News for hackers. Stuff that matters.

A comment on One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack. Parent comment

Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by handrous on Tuesday June 01, 2021 @05:22PM (#27361494)
How so? Can't attack from abroad if non-trusted states have trouble even getting packets routed to the target state, let alone the specific network you're trying to breach. Very hard to attack from inside the "firewall" if access is, as a condition of being considered a trusted routing peer, gated by tying all traffic to a personal or corporate ID that would cause all kinds of trouble for the holder of same IDs should they route traffic on some bad actor's behalf (as, say, through Tor or other means).
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by lallysingh on Tuesday June 01, 2021 @05:24PM (#27361530)
That's just a matter of finding a vulnerable ally county to hop through. That's SOP now to hide your tracks. It's not like current attacks from Iran to the US have Irani addresses in the IP header.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by handrous on Tuesday June 01, 2021 @05:33PM (#27361639)
That's fine until it's nearly impossible to route a packet from (for example) Iran to any IP in any state that's legally unfriendly to hackers and scammers, or otherwise operates outside the broad legal jurisdiction of the hackers' target states.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by viraptor on Tuesday June 01, 2021 @06:21PM (#27362201)
That's why we have technologies like Tor which will happily find a number of hops that do allow you to establish that connection.

Also IP-level blocks will never be perfect. See Hong Kong proxies. Or people in traded IP ranges classified as coming from another country.

[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by handrous on Tuesday June 01, 2021 @06:40PM (#27362395)
Yes, the Internet as currently structured is resistant to this. The Internet is not guaranteed to continue to have that structure. I'm saying that if our choices are "constant attacks such that the Internet is horribly dangerous" and "don't have the Internet", the popular (at the state level) solution will be "I choose neither—instead, we're changing the Internet".
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by lallysingh on Tuesday June 01, 2021 @06:23PM (#27362220)
It's not direct packets. You ssh into a box in, say, UAE, then Cuba, then Canada, then USA. You're just uploading and running scripts, so latency doesn't matter.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by handrous on Tuesday June 01, 2021 @06:36PM (#27362357)
Yes, I know how the Internet works now. It doesn't have to keep working that way, and if attacks get really bad the result will not be that we just live with them. The Internet will be modified to reduce the threat to a tolerable level. There's already been some pretty serious work put into what this will look like, if/when it happens.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by accountofme on Wednesday June 02, 2021 @03:55AM (#27366098)
So all that will change is you use a wireless link (starlink?) to SSH into a box in another country that connects to a box to a box to a box. It will not change a lot, infact as starlink like satellites become common place you can use them as jump boxes....
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by heavyset_go on Tuesday June 01, 2021 @06:35PM (#27362346)
Your random Iranian hacker might not, but states will find ways around it. Even smaller criminal organizations find ways around such limitations.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by handrous on Tuesday June 01, 2021 @06:38PM (#27362374)
Security does not have to be perfect to be effective. If it did, we'd have no security, because none of it is both useful /practical and perfectly effective.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by trhway on Tuesday June 01, 2021 @07:17PM (#27362710)
That is basically KYC for internet traffic. Hasn't stopped big operators in finance, and i doubt that it will be different in Internet. A new crime of "traffic laundering", and mesh networks untraceable and unregulated like cash transactions.
[ Parent | on HN ]
Re:One-Fifth of U.S. Beef Capacity Wiped Out by JBS Cyberattack by rsj_hn on Tuesday June 01, 2021 @07:20PM (#27362733)
Because the problem is critical infrastructure with holes in it, not that someone might communicate with that infrastructure. Trying to change the environment to ensure there are no attackers on the net is not a feasible alternative to hardening the critical systems.
[ Parent | on HN ]