Previous in Forum: Bi-Wiring Speakers   Next in Forum: Controller Communications in a Danfoss Net
Close
Close
Close
24 comments
Rate Comments: Nested
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97

Researchers identify command servers behind Google attack

01/14/2010 11:54 AM

VeriSign's iDefense security lab has published a report

"Considering this proximity, it is possible that the two attacks are one and the same, and that the organizations targeted in the Silicon Valley attacks have been compromised since July."

If the report's findings are correct, it suggests that the government of China has been engaged for months in a massive campaign of industrial espionage against US companies.

read more

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Interested in this topic? By joining CR4 you can "subscribe" to
this discussion and receive notification when new comments are added.
Power-User
Popular Science - Weaponology - New Member Hobbies - Fishing - New Member

Join Date: Mar 2007
Location: US - NC
Posts: 316
Good Answers: 9
#1

Re: Researchers identify command servers behind Google attack

01/14/2010 1:14 PM

Stay Classy China !!

Register to Reply
Guru
Panama - Member - New Member Hobbies - CNC - New Member Engineering Fields - Marine Engineering - New Member Engineering Fields - Retired Engineers / Mentors - New Member

Join Date: Dec 2006
Location: Panama
Posts: 4273
Good Answers: 213
#2

Re: Researchers identify command servers behind Google attack

01/14/2010 11:26 PM

So, was it Adobe Reader, or Internet Explorer? MS seems to think it was Internet Explorer...

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#8
In reply to #2

Re: Researchers identify command servers behind Google attack

01/15/2010 10:27 AM

It was primarily an exploitation of code in Adobe Reader, this vulnerable code we have been advised of many times this past year. Now MS is announcing to PC users a request to update their Adobe products and the objective is to remove the vulnerable computers from the feed occurring.

Adobe Reader 0-Day Critical Vulnerability Exploited in the Wild

New BackDoor Attacks Using PDF Documents Feb. 2009

Adobe Reader 9 and Acrobat 9 zero day exploited in the wild ZDNet Feb. 20 2009

Also XP SP2 editions with Adobe Reader included have special vulnerability to "zero-day" attacks and warnings have been issues many time s over the last year too.

Just last night a customer called for service and description fits this scenario, I advised them not do use the unsupported products nor P2P social networking but of course it's their equipment.

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Panama - Member - New Member Hobbies - CNC - New Member Engineering Fields - Marine Engineering - New Member Engineering Fields - Retired Engineers / Mentors - New Member

Join Date: Dec 2006
Location: Panama
Posts: 4273
Good Answers: 213
#18
In reply to #8

Re: Researchers identify command servers behind Google attack

01/15/2010 11:11 PM

So, it was Adobe reader attached to Internet Explorer...Good. I am using a non-Adobe pdf viewer with Firefox. I wonder if that makes me any safer? Or does my security lie in the fact that I don't really have anything that anyone else wants?

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#20
In reply to #18

Re: Researchers identify command servers behind Google attack

01/16/2010 12:29 PM

Having an Internet connection means your computer is valueable to cyber-criminals, checkout this neat small program -- RUBotted

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Safety - Hazmat - New Member Safety - ESD - New Member Engineering Fields - Transportation Engineering - New Member Popular Science - Evolution - New Member Technical Fields - Procurement - New Member Hobbies - Target Shooting - New Member Popular Science - Cosmology - New Member Engineering Fields - Architectural Engineering - New Member Technical Fields - Marketing/Advertising - New Member Engineering Fields - Food Process Engineering - New Member

Join Date: Dec 2005
Location: Mariposa Ca
Posts: 5800
Good Answers: 114
#21
In reply to #20

Re: Researchers identify command servers behind Google attack

01/16/2010 5:18 PM

Here's a proper link RUbotted

6.2mb isn't small, no way to tell if it's malware, being an exe. & it installs a icon on the taskbar, which I hate...even freeware should give you the option of where & how it installs... still says I don't have any botware

I've been using the foxit reader which actually seems to convert to text better than adobe. the controls are certainly much easier to use, The install lets you opt out of all the stuff you may not want

Any suggestions for a flash player substitute?

adobe isn't our friend, unless you like bloatware

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#22
In reply to #21

Re: Researchers identify command servers behind Google attack

01/18/2010 1:33 AM

I didn't provide a link because some are so skittish of their security they would prefer to initiate on their end.

