Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Great Cannon has been deployed again

cybersecurity.att.com

Post reply on HN
Print view View original

241–250 of 470 posts

Re: The Great Cannon has been deployed again

#241

Post by greggman2 »

upofadown wrote: post #218

Browsers really have to be a lot more skeptical about the code they run. Running code should not be able to randomly attack any IP address on the internet. Code from non-TLS pages should not be able to run at all. Perhaps that should also apply to code loaded from 3rd party sites. Connecting to a web page should not be consent to allow the operators of that web page to make my computer/phone do whatever they want on…

Unfortunately there's a giant category of devices that can't serve TLS. Like pretty much every consumer router in existence that you connect to through a webpage. Someone needs to come up with a solution for that. Ideally one that works with free and open source projects and not just well funded companies.

Re: The Great Cannon has been deployed again

#242

Post by saagarjha »

Steltek wrote: post #147

What DDoS protection are they using? AT&T didn't say other than it was present.

I'd guess Cloudflare:

  $ nslookup -type=soa lihkg.com
  Server:  8.8.8.8
  Address: 8.8.8.8#53
  
  Non-authoritative answer:
  lihkg.com
   origin = kevin.ns.cloudflare.com
   mail addr = dns.cloudflare.com
   serial = 2032679273
   refresh = 10000
   retry = 2400
   expire = 604800
   minimum = 3600
  
  Authoritative answers can be found from:

Re: The Great Cannon has been deployed again

#243

Post by jessaustin »

dTal wrote: post #183
LandR wrote: post #144

Earlier quoted context omitted.

I didn't see this as a problem solved by war, honestly. We need to weane ourself off a dependency on China for cheap goods. We need to decide that we value human life over a cheap phone. China gets away with what it does because it feeds our need for shiney new trinkets. Frankly, it's disgusting. The world could stand up to China and say it doesn't want it as a trading partner. Maybe that wouldn't even help, but do w…

With all due respect - from a systems perspective, that's not a solution; it's a wish for a pony, no less so than complaining "where are China's values"? Solutions are required because people are selfish and shortsighted - merely pointing this out accomplishes little. It's like saying that police aren't a solution to murder - what we really need is to stop killing each other.

The current president isn't wishing for a pony. He has aggressively, unilaterally changed USA trade policy with respect to China. One might suspect his goals in this exercise. Still, if he can do this in pursuit of his idea of "fairness", then some other president, perhaps with the cooperation of Congress, could have done similar with the idea of penalizing some of the more odious behavior of the Chinese state.

That hypothetical president who cared about e.g. Tibet or the Uighurs couldn't have expected any popular intellectual support for that effort, however, since our popular intellectuals act largely to feather their own nests with Panglossian tributes to how wonderful TPP could have been.

Re: The Great Cannon has been deployed again

#245

Post by rurp »

chewbacha wrote: post #161
MR4D wrote: post #142

Earlier quoted context omitted.

War seems to progress as follows: 0 - Peace 1 - Trade War 2 - Financial War 3 - Electronic War 4 - Shooting War Note that 1 & 2 are different types of Economic war, and could be grouped together. The steps occur in order, but steps can be skipped. From a US-centric point of view, North Korea and Iran seem to be at #3. China & Russia are at a limited version of #2. Chinese/HK seem to be at #3 with each other.Given how…

I don't know who to attribute this to but I've heard a saying: "Countries that trade with each other don't make war with each other." As we isolate countries and disrupt trade we definitely are increasing the risk of conflict.

> "Countries that trade with each other don't make war with each other."

I'm pretty sure this was the prevailing thinking prior to World War 1. A large scale conflict would be so damaging on a human and economic level that most assumed the people in power would find away to stop a massive war from breaking out. Well, they were right about the first assumption, but very wrong about the second.

Re: The Great Cannon has been deployed again

#246

Post by kortilla »

e2le wrote: post #56
Waterluvian wrote: post #32

Earlier quoted context omitted.

99.9% of devices are owned by someone who has absolutely zero technical ability to fulfill this responsibility. So I'd say the responsibility needs to be satisfied another way. Maybe it escalates to the ISP. I mean, unless we start issuing Internet Licenses the way we do Driver's Licenses. In the early 2000s my cable provider would outright shut off our Internet if my dumb brother or my dumb self got us all virused u…

I agree, most don't have the technical ability to administrate their devices although I'm not sure if that excuses basic competence. I like the idea that an ISP would disable the connection of a subscriber however that would depend on how they define malicious activity.

What you’re describing as “basic competence”, which is removing viruses from a PC in this case, would exclude 99% of users.

Re: The Great Cannon has been deployed again

#247

Post by kortilla »

saagarjha wrote: post #244
gok wrote: post #75

What exactly is the rest of the world getting from allowing China access to the Internet?

The ability to communicate with hundreds of millions of people in China who have nothing to do with this?

Doesn’t seem worth it. Still have several billion living in countries that don’t actively damage the internet. Make do with communicating with them.

Re: The Great Cannon has been deployed again

#248

Post by kortilla »

simias wrote: post #163
FDSGSG wrote: post #30

Earlier quoted context omitted.

It's 2019, what excuse does Baidu have to not support https for these scripts?

As far as I can tell many CDNs will gladly serve their scripts over HTTP if requested: http://cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.mi... I don't know if what's the reasoning behind that.

IIRC there was a time when a browser (maybe IE 6?) would generate a mixed content warning when you would try to load https resources in a http served page.

Re: The Great Cannon has been deployed again

#250

Post by thetopher »

theresAppleBias wrote: post #129
LandR wrote: post #64

Earlier quoted context omitted.

[flagged]

I agree, but given I pay United States taxes, how about the Iraq war with 600,000 dead? I know it's displacing a dictator and it was under the guise of freedom, weapons, and democracy. But if your family died, does it matter? What's the China propaganda say? Unity, equality, efficiency? Why is our murder better?

All kinds of bad things are happening in the world. This thread is discussing a bad thing being done by the Chinese government. That doesn't suggest that other bad things are any better or worse.

https://en.wikipedia.org/wiki/Whataboutism

Post reply on HN