Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Great Cannon has been deployed again

cybersecurity.att.com

Post reply on HN
Print view View original

161–170 of 470 posts

Re: The Great Cannon has been deployed again

#161

Post by chewbacha »

MR4D wrote: post #142
pkilgore wrote: post #7

So if the cannon is created using the great firewall, how does the Chinese government establish any sort of plausible argument that this isn't state-sponsored activity? Do they just not care? Some day soon a war will not be started with an assassins bullet but with a tool like this. I wonder when we start looking at them the same way?

War seems to progress as follows: 0 - Peace 1 - Trade War 2 - Financial War 3 - Electronic War 4 - Shooting War Note that 1 & 2 are different types of Economic war, and could be grouped together. The steps occur in order, but steps can be skipped. From a US-centric point of view, North Korea and Iran seem to be at #3. China & Russia are at a limited version of #2. Chinese/HK seem to be at #3 with each other.Given how…

I don't know who to attribute this to but I've heard a saying:

"Countries that trade with each other don't make war with each other."

As we isolate countries and disrupt trade we definitely are increasing the risk of conflict.

Re: The Great Cannon has been deployed again

#162

Post by cryptozeus »

FDSGSG wrote: post #11

If baidu.com is distributing the script, why is baidu.com not being flagged as malware by the various mechanisms used to block this kind of nastiness? Are the vendors just cowards?

Mainland china gov probably has part to play in this. As someone said above they anyway have access to https root certificate so htttps is also not safe.

Re: The Great Cannon has been deployed again

#163

Post by simias »

FDSGSG wrote: post #30
CrazyStat wrote: post #29

Earlier quoted context omitted.

baidu.com is not distributing the script. A proxy is taking advantage of unsecure connections (http) to serve the malicious script instead of baidu's script.

It's 2019, what excuse does Baidu have to not support https for these scripts?

As far as I can tell many CDNs will gladly serve their scripts over HTTP if requested: http://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.mi...

I don't know if what's the reasoning behind that.

Re: The Great Cannon has been deployed again

#165

Post by erikpukinskis »

cc81 wrote: post #102
eznoonze wrote: post #63

Earlier quoted context omitted.

Yes, absolutely. The economic clout gives them the confidence and means. That needs to be dealt with. Declaw!

Like how the world dealt with the US after Snowden's reveals?

I’m a U.S. citizen and I’m “dealing with the US” in my own way. But such a thing takes time. You don’t upset and entire economic regime in a year or even a decade. It takes the utmost patience, to the point of organizing for outcomes you may not even see in your lifetime.

One shouldn’t mistake a seeming return to the status quo as proof that the status quo is just as strong.

Re: The Great Cannon has been deployed again

#166

Post by pavel_lishin »

jefftk wrote: post #85
brenden2 wrote: post #2

This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.

This is not a good counterexample: the attacker is only able to do this because the analytics scripts are being served over HTTP. If you include the analytics on your site over HTTPS this sort of attack is not relevant.

For _this_ particular example, yes. But ad networks aren't magically immune from other types of attacks.

Re: The Great Cannon has been deployed again

#167

Post by blackearl »

f38zf5vdt wrote: post #116
blackearl wrote: post #66

Earlier quoted context omitted.

According to the article, the attacks are currently ineffective for a number of reasons, one being their js code is bugged. Imagine Gavrillo Princip's gun was prone to jamming consistently.

This... actually inspires very little confidence. The assassination of the archduke involved several assassins who each failed iteratively for ridiculous reasons on the motorcade route. Princip himself had decided to give up on the assassination, only to find out the cafe he had gone to ended up being directly on the motorcade path. The serendipity of his proximity was probably the only reason Ferdinand ended up dead…

The Merck attack seemed to be an accidental offshoot, and nothing on an international political scale happened from that. Until we have some more tech literate politicians, or an agency to explain what's happening in simpler terms, I don't see these kind of attacks being taken seriously, or even understood on a basic level.

Re: The Great Cannon has been deployed again

#168

Post by Rebelgecko »

BurningFrog wrote: post #112
Causality1 wrote: post #68

Earlier quoted context omitted.

[flagged]

Hitler didn't start exterminating jews until after Pearl Harbor: https://en.wikipedia.org/wiki/The_Holocaust#Final_Solution That's 2+ years after the start of WW2.

Kristallnacht was in 1938

Re: The Great Cannon has been deployed again

#170

Post by 3JPLW »

theptip wrote: post #131
SamuelAdams wrote: post #123

> These attacks would not be successful if the following resources were served over HTTPS instead of HTTP: Can someone explain how using HTTPS would mitigate this attack?

HTTPS makes a MiTM attack much harder, because you need to have a valid cert for the host you are spoofing.

Doesn't the Great Firewall mandate (or at least strongly suggest) that those Chinese-controlled root certs are installed for devices behind it?
Post reply on HN