Feds: Chinese spies orchestrated hack that stole aviation secrets
arstechnica.com
arstechnica.com
People need to get serious about protecting the privacy of their communications and data. Nobody cares until it is too late. Seems like this kind of event might be the incentive people need to make the extra effort to use products that encrypt their data in rest and in motion.
1: https://www.afr.com/technology/web/security/how-chinese-hack....
I made this comment earlier on a story about China POPs in Canada and USA nefariously re-routing traffic through China Telecom networks but that story was marked as a dupe by the time I made my comment so no discussion ensued.
If a company is heavily dependent upon existing IP then having it all stolen will be a major contributor to their downfall. But so is that dependence. Hard to make suggestions without appearing to victim blame, but companies need to be able to survive even without secrets.
During the dot-com bust they also lost a bunch of money selling carriers equipment on credit and that is when the tough times and inability of the executives to right the ship began.
This is a big deal because the Comac 919 is ready to go but without a powerplant, they're having to turn to Western sources for an engine. The same thing happened with the J-10 project a decade ago and again recently with the J-20. Without a reliable powerplant, you can't build good airplanes and you can't easily reverse engineer a precision turbofan.
I imagine making a modern jet engine is somewhat more challenging than making a ballpoint pen (both endeavours involve making high precision metal parts).
[1] https://www.washingtonpost.com/news/worldviews/wp/2017/01/18...
The numbers given suggested that it cost just over $17 million to import the pen tips to manufacture 38 billion pens. Which puts the cost per tip at $0.00045/piece.
It's not hard to see why manufacturers wouldn't bother creating a process and tooling for that if it already exists.
More importantly, the article put emphasis on the idea that once the government complained about it, something was done quite quickly. Which is completely different story to a military jet engine, which is being researched, funded and developed by government-linked organizations.
I have a hard time believing that China couldn't replicate that technology for 70 years.
"What fool will sell us his secrets?", asked Uncle Joe Stalin. "I will", said Sir Richard Stafford Cripps, CH, FRS.
Or perhaps not; either way, there could have been good reasons - see discussion here[1]
[1]https://www.quora.com/In-the-beginning-of-the-Cold-war-why-d...
China is advancing quickly but they can't make up 200 years of industrial headstart by the west in 20 years.
1. Most Americans aren't paying attention / don't respond to them.
2. We clearly have a situation where POTUS if he wanted could just make up a story and get people's attention.
On the other hand stories like this would fit in nicely with state run / controlled media as the feed could simply be placed where you know it would get attention (if only because it is exists largely by itself).
I do want to point out that general Chinese people in mainland China view these type of activities negatively as well. It should not be thought as the general people endorse such activities, they were mostly made unaware of these, as always.
And ironically, let's face it, every country is doing something in the spy game, China is not alone in using underhanded methods to steal secrets and intelligence. And each country can easily spout their justifications too.
Here's a link:
https://www.theguardian.com/world/2013/sep/09/nsa-spying-bra...
Learn your history. Everyone does it. Europeans and Americans did it. Now the Chinese are doing. The only reason we're bitching is because now we're the targets instead of the thieves.
Everyone is standing on the shoulders of someone else.
https://en.wikipedia.org/wiki/Smuggling_of_silkworm_eggs_int...
https://www.atlasobscura.com/articles/porcelain-corporate-es...
Harris, John (1998). Industrial Espionage and Technology Transfer: Britain and France in the Eighteenth Century. Aldershot: Ashgate Publishing Limited. p. 680. ISBN 0-7546-0367-9.
https://www.smithsonianmag.com/smart-news/how-industrial-esp...
https://theintercept.com/2014/09/05/us-governments-plans-use...
https://www.the-american-interest.com/2014/12/10/the-new-ind...
https://searchinginhistory.blogspot.com/2015/02/francis-cabo...
https://www.pri.org/stories/2014-02-18/us-complains-other-na...
https://www.hsdl.org/?view&did=3729
The fact that we don't hear much about our own examples of stealing other civilization's secrets is just a matter of the fact that we are now ahead. If the tables were turned just like they were in the past, we'd go right back to stealing other people's tech. To say that other people shouldn't do things that we have and would do makes little sense. That isn't to say that we shouldn't protect ourselves, it's just to say that people need to stop the damn moralizing as if we were any better.
What is unethical about nation states spying on other nation states' militaries? The aerospace industry - of every country - is intimately entangled with their defense departments.