It's small enough for the price

Flash alternatives; try here http://osflash.org/open_source_flash_projects

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Guru
Safety - Hazmat - New Member Safety - ESD - New Member Engineering Fields - Transportation Engineering - New Member Popular Science - Evolution - New Member Technical Fields - Procurement - New Member Hobbies - Target Shooting - New Member Popular Science - Cosmology - New Member Engineering Fields - Architectural Engineering - New Member Technical Fields - Marketing/Advertising - New Member Engineering Fields - Food Process Engineering - New Member

Join Date: Dec 2005
Location: Mariposa Ca
Posts: 5800
Good Answers: 114
#23
In reply to #22

Re: Researchers identify command servers behind Google attack

01/18/2010 12:16 PM

I can find them [flash readers]

I was hoping for a recommendation from some one who actually uses one, like CW

I tried a bunch of different PDF readers before going with foxit.

adobe & windows are not our friends when it come to bloat & security

Register to Reply
Anonymous Poster
#24
In reply to #18

Re: Researchers identify command servers behind Google attack

02/09/2010 4:29 PM

"Or does my security lie in the fact that I don't really have anything that anyone else wants?"

What about the computer itself? A computer that can be made into a zombie right under your nose and you wouldn't be any the wiser for it? Zombies are invaluable in the right hands. Just a few 'for instance's: your computer as a relay in an anonymizer network whose purpose is to veil the true source(s) of malware and other 'payloads' from government & law enforcement agencies.

As a 'sleeper' awaiting orders, possibly to participate in a future mass DoS attack against critical national, financial and/or military assets. Professional hackers routinely build armies of zombies numbering in the hundreds of thousands and sometimes into the millions, and lease these mercernary armies, in whole or in part, to the highest bidder.

Bidders like China.

You have a computer and an Internet connection. As long as your computer is turned on and has a live connection to the Internet, someone out there wants it. Trust me.

No, don't trust me. You have no idea who I am.

Register to Reply
Guru
Popular Science - Weaponology - New Member Safety - ESD - New Member Hobbies - Fishing - New Member

Join Date: Sep 2006
Location: Near Frankfurt am Main, Germany. 50.390866N, 8.884827E
Posts: 17996
Good Answers: 200
#3

Re: Researchers identify command servers behind Google attack

01/15/2010 6:29 AM

What a surprise!

We have seen here on CR4 the Chinese Government at work last year!!!

__________________
"What others say about you reveals more about them, than it does you." Anon.
Register to Reply
Power-User

Join Date: Jul 2008
Location: Chester, SC, USA
Posts: 308
Good Answers: 19
#4

Re: Researchers identify command servers behind Google attack

01/15/2010 8:39 AM

Politically incorrect or not, I don't like Red China, I don't trust Red China, I try not to buy things made in China, their government is evil, wicked, mean & nasty. Their government fears its own people. The smiling dragon is showing its fangs & claws!

__________________
...That's why we call it "Research"!
Register to Reply
Guru
Popular Science - Weaponology - New Member Safety - ESD - New Member Hobbies - Fishing - New Member

Join Date: Sep 2006
Location: Near Frankfurt am Main, Germany. 50.390866N, 8.884827E
Posts: 17996
Good Answers: 200
#9
In reply to #4

Re: Researchers identify command servers behind Google attack

01/15/2010 11:12 AM

My feelings too. The letters "PC" stand for me only for "Personal Computer".....

