If baidu.com is distributing the script, why is baidu.com not being flagged as malware by the various mechanisms used to block this kind of nastiness?
Are the vendors just cowards?
The Great Cannon has been deployed again
11–20 of 470 posts
Re: The Great Cannon has been deployed again
#12I had no idea this thing existed but it's actually a smart and relatively straightforwards thing for the PRC to do, shitty as it is...
I was especially impressed with their getting the target to retrieve, resize and transmit an image: that's a smart way to waste time...
Re: The Great Cannon has been deployed again
#13This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.
But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist. I use Firefox's built Enhanced Tracking Prevention, that some sites call "ad blocking" but in reality it is super easy to have ads that don't get blocked by it, just make them non-creepy.
On the contrary, people pay for Netflix. People also pay for the ad-free upgrade to Hulu. Speaking to text websites, people are also using Brave, though I don't know how that experiment will work out in the end.
Re: The Great Cannon has been deployed again
#14Browsers should prompt user and require confirmation before sucking down resources repeatedly in this way. Especially since this is grabbing images/content that are then not going to be displayed.
Re: The Great Cannon has been deployed again
#15Earlier quoted context omitted.
This is a tiring example of why the web and all its technologies thoroughly suck. It's a boiling toilet fueled by greed.
And yet here you are. I'm interested how you would perceive something that might supercede the internet by being better (than a boiling toilet fueled by greed), ignoring network effects?
Something similar to the web in the late 90s / early 2000s?
Re: The Great Cannon has been deployed again
#16I am still amazed by how genius of an idea this is to DDOS at large scale
Re: The Great Cannon has been deployed again
#17This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.
But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist. I use Firefox's built Enhanced Tracking Prevention, that some sites call "ad blocking" but in reality it is super easy to have ads that don't get blocked by it, just make them non-creepy.
[deleted]
Re: The Great Cannon has been deployed again
#18I didn’t see this anywhere in the article (maybe I missed it), but because this utilizes the Great Firewall, it’s undoubtedly done by the Chinese government, right?
That's the implication but as with most cyber attacks it's impossible to really prove the source.
Re: The Great Cannon has been deployed again
#19This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.
But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist. I use Firefox's built Enhanced Tracking Prevention, that some sites call "ad blocking" but in reality it is super easy to have ads that don't get blocked by it, just make them non-creepy.
> But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist.
This folk has an answer: display ads the ol' fashioned way, with a pair of and tags.
Re: The Great Cannon has been deployed again
#20I am still amazed by how genius of an idea this is to DDOS at large scale
The RPS isn't that great compared to some IoT botnets and this also gives the attacker rather limited control over the requests. It's a cool idea but I'm not really convinced that it's actually worth the trouble.
China has better tools, like XORDDoS.