Live data from Hacker News

The Great Cannon has been deployed again

cybersecurity.att.com

41–50 of 470 posts

Re: The Great Cannon has been deployed again

#41
post #30

Earlier quoted context omitted.

baidu.com is not distributing the script. A proxy is taking advantage of unsecure connections (http) to serve the malicious script instead of baidu's script.

It's 2019, what excuse does Baidu have to not support https for these scripts?

None whatsoever.

Re: The Great Cannon has been deployed again

#42
post #6

I didn’t see this anywhere in the article (maybe I missed it), but because this utilizes the Great Firewall, it’s undoubtedly done by the Chinese government, right?

No. "Behind the Great Firewall" is another way of saying "served from China". Perhaps -- or even most likely -- it is the government. But this is hardly a smoking gun. There are plenty of people on the mainland that hate what's going on in HK, and who are not the government.

How would a non-government entity achieve this?

Re: The Great Cannon has been deployed again

#43
post #2

This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.

But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist. I use Firefox's built Enhanced Tracking Prevention, that some sites call "ad blocking" but in reality it is super easy to have ads that don't get blocked by it, just make them non-creepy.

Don’t monetize your users’ data, monetize their use. When you log in with a paid account the ads should be gone.

If users don’t need an account to get the content and they still get ads with the paid account, what exactly are you offering in exchange for the payment?

Re: The Great Cannon has been deployed again

#44
post #9

Earlier quoted context omitted.

This is a tiring example of why the web and all its technologies thoroughly suck. It's a boiling toilet fueled by greed.

And yet here you are. I'm interested how you would perceive something that might supercede the internet by being better (than a boiling toilet fueled by greed), ignoring network effects?

Everyone has to be somewhere. I would not be surprised to find someone, who feels like the modern internet as it exists is terrible, on hacker news. I believe the sentiment is more common here than say, the comments section on CNN.

I like the approach taken by the folks at the dat project and beaker browser. Let's make the web a DHT already. If we can force consumers to share what they consume then a DDOS becomes impractical for censoring speech (the speech spreads all over the network, making it counterproductive).

Re: The Great Cannon has been deployed again

#45
post #7

So if the cannon is created using the great firewall, how does the Chinese government establish any sort of plausible argument that this isn't state-sponsored activity? Do they just not care? Some day soon a war will not be started with an assassins bullet but with a tool like this. I wonder when we start looking at them the same way?

Why should they care, what's anyone going to do about it?

Re: The Great Cannon has been deployed again

#46
post #7

So if the cannon is created using the great firewall, how does the Chinese government establish any sort of plausible argument that this isn't state-sponsored activity? Do they just not care? Some day soon a war will not be started with an assassins bullet but with a tool like this. I wonder when we start looking at them the same way?

[flagged]

Don't forget that the power behind the CCP's lies and violence is economic clout, both abroad and domestically.

Re: The Great Cannon has been deployed again

#47
post #6

I didn’t see this anywhere in the article (maybe I missed it), but because this utilizes the Great Firewall, it’s undoubtedly done by the Chinese government, right?

No. "Behind the Great Firewall" is another way of saying "served from China". Perhaps -- or even most likely -- it is the government. But this is hardly a smoking gun. There are plenty of people on the mainland that hate what's going on in HK, and who are not the government.

This is not true, the traffic for the previous github incident with the great cannon was co located[0] with the great firewall (which is indisputably under the control of the chinese government).

[0] https://citizenlab.ca/2015/04/chinas-great-cannon/

Re: The Great Cannon has been deployed again

#48
post #6

I didn’t see this anywhere in the article (maybe I missed it), but because this utilizes the Great Firewall, it’s undoubtedly done by the Chinese government, right?

No. "Behind the Great Firewall" is another way of saying "served from China". Perhaps -- or even most likely -- it is the government. But this is hardly a smoking gun. There are plenty of people on the mainland that hate what's going on in HK, and who are not the government.

Please. For it not to be the government would mean that there's an extra-governmental organization within the PRC with the resources and network access to conduct a massive DDoS attack, which the communist government would never allow.

Re: The Great Cannon has been deployed again

#49
post #30

Earlier quoted context omitted.

baidu.com is not distributing the script. A proxy is taking advantage of unsecure connections (http) to serve the malicious script instead of baidu's script.

It's 2019, what excuse does Baidu have to not support https for these scripts?

It's not a matter of excuses. Baidu, like almost all large Chinese companies, is effectively an arm of the Chinese Communist Party. They will do as they're told.

Re: The Great Cannon has been deployed again

#50
post #7

So if the cannon is created using the great firewall, how does the Chinese government establish any sort of plausible argument that this isn't state-sponsored activity? Do they just not care? Some day soon a war will not be started with an assassins bullet but with a tool like this. I wonder when we start looking at them the same way?

Why should they care, what's anyone going to do about it?

[deleted]
Post reply on HN