__________________
"What others say about you reveals more about them, than it does you." Anon.
Register to Reply
Anonymous Poster
#12
In reply to #4

Re: Researchers identify command servers behind Google attack

01/15/2010 12:41 PM

I have friends who won't shop at Walmart -- the China factor just being one of the reasons. But please realize that it has been the move toward "globalization" that has spawned so many of our problems. It might have even been non-evil intent on political leadership's part (although that's a big stretch -- money and/or power are usually the motives) but the repercussions have been devastating.

My comments may seem oblique to the posted article link, yet a case can be made that had we not surrendered so much of our knowledge (via university educations for foreign students who then return to live in their country) AND THEN also gave away our manufacturing jobs to other countries, China may not have the capabilities to even do this sort of thing. To qualify this a bit, most of the Chinese people I've met and worked with do not seem to have nefarious motives. But the psyche is definitely different -- especially from a governing perspective. The Chinese government recently EXECUTED a Brit who was convicted of bringing heroin into the country.http://news.bbc.co.uk/2/hi/uk_news/8433285.stm

Regarding the original subject matter: Is this how China repays Google for Google succumbing to China's demands to limit searches from within China? But who knows what cyber-warfare is going on from all sides? Do I think we engage in similar activities? Of course. And we are so proud that we sit atop the evolutionary tree?? Shame on us.

Register to Reply
Guru
Popular Science - Weaponology - New Member Safety - ESD - New Member Hobbies - Fishing - New Member

Join Date: Sep 2006
Location: Near Frankfurt am Main, Germany. 50.390866N, 8.884827E
Posts: 17996
Good Answers: 200
#13
In reply to #12

Re: Researchers identify command servers behind Google attack

01/15/2010 1:04 PM

The Brit was stupid and a criminal. He was so stupid he seemingly did not know it was a "Topping" offence in China......

I am also a Brit, I have no sympathy for someone smuggling drugs....here or there....

In Britain he would have cost the taxpayer millions of pounds to house and feed over the next 50 years or so......

__________________
"What others say about you reveals more about them, than it does you." Anon.
Register to Reply
Friend of CR4

Join Date: Dec 2004
Posts: 1776
Good Answers: 35
#14
In reply to #13

Re: Researchers identify command servers behind Google attack

01/15/2010 1:09 PM

Not to mention the Chinese have a long historical hatred of Brits bringing drugs into their country...

http://en.wikipedia.org/wiki/Opium_Wars

__________________
Off to take on other challenges. Good luck everybody! See you around the Interwebs.
Register to Reply
Guru
Popular Science - Weaponology - New Member Safety - ESD - New Member Hobbies - Fishing - New Member

Join Date: Sep 2006
Location: Near Frankfurt am Main, Germany. 50.390866N, 8.884827E
Posts: 17996
Good Answers: 200
#15
In reply to #14

Re: Researchers identify command servers behind Google attack

01/15/2010 1:12 PM

How true!!

I had completely forgotten!!!

__________________
"What others say about you reveals more about them, than it does you." Anon.
Register to Reply
Guru
Hobbies - HAM Radio - New Member

Join Date: Oct 2006
Location: Vancouver (not BC) Washington (not DC) US of A
Posts: 1261
Good Answers: 12
#19
In reply to #14

Re: Researchers identify command servers behind Google attack

01/16/2010 3:32 AM

An interesting point. When we were in China, our tour guide knew all about the Opium Wars, but he had never heard about the Boxer Rebellion. This occured in early 1900s when the Chinese decided to get rid of the "foreign devils" in their country. It ended up with several nations sending troops into China including the US, UK, Italy, Japan, and several others, to protect their people in China. This lasted until the 2nd world war broke out.

Bill

Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#16
In reply to #12

Re: Researchers identify command servers behind Google attack

01/15/2010 5:52 PM
__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply
Active Contributor

Join Date: Oct 2009
Location: S.E. Wisconsin
Posts: 16
#5

Re: Researchers identify command servers behind Google attack

01/15/2010 9:48 AM

We also need to place some of the blame on all of us that buy anything made in or by the Chinese. I still don't believe there is anything we really truly need from them. And I and my family go out of our way to NOT buy anything made in China whenever possible.

