more on Hacking from Chinese Networks

[David Farber <dave () farber net>]

Begin forwarded message:

From: Suresh Ramasubramanian <suresh () hserus net>
Date: August 25, 2005 8:28:24 AM EDT
To: dave () farber net
Subject: Re: [IP] Hacking from Chinese Networks


Would it help to decide if we throw into the balance the fact that  
the PRC has

1. Huge (staggering, by US standards) amounts of connectivity and  
broadband penetration

2. A major problem with software piracy so that lots of servers or  
PCs there are likely to be running pirated and insecure software,  
running on a pirated OS version that, as it is pirated, cannot  
download security updates

3. Large telco + ISPs that are not exactly noted for a good track  
record on network security

Those three make for a lethal combination - there's a positive  
cornucopia of insecure machines in China for script kiddies around  
the world to dip into.

I wouldn't speculate about "cyberwar!" without thinking a lot more  
about these factors.

        srs

At 05:31 PM 8/25/2005, you wrote:

> One official familiar with the investigation said it has not provided
> definitive evidence of who is behind the attacks. "Is this an
> orchestrated campaign by PRC or just a bunch of disconnected hackers?
> We just can't say at this point," the official said, referring to the
> People's Republic of China.




--
Suresh Ramasubramanian | suresh () hserus net | gpg EDEDEFB9
email sturmbahnfuehrer | lower middle class unix sysadmin


-------------------------------------
You are subscribed as lists-ip () insecure org
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/