security before installing).
I wonder how much smart people / money / hardware / etc you need to start an attack that sophisticated.
Really not that much. Once you find a good exploit, the payload code is copy and paste for a lot of it. The payload issue is a solved problem with lots of available source code and knowledge out there for free.
If you, even within your general field (say mathematics), talk to an expert, he will easily give you arguments that will seem sophisticated to you, and simple to him. He's spent more time learning, getting familiar with, and thinking about those arguments, and that's the simple reason.
Here, the Chinese government is through a nationalistic sentiment endorsing hacking and education about the same. It is a large country, and many of the people conducting the attacks were not amateurs, using already established techniques. They were professionals, I wager, learning, getting familiar with, and thinking about how to attain their hacking-goals.
An educated person, in any subject, will seem infinitely more sophisticated than a non-educated one. And I argue that China, more than anybody else, invests into young men doing just that.