__________________
Remember, when I smile and walk away, I just won the argument.
Register to Reply
Guru
Popular Science - Weaponology - bwire Hobbies - Car Customizing - New Member

Join Date: Dec 2007
Location: Upper Mid-west USA
Posts: 7498
Good Answers: 97
#6
In reply to #5

Re: Researchers identify command servers behind Google attack

01/15/2010 10:04 AM

Joining in a fight for national freedoms is patriotic and for civilians especially now as a nation we should read the label for made in USA. I'm surprised to find so many brand name items are now made in China when right along side on the same shelf is the generic or no name brand labeled made in USA. Let us now show our collective patriotism by purchasing those items manufactured in each of our own countries in away we may bolster our the economy. If I can not afford made in USA I don't need it that bad...

__________________
If death came with a warning there would be a whole lot less of it.
Register to Reply Off Topic (Score 3)
Power-User

Join Date: Jul 2008
Location: Chester, SC, USA
Posts: 308
Good Answers: 19
#7
In reply to #6

Re: Researchers identify command servers behind Google attack

01/15/2010 10:08 AM

Amen!

__________________
...That's why we call it "Research"!
Register to Reply
Anonymous Poster
#10
In reply to #5

Re: Researchers identify command servers behind Google attack

01/15/2010 11:45 AM

The U.S. is in the difficult position of "riding the tiger". China owns so much of the U.S. government's free-spending generated debt that any effective boycott of Chinese exports will bounce right back into a major financial problem for the U.S. We have met the enemy and he is us.

Register to Reply
Guru
Popular Science - Weaponology - New Member Safety - ESD - New Member Hobbies - Fishing - New Member

Join Date: Sep 2006
Location: Near Frankfurt am Main, Germany. 50.390866N, 8.884827E
Posts: 17996
Good Answers: 200
#11
In reply to #10

Re: Researchers identify command servers behind Google attack

01/15/2010 11:53 AM

Why? I don't see the connection......We are only talking about the exports to Europe and the USA, not buildings/businesses within the USA...

__________________
"What others say about you reveals more about them, than it does you." Anon.
Register to Reply
Power-User

Join Date: Jul 2009
Location: Montreal, Canada
Posts: 284
Good Answers: 18
#17

Re: Researchers identify command servers behind Google attack

01/15/2010 10:57 PM

Bah! Same old, same old ...

Countries out to modernize their industries, especially the East Asians, have done this often enough already.

The classic approach: raise tariff walls to protect domestic industry; steal/retro-engineer existing technology; educate a workforce; subsidize industry and R&D; figure out a way to make some things better, cheaper, or faster to manufacture (e.g., shipbuilding in S. Korea); lower tariff walls and join the fight.

Japan and South Korea are examples of this, and it worked just great for them. For that matter, Europeans and Americans did that for the longest time, too.

The difference between then and now is that industrial spying can be done electronically now. It still has to be fought, but one has to keep things in perspective.

That being said ... the West's nuclear forces ought to have their 'paperwork' all stored in locked filing cabinets a mile underground, etc.; and typewriters only, no computers!

Cheers! DZ

__________________
Do unto others. Then run.
Register to Reply
Register to Reply 24 comments
Copy to Clipboard

Users who posted comments:

Andy Germany (5); Anonymous Poster (3); bwire (5); Chris Leonard (1); CMMSDON (1); CUTiger (1); cwarner7_11 (2); DreadZontar (1); Garthh (2); Sciesis2 (1); wcfloyd (2)

Previous in Forum: Bi-Wiring Speakers   Next in Forum: Controller Communications in a Danfoss Net
You might be interested in: Network Servers, Time Servers, Serial Servers

Advertisement