But, I don't think China is somewhere I would want to live and it has nothing to do with the people. Then again for the same reason ok wouldn't want to live in the US right now
https://curiositystream.com/video/1746/tea-war-the-adventure...
1. Escalation, the instinctive response of angry humans, is generally a bad idea in international relations (or any relations). I once read a veteran practitioner express it this way: 'The job of international relations is to prevent a B-level problem from becoming an A-level one'. The U.S. and China, for example, have a very large number of interactions on an enormous number of issues; if someone retaliated every time they were unhappy - and then of course the other side would re-retaliate - that would be all that was happening, lots of treasure would be wasted, war would be risked, and positive things wouldn't get done. That doesn't mean that you do nothing, but you need to respond in a way that doesn't escalate the situation - it's not always easy to thread that needle, but that's what the professionals are there for. Another reason retaliation is bad is that it puts the other side in control of your actions - they can provoke you into doing what suits them, when it suits them. You want to act at the time and place and using the means that best suits you, not dance to their tune.
2. The U.S. does take action against them, but not in public. This helps prevent escalation - the Chinese government isn't publicly challenged and forced to respond.
3. Espionage is, in one sense, like a state of war. The U.S. is already doing all they can to shut down Chinese espionage and to spy on China, and vice versa. China isn't breaking any rules in the context of espionage (AFAIK), and if the U.S. could do more, they'd already be doing it.
https://www.pri.org/stories/2014-02-18/us-complains-other-na...
Going back even further, the byzantine empire stole silkworms to break china's monopoly on silk.
https://en.wikipedia.org/wiki/Smuggling_of_silkworm_eggs_int...
As a matter of fact, the biggest spies and thieves in the world are allies. Do you know who spies on the US the most? It's not china. It's not russia. It's actually canada, britain and israel. Do you know who we spy on the most? Our allies. We aren't going to sanction our allies.
Think about it. Why do countries have intelligence agencies? Should we sanction all countries with intelligence agencies?
> In early December 2013, prosecutors said, members of the conspiracy used the same tactic to hack the Australian registrar again, this time to hijack domain names of one of the targeted technology companies.
What's with that registrar, don't they learn from their own mistakes?
The blurred line between Chinese intelligence and Chinese businesses is a dangerous one as it can turn IP theft into a real escalation.
That's literally how it's worked throughout history. Europeans did it. Americans did it. Now the Chinese are doing it.
Should and how the world actually works are two different things that do not always align.
While I understand the desire by many to hold the US more accountable, combined with the instinctive "love the underdog, hate the champ" philosophy that shapes the narrative of the global left wing, keep in mind that China's current state-capitalist structure is, economically, much more similar to Nazi Germany than to any Socialist or Communist state of the past.
2) Remember that the narrative of the current US president is that the US is the underdog attacked from everywhere, and so some categories of enemies should be designated and dealt with at large scale and brutally, some of those ennemies will be internal sub-categories of people, and that the economy of war should be reinforced.
I am not really defending China (just a bit, because I feel the racist undertone on those attacks), but I think having the last super-power behave like a good neighbor and a role model would have a more positive impact on the world than designating a few ennemies, waging war, destroying internal democracy to concentrate the power, and acting generally like a bully.
the US was the only country on earth that had nukes for 5 years and was unscathed from WWII. We could have enslaved the entire planet under threat of nuclear fire, but instead we gave away billions to help Japan and Europe rebuild. There's never been a more selfless act in human history as far as a country not seizing an opportunity to gain power is concerned. There's probably never been a larger power disparity between a single country and the rest of the world than post WWII USA, and they did exactly nothing to take advantage of that disparity.
Not to say US is innocent in recent years, but it's still minor considering there's nothing stopping us from plundering the world other than our own morals
>I am not really defending China (just a bit, because I feel the racist undertone on those attacks)
Russia gets slammed just as hard on all fronts and nobody cares to defend them, China can take a little abuse.
Additionally, please elaborate on how the US is currently "destroying internal democracy".
As far as bullying goes, if you are referring to the trade war, I think blowing up trade deals which were drawn up decades ago to help sustain western Europe against Soviet aggression is a good thing, and long overdue. Germany shouldn't get to be the only rich nation with jobs for its working class. Likewise, China shouldn't get to pretend to be a developing nation (WTO) while keeping their citizens poor by devaluing the yuan to maintain mercantilist policies.
Your point? Orthogonal to the issue at hand.
