For about 18 minutes on April 8th, 2010, China proved just how easy it would be to hijack the Web. The country redirected
15-percent of global Internet traffic through its servers, affecting both commercial sites and government agencies. A report being published by the U.S.-China Economic and Security Review Commission says that sites for NASA, the Senate, all four branches of the military and the office of the Secretary of Defense were routed through Chinese servers. The cause appears to be faulty routes advertised by China Telecom, which fed site data through the home of the Great Firewall before it reached its final destination. Dell, Yahoo!, Microsoft and IBM were also affected by the Web-jacking.
What's not clear, though, is how or why the redirects took place. While the report makes the obvious points about the potential
security issues surrounding the redirected traffic, the big question on most minds is never answered: was this a targeted attack? According to ABC News, the report makes no assertion that the attack was an explicit effort to collect data from foreign governments and agencies. It notes, however, that the commission has no way of knowing what China Telecom did with the data passing through its servers, if anything at all.
Tags: china, ChinaTelecom, CyberSecurity, government, hijack, military, politics, security, top, web
Comments
1
Subscribe to commentsStrategicDiscourseNov 18th 2010 1:46PM
While this story has been kicked around media sites recently, there is a lot more to the story. China Telecom was not the first, nor will it be the last ISP to incorrectly modify their routing tables. There are two crucial issues with China Telecom, first is it partially state-owned, and thus can have significant restrictions and influence placed on it by the Chinese Communist Party. Secondly, be rerouting traffic from other sites, even those not within your own network, someone can maliciously redirect users to impostor websites, or more disturbingly, can allow users to reach the correct destination, but monitor their data transactions without their knowledge.
For more information and analysis on the China Telecom IP hijacking incident, check out -
http://strategic-discourse.com/2010/11/us-congressional-panel-releases-report-on-april-2010-china-telecom-ip-hijacking-incident/