funsec mailing list archives
Re: cyber-9/11
From: quispiam lepidus <quispiam.lepidus () gmail com>
Date: Thu, 9 Apr 2009 02:05:53 +1000
On Wed, Apr 8, 2009 at 2:59 PM, Richard Golodner <rgolodner () infratection com> wrote: <snip>
I see plenty of questionable log entries from Chinese IP space, but isn't the appeal of China the ease of which anyone anywhere can host just about anything? Richard
I used to see a lot too, well over 50% of bad traffic hitting my edge originated in .cn (and don't get me started on the percentage of spam). Now I see none :) We don't do business in China, so a decision was made to drop all traffic originating there at the edge. The immediate reduction in spam and malicious traffic was insane. The only ramification so far has been a few staff of Chinese origin being a bit peeved they can't read their daily news anymore... Not very sportsman like of us, but our IPS etc are a whole lot quieter. I do believe that there are state sponsored attacks occuring, but I don't believe that it's limited to the Chinese. Espionage is espionage, I don't think there's a rule book defining how they should obtain their intel. There was an interesting article in the news a few days ago about the Australian Prime Minister's recent visit to China: http://www.upi.com/Top_News/2009/04/02/Chinese-reportedly-try-to-hack-Rudd/UPI-78921238726460/ The gist of it is that he and his staff were targetted electronically whilst over there. _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- cyber-9/11 Larry Seltzer (Apr 07)
- Re: cyber-9/11 Paul M. Moriarty (Apr 07)
- Re: cyber-9/11 Michael Collins (Apr 07)
- Re: cyber-9/11 Larry Seltzer (Apr 07)
- Re: cyber-9/11 Robert Graham (Apr 07)
- Re: cyber-9/11 Jon Kibler (Apr 07)
- Re: cyber-9/11 Gadi Evron (Apr 07)
- Re: cyber-9/11 Barry Raveendran Greene (Apr 07)
- Re: cyber-9/11 Richard Golodner (Apr 07)
- Re: cyber-9/11 quispiam lepidus (Apr 08)
- Re: cyber-9/11 Robert Graham (Apr 07)
- Re: cyber-9/11 Jon Kibler (Apr 08)
- Re: cyber-9/11 Gadi Evron (Apr 08)
- Re: cyber-9/11 Chris Blask (Apr 08)
- Re: cyber-9/11 Jon Kibler (Apr 08)
- Re: cyber-9/11 Nick FitzGerald (Apr 08)
- Re: cyber-9/11 der Mouse (Apr 08)
- Re: cyber-9/11 Michael Collins (Apr 07)
- Re: cyber-9/11 Paul M. Moriarty (Apr 07)
- Re: cyber-9/11 Jon Kibler (Apr 08)
- <Possible follow-ups>
- Re: cyber-9/11 Robert Graham (Apr 07)
- Re: cyber-9/11 Donal (Apr 08)