Live data from Hacker News

South Korean telecom company attacks torrent users with malware

tomshardware.com

41–50 of 158 posts

Re: South Korean telecom company attacks torrent users with malware

#41
post #11
post #2

Unsurprisingly, terrible Korean internet strikes again. ISPs try to charge companies insane fees because customers want to connect to their servers. Company decides to use peer-ro-peer instead so the ISP starts installing spyware on customer computers. Makes me wonder where this myth of "good Korean internet" even came from if everything ends up so bandwidth constrained. Is it because all the customers and services a…

South Korea at least used to have blazingly fast internet infrastructure . Of course that didn't make up for shitty banking websites that you could only use by running Internet Explorer and allowing it to install "security plugins" that hook into Windows kernel, but at least the internet was fast, and it did give Korea an edge for its IT industry. That was, I think, about twenty years ago. I've been living in the US…

I remember visiting SK back in 2005-6, and the only way to get online was to install an IE plugin.

Re: South Korean telecom company attacks torrent users with malware

#42
post #14

Unfortunately, it's not explained in the article how the malware was actually sent to users. I wonder how they did it.

Especially because BitTorrent is mitm-resistant (uses hashes).. did they find a 0day in the client?

Or mitm your download of the .torrent file (and/or anchor link site)

Re: South Korean telecom company attacks torrent users with malware

#43
post #7
post #2

Unsurprisingly, terrible Korean internet strikes again. ISPs try to charge companies insane fees because customers want to connect to their servers. Company decides to use peer-ro-peer instead so the ISP starts installing spyware on customer computers. Makes me wonder where this myth of "good Korean internet" even came from if everything ends up so bandwidth constrained. Is it because all the customers and services a…

Another memory from the terrible South Korean Internet is how the national banks required customers to log in using Internet Explorer because of mandatory ActiveX blobs of code.

It makes me sad that all of these started with US's restriction on the export of cryptography, which prompted South Korea (among others) to develop a domestic algorithm that was unsupported by contemporary browsers at that time.

Re: South Korean telecom company attacks torrent users with malware

#44
post #27
post #2

Unsurprisingly, terrible Korean internet strikes again. ISPs try to charge companies insane fees because customers want to connect to their servers. Company decides to use peer-ro-peer instead so the ISP starts installing spyware on customer computers. Makes me wonder where this myth of "good Korean internet" even came from if everything ends up so bandwidth constrained. Is it because all the customers and services a…

How is this not criminal?

It is criminal. From the article, 13 KT employees and contractors were charged.

Re: South Korean telecom company attacks torrent users with malware

#45

Unfortunately, it's not explained in the article how the malware was actually sent to users. I wonder how they did it.

Yeah, until any details are provided, I would just assume that the ISP already requires that users install some kind of software, and they just pushed the malware through that program.

You don't need to install any software to use the internet at home in Korea. You just get a modem that connects to fiber at one end and exposes an ethernet port (or wifi) at the other end. Just connect to that port and you're online immediately.

ISPs also provide TV and a bunch of other services, though, and some of them might require installing specific software in order to use on a PC. Or perhaps they hijacked an unencrypted download of someone else's software, most likely some component of the file sharing service in dispute.

Re: South Korean telecom company attacks torrent users with malware

#46

MITM by ISP and the government! Even SK constitution said it is illegal. but they don't give a damn about it. They are scanning SNI field and manipulate packet to prevent user visit certain sites.

> Even SK constitution said it is illegal. but they don't give a damn about it.

This is a popular meme that is also not entirely correct. I should stress that this incident is very different from the usual MITM from ISP and government though. I assumed you are talking about the general MITM because you mentioned SNI (because you can't put malwares with just SNI sniffing).

The constitution only says about the "privacy of correspondence" in the Article 18, and several acts including the Protection of Communications Secrets Act (통신비밀보호법) [1] and the Act on Promotion of Information and Communication Network Utilization and Information Protection (정보통신망 이용촉진 및 정보보호 등에 관한 법률) [2] do have many exceptions that make them legal at least in principle. Indeed, most websites blocked by SK ISPs host either illegal obscene materials (distinct from the legal pornography in the SK legal system) or advocacy for North Korea (illegal due to the National Security Act 국가보안법). I'm not necessarily for such blocks but it is plain wrong to say that they are illegal.

[1] https://elaw.klri.re.kr/eng_service/lawView.do?hseq=7235&lan...

[2] https://elaw.klri.re.kr/eng_service/lawView.do?hseq=38422&la...

Re: South Korean telecom company attacks torrent users with malware

#47

>Police officials acted on the information and discovered it came from KT’s own data center south of Seoul. ... They’ve since identified and charged 13 individuals, including KT employees and subcontractors directly connected to the malware attack last November,... I'm actually very impressed. If this happened in the US, the police wouldn't care about it at all, and would just tell everyone affected that "it's a civi…

This makes sense because the US does not have a set of laws that criminalize Computer Fraud and Abuse

Kevin Mitnick would disagreed

Re: South Korean telecom company attacks torrent users with malware

#48
post #41
post #11

Earlier quoted context omitted.

South Korea at least used to have blazingly fast internet infrastructure . Of course that didn't make up for shitty banking websites that you could only use by running Internet Explorer and allowing it to install "security plugins" that hook into Windows kernel, but at least the internet was fast, and it did give Korea an edge for its IT industry. That was, I think, about twenty years ago. I've been living in the US…

I remember visiting SK back in 2005-6, and the only way to get online was to install an IE plugin.

This was true in 2013 as well. I've heard this has changed in the last 5 years or so, though.

Re: South Korean telecom company attacks torrent users with malware

#49
post #35

Earlier quoted context omitted.

wouldnt competition naturally produce better products if there are 3 providers? from what i remember services from companies, or really any type of services were top notch in korea. due to culture, competition, etc. also noting pricing in general is very high in korea

https://en.wikipedia.org/wiki/Natural_monopoly Competition theory assumes that if firms are abusing their market position by overcharging consumers, competitors can enter the market and undercut them. When you have a market with very high barriers to entry (government regulation + physical infrastructure costs), you can't just start your own internet service provider to undercut existing Korean telecommunications, be…

The EU forces telcoms and ISPs to allow competition on their infra. Decent prices and good service

Re: South Korean telecom company attacks torrent users with malware

#50
post #11
post #2

Unsurprisingly, terrible Korean internet strikes again. ISPs try to charge companies insane fees because customers want to connect to their servers. Company decides to use peer-ro-peer instead so the ISP starts installing spyware on customer computers. Makes me wonder where this myth of "good Korean internet" even came from if everything ends up so bandwidth constrained. Is it because all the customers and services a…

South Korea at least used to have blazingly fast internet infrastructure . Of course that didn't make up for shitty banking websites that you could only use by running Internet Explorer and allowing it to install "security plugins" that hook into Windows kernel, but at least the internet was fast, and it did give Korea an edge for its IT industry. That was, I think, about twenty years ago. I've been living in the US…

[deleted]
Post reply on HN