China's Man-On-the-Side Attack on GitHub • Hacker News Board

Re: China's Man-On-the-Side Attack on GitHub

#321

Post by PopsiclePete » Wed, Apr 01, 2015, 9:08 PM UTC

JohnTHaller wrote: post #57

Since the question of "why" and "how" is coming up again, here's a quick summary I posted on reddit: From a few different analysis on HN and elsewhere... Baidu has an analytics product and an ads product, much like Google Analytics and Google AdSense, which are used on all kinds of websites via Javascript. China has set the Great Firewall of China to modify some of Baidu's assets so that any non-Chinese IP gets a mod…

So I asked this before, and will ask it again.

If I'm a start-up, or any "hot" website, do I have anything to gain by allowing myself to be reached by computers inside China's IP space? Same for Russia, North Korea? All 3 are known to be the source of many disruptive attacks, neither of the 3 are important markets, with the exception of China, where they've decided to re-implement all non-Chinese internet services anyway.

I'm honestly curious. I'm in the process of launching a project of my own and wonder if there's any reason to not attempt to blacklist China/Russia en masse?

Re: China's Man-On-the-Side Attack on GitHub

#322

Post by fatman13gg » Thu, Apr 02, 2015, 8:44 AM UTC

jjcc wrote: post #35

Most people might not know what kind of organization GreatFire really is because too much context is missing. I only discovered recently it's not so simple. There have been a lot of talks about the behavior of GreatFire for quite for a while but most of the talks are in Chinese. There are some in English though, to give everybody a glimpse here is an example: https://github.com/greatfire/wiki/issues/1 I have an impre…

hmmmm...I wonder if creating an account and upload wikileak document would be good incentive for Github to amend its ToU.

Re: China's Man-On-the-Side Attack on GitHub

#323

Post by tn13 » Sat, Apr 04, 2015, 12:21 AM UTC

themartorana wrote: post #8

tn13 wrote: post #7

Our government is using our own money to spy and undermine our tech companies. What exactly is it doing to ensure American companies are defended ? Protecting us from international thugs like China's Communisty Party is the primary duty of our government.

"... should be the primary duty of our government." Fixed it? Although it's interesting to think about. Actual government retaliation would/could be seen as war provocation, especially if China holds on to any plausible deniability. Cyber warfare is currently very hard to prove, but even harder to hold accountable for. Even with DPRK, and our little shut-down-the-"internet" quiet retaliation thing that happened a few…

I dont think that is the case. US government has abdicated its primary duties for protecting interests of military- industry complex.

What evidence did US provide before attacking Afghanistan? Surely 9/11 was an aggression but US had no evidence to link it with the state of Afghanistan. After American ass got whooped in Afgan they have returned claiming Taliban are no more as bad as they use to be.

What evidence does US have to carry out random Drone strikes in Pakistan killing random people ?

And let me not even start with Iraq, which did absolutely nothing to offend US but instead was destroyed in the name of WMD that did not exist.

But when it comes to Iran, where US interest might have legitimate threat, where Chinese expansion in South China sea and many other places where US could have used its military muscle the government acts as if they are China's bitch.

The real problem I think is that US government has lost the sight of legitimate national security over spending taxpayers money making their friends rich.