This lines up with having a Chinese spy in California Senator Diane Feinstein's office: Being both a California Senator and a 'Gang of Eight' intelligence member, the Chinese could be alerted early on about potential investigations or indictments.
https://www.sfchronicle.com/bayarea/matier-ross/article/Sen-...
We've seen several indictments of Chinese nationals since this story broke.
Edit: Actually the previous indictment I had in mind was the original arrest of the agent, this is just building on that case: http://www.atimes.com/article/chinese-agent-indicted-in-jet-...
That's not really an accurate description of what happened. Here's Feinstein's statement:
"Five years ago the FBI informed me it had concerns that an administrative member of my California staff was potentially being sought out by the Chinese government to provide information. He was not a mole or a spy, but someone who a foreign intelligence service thought it could recruit.
The FBI reviewed the matter, shared its concerns with me and the employee immediately left my office. He never had access to classified or sensitive information or legislative matters. The FBI never informed me of any compromise of national security information."
Nothing in your article or any other reputable sources I've read conflict with that statement.
From your article:
'“He didn’t even know what was happening — that he was being recruited,” says our source. “He just thought it was some friend.”
The FBI apparently concluded the driver hadn’t revealed anything of substance.
“They interviewed him, and Dianne forced him to retire, and that was the end of it,” says our source.'
Update: Funny, now the comment is upvoted and my question is downvoted :-)
>According to four former intelligence officials, in the 2000s, a staffer in Senator Dianne Feinstein’s San Francisco field office was reporting back to the MSS. While this person, who was a liaison to the local Chinese community, was fired, charges were never filed against him. (One former official reasoned this was because the staffer was providing political intelligence and not classified information—making prosecution far more difficult.) The suspected informant was “run” by officials based at China’s San Francisco Consulate, said another former intelligence official. The spy’s handler “probably got an award back in China” for his work, noted this former official, dryly.
https://www.politico.com/magazine/story/2018/07/27/silicon-v...
"Former intelligence officials told me that Chinese intelligence once recruited a staff member at a California office of U.S. Senator Dianne Feinstein, and the source reported back to China about local politics. (A spokesperson for Feinstein said the office doesn’t comment on personnel matters or investigations, but noted that no Feinstein staffer in California has ever had a security clearance.)"
None of that contradicts what your first article said, that the staffer didn't know he was being recruited. He was talking about local politics to someone who worked for the Chinese government who was pumping him for information.
The rest is just speculation on the part of someone the reporter talked to about how he could have theoretically committed a crime despite not being prosecuted.
Everyone in the government contractor industry (or government itself) gets annual training on spotting these sorts of leaks. Just discussing any stuff (even if you don't work with classified things) you're doing at work with a foreign national is touchy enough that many people avoid doing it all together. Everyone who works for the federal government or a company that works for the federal government is well aware of this. This isn't an innocent mistake. It's highly unlikely that this guy didn't know what he was doing was questionable.
I'm sure someone talked to him about it, but it's unlikely he got any sort of serious training.
He supposedly talked to someone who worked their way into his life over several years about non-sensitive, non-classified material related to local politics. I imagine he would have been more careful/aware if the "friend" was asking about classified information, or if his "friend" hadn't done it very slowly.
He said as soon as it was semi public that he was involved his personal email lit up with fake emails. His email wasn't even listed anywhere in association with the campaign and he didn't use it for the campaign. Presumably they just guessed it (could have done that easily) or they found a list or something.
So just getting involved, now you're personally involved all the way.
It seems ineffective to just publicly indict Chinese hackers that are in China. The indictments are public, so the likelihood that said hackers come to the US are nill. Seems more effective to erase the trade secrets, or any other data, from these organizations.
I could list several important reasons why "hacking back" would be a bad idea, but I'll just stick to the pragmatic "people who live in glass houses shouldn't throw stones". We have a much larger surface area and much more to lose if we get into that kind of tit-for-tat. Instead, the US is building a case that China is an aggressor, and is responding in other ways that will apply more pressure. For example, tariffs on Chinese exports.
Sure, it's bad for the would-be rent-seekers whose plans have been threatened. Why should anyone else care about them?
Thanks China, and keep up the good work!
The way it is supposed to work is, company A researches a tech, company b also researches a tech, the best one wins (or more likely they split the market), the competition induces more advances, and eventually the old tech becomes cheap (or free) and widely available as it is supplanted by even newer, better tech.
And yea I know our patent system is broken, etc. But I don't understand how you can have a general principle that the people who created something don't have the right to benefit off of it.