Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Chinese hack U.S. Weather systems, satellite network

washingtonpost.com

Post reply on HN
Print view View original

31–40 of 71 posts

Re: Chinese hack U.S. Weather systems, satellite network

#31

Post by freehunter »

diminoten wrote: post #26
freehunter wrote: post #23

Earlier quoted context omitted.

Public companies risk running afoul of US data breach laws if they don't disclose a breach and customer data was potentially stolen. So it's a matter or piss off your stockholders or break the law. The only winning move is to have proper security before you get hacked.

> Public companies risk running afoul of US data breach laws if they don't disclose a breach and customer data was potentially stolen. There are no US data breach laws, only state data breach laws, and they vary significantly from state to state, also in what constitutes "data", "breach", and "disclosure". So it's not just a matter of breaking the law or not. There are lots of situations where specific companies can…

I work in the Information Security field, so I'm aware. I don't mean US-wide data breach laws, I mean data breach laws in the US. Many states (100% of the states I support) require disclosure in a certain timeframe if customer data has been disclosed.

Re: Chinese hack U.S. Weather systems, satellite network

#32

Post by freehunter »

roylez wrote: post #30

As a Chinese I would prefer to believe our government is behind this. Do you know Beijing (or even the whole country) has a serious smog issue which was first uncovered by American embassy in Beijing? The incident makes the government lose their trust in public, and for quite some time people only want to trust forecast from NOAA in stead of Beijing. If Chinese government hacked NOAA, it would be out of their intenti…

>Do you know Beijing has a serious smog issue which was first uncovered by American embassy in Beijing?

So no one in the Chinese government or citizens had noticed that they can't see across the street until the Americans mentioned it?

Re: Chinese hack U.S. Weather systems, satellite network

#33

Post by state »

Someone1234 wrote: post #13

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

These articles always make me wish I could see the Chinese equivalent. Are the newspapers in Beijing just full of stories about US "cyber attacks" on Chinese infrastructure?

Re: Chinese hack U.S. Weather systems, satellite network

#34

Post by roylez »

freehunter wrote: post #32
roylez wrote: post #30

As a Chinese I would prefer to believe our government is behind this. Do you know Beijing (or even the whole country) has a serious smog issue which was first uncovered by American embassy in Beijing? The incident makes the government lose their trust in public, and for quite some time people only want to trust forecast from NOAA in stead of Beijing. If Chinese government hacked NOAA, it would be out of their intenti…

>Do you know Beijing has a serious smog issue which was first uncovered by American embassy in Beijing? So no one in the Chinese government or citizens had noticed that they can't see across the street until the Americans mentioned it?

People could see the smog for sure, but official forecast would report nothing unusual or indicating the hazard to people's lives. It was till Americans embassy spoke it out that the majority realised we breathe highly polluted air.

Re: Chinese hack U.S. Weather systems, satellite network

#35

Post by internet_arguer »

Someone1234 wrote: post #13

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

I also appreciate how the public unquestioningly believes that the Mars rover was in fact really on Mars. Especially, if one is to ask "qui bono", the answer that you'll get is that the administration is trying to direct attention from its police surveillance of Someone1234. I'm not saying that the Mars rover landing was faked, I'm just asking questions.

Re: Chinese hack U.S. Weather systems, satellite network

#36

Post by ajmurmann »

I never will understand how this spying stuff always is allowed to happen. I know every government does is, but I find it unbelievably dishonest. What kind of relationship is that? I would intuitively see any spying as an act of war, especially if supposedly friendly countries do it.

Re: Chinese hack U.S. Weather systems, satellite network

#38

Post by damon_c »

state wrote: post #33
Someone1234 wrote: post #13

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

These articles always make me wish I could see the Chinese equivalent. Are the newspapers in Beijing just full of stories about US "cyber attacks" on Chinese infrastructure?

Someone I know who grew up in mainland China told me he was raised and taught in school to believe the Tianenmen square massacre was just U.S. fabricated propaganda.

So yes, probably.

Re: Chinese hack U.S. Weather systems, satellite network

#39

Post by rrggrr »

rasz_pl wrote: post #27
rrggrr wrote: post #14

Earlier quoted context omitted.

Having hacked Google, Juniper, Symantic, Morgan Stanley and countless USGOV sites - why not hack NOAA? Its not as if there will be any USGOV response. No sanctions. No demarche of which I'm aware. No counter-attack that has been publicized by China. Turning the other check is not a valid strategy in a prolonged conflict.

Exchange China with NSA and read your post again.

Done. Tepid feeling of unease was experienced that could be also be attributable to the grocery store sushi I had for lunch. To help put your mind at rest, USGOV bureaucrats oscillate across an ass-covering wave of incident driven threat detection peaks, and valleys of privacy right restrictions on their abilities. China, singling out just one state actor, operates unmodulated. There is a difference of level, accountability and transparency that makes your comparison invalid.

Re: Chinese hack U.S. Weather systems, satellite network

#40

Post by SixSigma »

SCHiM wrote: post #19
Someone1234 wrote: post #13

I always appreciate how the US are able to pin every network compromise directly back to China. And not just China but the Chinese government in particular. Almost like VPNs, proxies, TOR, compromised machines, botnets, or similar do not exist in this arena and that a reverse DNS lookup will tell them 1337.mss.gov.cn. When the US talk about cybersecurity/"cyber wars" in general they're talking about something more ak…

Perhaps they too readily blame the Chinese _government_, however I'm not sure that the chinas place in the spotlight is _totally_ unwarranted: tail -n 50 /var/log/auth.log Nov 12 15:33:28 VPS-3167 sshd[11950]: Connection closed by 122.225.97.110 [preauth] [SNIP] Nov 12 20:12:51 VPS-3167 sshd[12016]: Connection closed by 61.174.50.164 [preauth] [SNIP] Nov 12 20:40:44 VPS-3167 sshd[12031]: Connection closed by 122.225.…

My advice is that you shouldn't let that traffic get anywhere near port 22

1) use a different port 2) use ip ban 3) use a firewall with range blocking -

Or do you have a good reason for allowing access from every ip on the internet?

EDIT: removed snark

Post reply on HN