News for hackers. Stuff that matters.

A comment on The Big Hack: How China Used a Tiny Chip to Infiltrate Amazon and Apple. Parent comment

Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by Narkov on Thursday October 04, 2018 @06:03AM (#18138502)
Intrusion Detection Systems are basic network security 101 type stuff. I'd be surprised if anything that was really "high risk" didn't use an IDS.
[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by Recurecur on Thursday October 04, 2018 @08:07AM (#18139102)
Intrusion detection involves connections coming from the outside. These attacks originate inside the network, from the compromised equipment.

Except on extremely controlled networks, this would be very hard to detect. It gets even worse when you consider that the Chinese had/have a distributed network of compromised machines. Imagine using a Google edge server as a dead drop...

[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by andrewflnr on Thursday October 04, 2018 @10:25AM (#18140126)
An IDS is perfectly capable of flagging outgoing or internal traffic.
[ Parent | on HN ]
Re:The Big Hack: How China Used a Tiny Chip to Infiltrate Am... by detaro on Thursday October 04, 2018 @06:32AM (#18138648)
There's a big difference between "using an IDS" and "a few unintended/unexpected packets are noticed and properly followed up on".
[ Parent | on HN ]