U.S. Coding Website GitHub Hit with Cyberattack
wsj.com
wsj.com
I can't read the article without going through a subscription process first.
http://en.wikipedia.org/wiki/Cyberwarfare#Cyberwarfare_in_th... "The new United States military strategy makes explicit that a cyberattack is casus belli just as a traditional act of war."
In the grand scheme of things, economic damage resulting from cyber-espionage or cyber-sabotage is regarded -- or at least should be regarded -- as a cost of doing business on the Internet. Companies should treat DDoS attacks the way banks treat robberies: inevitable and expected. And just like banks, they should simply buy insurance to cover the costs and damages.
[EDIT: Apparently this is a copy.] Notwithstanding the actions of some in China, reposting newspapers doesn't seem like a service GitHub really wants to provide. Would anyone complain if GH were to pull this content?
Incidentally, TFA was quite informative; good job WSJ!
> The first round was cross-domain JavaScript, stopped with an "alert()". Second round was cross-domain <img>, stopped with referrer. Third was DDoS-ing GitHub Pages. Fourth is the ongoing TCP SYN Flood attack.
> Second round was cross-domain <img>, stopped with referrer.
It does not mention that the alert() used the referrer.
E.g.:
- This works: https://github.com/greatfire
- This doesn't: https://github.com/greatfire/
So far as I know, most links (external or internal) to a Github user's page do not use the trailing slash, so the effects would presumably be minimal.
[1] http://cbonte.github.io/haproxy-dconv/configuration-1.5.html...
1. You need facts to back that claim
2. $1.3 trillion debt
3. Stuxnet et al.
> The United States has accused China [...] China has denied accusations of cyberwarfare, and has accused the United States [...]
> The FBI warned U.S. businesses on Wednesday that hackers it believes to be backed by the Chinese government [...]
> [...] Chinese espionage and cyber espionage activities may be carried out by individuals without obvious government ties.
(Emphasis is mine.)
That seems to be the game we're playing. Everybody is super concerned but nobody's actually doing anything for the aforementioned reasons.
// ↓ Fair point (the accusation bit) If an accusation is all the OP wants, I don't see why anybody would doubt that will happen tomorrow.
That's an accusation, and that happened many times. What OP wants already happened.
>Hackers associated with the Chinese government have repeatedly infiltrated the computer systems of U.S. airlines, technology companies and other contractors involved in the movement of U.S. troops and military equipment, a U.S. Senate panel has found.
>In May U.S. authorities charged five Chinese military officers, accusing them of hacking into American nuclear, metal and solar companies to steal trade secrets.
US policy is not a monolith.
Good luck collecting on that. Forcing the US' hand on debt only does two things:
* Accelerates the departure from fossil fuels (where capital flows out to foreign countries)
* Accelerates the automation of manufacturing in the US, thereby bringing manufacturing back to US soil and further depressing consumer demand for Chinese-produced goods (my understand China's economy is already sputtering; this would not help).
First world countries have taken advantage of China's industrialization in order to enjoy cheap consumer goods long enough for local manufacturing automation to be bootstrapped.
"If you owe the bank $100 that's your problem. If you owe the bank $100 million, that's the bank's problem."
Although it probably goes against their corporate policies, Github really ought to block access to all China IP addresses for all repos OTHER than greatfire and the nytimes until the offending DDoS codes are removed from baidu.
Reprisal from corporations against a large state are pretty useless. The best and smartest thing a corporation can do is complain to their local diplomacy. Nations are sovereign, if you hit them back as a corporation, they'll just block you and there's nothing you can do about it.
How large are the github armed forces?