Re:China's Great Cannon
by cheapsteak on Friday April 10, 2015 @12:20PM
(#9355331)
Wouldn't the attack on github not have resulted in any traffic spikes from China?
If the DDOS scripts are injected into browsers viewing Chinese content outside the firewall/canon, the traffic spikes would be distributed from all over the globe where ever there are Chinese expats
[ Parent
| on HN ]
Re:China's Great Cannon
by machinesofn on Friday April 10, 2015 @02:27PM
(#9356185)
That's correct. I work at a company in the US, and visitors to our website were giving the "Malicious Script" alert because we had Baidu analytics installed. Defending against this is much more nuanced than just blocking all traffic from China.
I'm curious what prompted installing Baidu analytics in the first place.
Re:China's Great Cannon
by sarciszewski on Friday April 10, 2015 @03:24PM
(#9356569)
So block the Baidu analytics CDN and call it a day?
Re:China's Great Cannon
by machinesofn on Friday April 10, 2015 @04:23PM
(#9356899)
That would work, assuming there isn't a workaround. If they were really serious about the attack, though, it's easy to imagine ways around that, especially if you add the possibility of browser caching and exploits in the injected script.