Live data from Hacker News

Chinese hack U.S. Weather systems, satellite network

washingtonpost.com

11–20 of 71 posts

Re: Chinese hack U.S. Weather systems, satellite network

#11
http://i.imgur.com/sovN9Gp.jpg

Is it just me, or is this apparently the reaction every time a US government or military system gets hacked by China?

"Yep, we got hacked again. But we're just going to do our best to minimize the damage and pretend it never happened. No meaningful action will be taken against the perpetrators."

Re: Chinese hack U.S. Weather systems, satellite network

#12
post #11

http://i.imgur.com/sovN9Gp.jpg Is it just me, or is this apparently the reaction every time a US government or military system gets hacked by China? "Yep, we got hacked again. But we're just going to do our best to minimize the damage and pretend it never happened. No meaningful action will be taken against the perpetrators."

China officials would probably deny that it was them if the US publicly accused them, saying it was some isolated hacker acting on its own, or maybe a foreign country routing its traffic through a VPN in China, AND they would point out that the US is doing exactly the same in China and elsewhere (Stuxnet, etc...).

Re: Chinese hack U.S. Weather systems, satellite network

#13
I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular.

Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn.

When the US talk about cybersecurity/"cyber wars" in general they're talking about something more akin to a Hollywood movie than anything you see on the ground on either side of the "fight."

I'm extremely sceptical every time they claim Chinese responsibility. I am sceptical not because China wouldn't have the skills or motivation to do so (they do/would) but because they jump to these conclusions unrealistically quickly and if their adversary covered their tracks even modestly pointing fingers like that would be quite hard (e.g. send it through Russia).

Re: Chinese hack U.S. Weather systems, satellite network

#14

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

Having hacked Google, Juniper, Symantic, Morgan Stanley and countless USGOV sites - why not hack NOAA? Its not as if there will be any USGOV response. No sanctions. No demarche of which I'm aware. No counter-attack that has been publicized by China. Turning the other check is not a valid strategy in a prolonged conflict.

Re: Chinese hack U.S. Weather systems, satellite network

#15
post #3

The article does not discuss much the motivation they might have had for this hack, aside from the fact they're probably looking for gaps in general US systems. But I'm very curious about the economics of hacking another nation's weather service; China could give itself significant (and creepy) economic advantages my MITMing the data from the satellites. I wonder if they're considering things like this? Edit: Also, i…

well, weather is pretty important when it comes to anything happening outside.

knowing how much your opponent knows about the weather is also pretty important.

...and so is knowing where they want to know about the weather.

Re: Chinese hack U.S. Weather systems, satellite network

#16

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

I share that skeptical feeling. It's always been a common technique to bounce an attack on US servers through servers in a foreign country that doesn't speak English much and doesn't have the best relationship with the US. China is the ideal one for this, and generally has the best supply of vulnerable servers to do this through.

Re: Chinese hack U.S. Weather systems, satellite network

#17
post #11

http://i.imgur.com/sovN9Gp.jpg Is it just me, or is this apparently the reaction every time a US government or military system gets hacked by China? "Yep, we got hacked again. But we're just going to do our best to minimize the damage and pretend it never happened. No meaningful action will be taken against the perpetrators."

What can they do? This certainly isn't something worth going to war over. Economic sanctions would just hurt everybody. What else?

Re: Chinese hack U.S. Weather systems, satellite network

#18
I don't know who this Wolf guy is, but he's absolutely right: if we are in the government, and we have a breach, and we're working on it, we have an obligation to fess up. (Unless there's some kind of counter-intelligence operations underway)

We can all sit back in our comfy chairs and debate whether it really is China or not, whether various networks are secure or not, or how much various agencies can store (and the dangers associated with them storing things). But we can only do that if we have recent and valid information about what's going on. Good public policy decisions depend on an informed electorate. This kind of situation is not the place to be covering up your mistakes.

Re: Chinese hack U.S. Weather systems, satellite network

#19

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

Perhaps they too readily blame the Chinese _government_, however I'm not sure that the chinas place in the spotlight is _totally_ unwarranted:

tail -n 50 /var/log/auth.log

Nov 12 15:33:28 VPS-3167 sshd[11950]: Connection closed by 122.225.97.110 [preauth] [SNIP]

Nov 12 20:12:51 VPS-3167 sshd[12016]: Connection closed by 61.174.50.164 [preauth] [SNIP]

Nov 12 20:40:44 VPS-3167 sshd[12031]: Connection closed by 122.225.97.72 [preauth]

The list goes on and on, and the ip's in the last fifty lines were all Chinese or Russian, still they could also have been hacked themselves.

Re: Chinese hack U.S. Weather systems, satellite network

#20
post #3

The article does not discuss much the motivation they might have had for this hack, aside from the fact they're probably looking for gaps in general US systems. But I'm very curious about the economics of hacking another nation's weather service; China could give itself significant (and creepy) economic advantages my MITMing the data from the satellites. I wonder if they're considering things like this? Edit: Also, i…

It is probably less Hollywood-like, such as predicting cloud cover over areas you'd be interested in using your satellites to look at. Or maybe they had a cyberhacking campaign and broke into as many US orgs as possible simultaneously, but each department discovers it at different times. Or, as others have said, maybe it isn't China at all but some other party?
Post reply on HN