It’s coming from a Baidu domain which is one of the biggest sites in the world. That might be a bit difficult...
If you're negligent in securing your site and it gets infected, your site should be blocked. You shouldn't be able say "well it's technically not us, it's the CCP!" whilst not doing anything about it. As for badiu being a major site, that can be resolved by browser vendors displaying a special page explaining to its users of the situation.
So if the cannon is created using the great firewall, how does the Chinese government establish any sort of plausible argument that this isn't state-sponsored activity? Do they just not care? Some day soon a war will not be started with an assassins bullet but with a tool like this. I wonder when we start looking at them the same way?
They don't need to hide anything. This type of activity is playing off of the success of the North Koreans and Russians in neutralizing US power in the face of a completely inept and corrupt government.
The audience is other Asian and African states. The message is "we can act with impunity". The US will probably do some tit-for-tat exchange, but the US scope to do anything is limited due to the potential for impact on US businesses.
Bullets have been obsolete for decades. Wars are currently fought by selling shitty financial instruments en masse to your opponents while you sit and watch them implode from afar.
The ensuing civil strife that can occur if this is successful will make a literal, on the ground, bombs in the air, guns shoot war all the easier to attain for hawks that are good at stirring up the masses. Need I remind you that China has a male surplus, and sadly, military enlistment will become a stronger appeal for single men if they do not have a family nor hope of starting one in the traditional sense. More and…
WW1 turned out to be far more deadly because the participants were stuck thinking of war in terms of old conflicts while technology advanced. I don’t see ground invasions working the same way against adversaries with nukes.
This is a good counter example for whenever you find yourself in an argument with anti-adblocker folks.
But these folks still have no answer for how free websites they consume daily (e.g. news) are to be funded, they don't pay, and don't want to see ads either. Yet they still expect these websites to exist. I use Firefox's built Enhanced Tracking Prevention, that some sites call "ad blocking" but in reality it is super easy to have ads that don't get blocked by it, just make them non-creepy.
Richard Stallman: The Internet Sharing Licence (2012)
If you're negligent in securing your site and it gets infected, your site should be blocked. You shouldn't be able say "well it's technically not us, it's the CCP!" whilst not doing anything about it. As for badiu being a major site, that can be resolved by browser vendors displaying a special page explaining to its users of the situation.
You are interpreting a correlation as a causality. More likely (IMO) is a common cause, countries that consider themselves enemies for whatever reason are both unlikely to trade with eachother, and likely to go to war with eachother.
The EU was founded with the explicit goal that increasing trade between European countries would prevent war. It's impossible to prove causality, but Europe has never seen longer and more widespread peace than the last 70 years.
only if you think that europe is eu, which it is not
Browsers really have to be a lot more skeptical about the code they run. Running code should not be able to randomly attack any IP address on the internet. Code from non-TLS pages should not be able to run at all. Perhaps that should also apply to code loaded from 3rd party sites.
Connecting to a web page should not be consent to allow the operators of that web page to make my computer/phone do whatever they want on the net. It certainly should not be consent to delegate that power to others, either via a embedded link or a MITM attack.
pwn a couple ad servers and service the poisoned js. It doesn't seem something that a dedicated malicious hacker group couldn't do.
Except that's not what's happening here, unless your claim is they compromised baidu and Qihoo 360 and both don't care to fix it.
baidu and Qihoo 360 are massive companies. Serving the stuff either means they are doing it deliberately (on behalf of the government), or an active MITM is doing it, which given the scale can only mean ISP and ergo (since this is China) government level. The active MITM seems plausible since a) only unencrypted http traffic gets injected (so far), and b) the Chinese government wouldn't want to put the onus on two of their most important internet companies alone.
You are interpreting a correlation as a causality. More likely (IMO) is a common cause, countries that consider themselves enemies for whatever reason are both unlikely to trade with eachother, and likely to go to war with eachother.
The EU was founded with the explicit goal that increasing trade between European countries would prevent war. It's impossible to prove causality, but Europe has never seen longer and more widespread peace than the last 70 years.
Europeans tend to credit the EU/EEC for the peace, but as an American, I find that totally implausible. The peace was because Europe was divided into two vassal regions and the actual superpowers decided not to go to war because of MAD. Now that the Cold War is over, we've already had a series of wars in the Balkans and various wars in the Russian periphery. True, France and Germany have taken a break from fighting each other for a long-ish stretch, but I think that trend would continue even with a Frexit because it's mostly built on memories of how bad the last two wars were.