Interesting People mailing list archives

more on Hacking from Chinese Networks


From: David Farber <dave () farber net>
Date: Thu, 25 Aug 2005 12:16:01 -0400



Begin forwarded message:

From: Suresh Ramasubramanian <suresh () hserus net>
Date: August 25, 2005 8:30:47 AM EDT
To: dave () farber net
Subject: Re: [IP] Hacking from Chinese Networks


I forgot to add that my OECD paper on spam problems in developing economies examines all these factors, and suggests some possible methods to mitigate them, that translate more to a lot of hard work and cooperation over several years than a chimerical "solution"

http://www.oecd.org/dataoecd/5/47/34935342.pdf

At 05:58 PM 8/25/2005, Suresh Ramasubramanian wrote:


Would it help to decide if we throw into the balance the fact that the PRC has

1. Huge (staggering, by US standards) amounts of connectivity and broadband penetration

2. A major problem with software piracy so that lots of servers or PCs there are likely to be running pirated and insecure software, running on a pirated OS version that, as it is pirated, cannot download security updates

3. Large telco + ISPs that are not exactly noted for a good track record on network security

Those three make for a lethal combination - there's a positive cornucopia of insecure machines in China for script kiddies around the world to dip into.

I wouldn't speculate about "cyberwar!" without thinking a lot more about these factors.

        srs

At 05:31 PM 8/25/2005, you wrote:

One official familiar with the investigation said it has not provided
definitive evidence of who is behind the attacks. "Is this an
orchestrated campaign by PRC or just a bunch of disconnected hackers?
We just can't say at this point," the official said, referring to the
People's Republic of China.




-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/


Current thread: