Tuesday 23 December 2014

Taking down the North Korean internet (for an alleged attack on Hollywood)

All of this would be quite presposterous if it wasn't a sovereign state that was being threatened.

"Costs": North Korean's Internet Is Under Attack

22 December, 2014

Coincidence? Maybe not. Just hours after President Obama de-escalated himself from war to vandalism on the alleged North korea hacking of Sony, DYN Research reports North Korea's internet connectivity with the rest of the world has been spotty all day. As North Korea Tech blogs reports, North Korea’s Internet connection does suffer from periodic outages. but “I haven’t seen such a steady beat of routing instability and outages in KP before,” said DYN's Doug Madory. 

If you’ve been trying to connect to North Korean Internet sites in the last 24 hours, you might have been unsuccessful.
Connectivity between North Korea and the rest of the world has been spotty for much of the time, according to Dyn Research.
Look at the graph below. Each period of purple corresponds to an outage on North Korea’s Internet connection.
Source: DYN Research
Is this related to all that’s been going on in the last few days? Possibly. North Korea’s Internet connection does suffer from periodic outages, so it could be something as mundane as network maintenance or a failing router.
On the other hand…
I haven’t seen such a steady beat of routing instability and outages in KP before,” said Doug Madory, director of Internet analysis at Dyn Research. “Usually there are isolated blips, not continuous connectivity problems. I wouldn’t be surprised if they are absorbing some sort of attack presently.”

*  *  *

"proportional response?" Here is the State Department:




Here is mainstream media on this. The video which went with this said the attack could have been carried out by "patriotic forces"

North Korean Internet Goes Dark; A U.S. Government Attack 'Would Be Way Worse'

22 December, 2014

North Korea’s limited access to the Internet has been cut off, according to a network-monitoring company, days after the U.S. government accused the country of hacking into Sony Corp. (6758)’s files.

North Korea, which has four official networks connecting the country to the Internet -- all of which route through China -- began experiencing intermittent problems yesterday and today went completely dark, according to Doug Madory, director of Internet analysis at Dyn Research in Hanover, New Hampshire.
U.S. President Barack Obama said last week that Sony Pictures Entertainment had suffered significant damage and vowed to respond. North Korea warned yesterday that any U.S. punishment over the hacking attack on would lead to a retaliation “thousands of times greater.” North Korea has said it doesn’t know the identity of the hackers -- who call themselves “Guardians of Peace” -- claiming responsibility for breaking into Sony’s computer network.
The situation now is they are totally offline,” Madory said. “I don’t know that someone is launching a cyber-attack against North Korea, but this isn’t normal for them. Usually they are up solid. It is kind of out of the ordinary. This is not like anything I’ve seen before.

Sony Attack
The attack on Sony’s computers destroyed data, exposed Hollywood secrets and caused the studio to cancel the release of “The Interview,” a comedy about a fictional assassination of North Korean leader Kim Jong Un. The hackers rendered thousands of computers inoperable and forced Sony to take its entire computer network offline.
The outage probably isn’t a cut of a fiber-optic cable, which would be shown in an immediate loss of connectivity, and other possible explanations include a software meltdown on North Korea’s Web routers or denial-of-service hacking attacks, Madory said.
Marie Harf, a spokeswoman for the U.S. State Department, told reporters in Washington today she can’t confirm reports of cyber-attacks on North Korea and won’t say what steps the U.S. may take in response to the Sony attack.
We are considering a range of options in response,” Harf said at a State Department briefing. “Some will be seen. Some may not be seen.”
While North Korea has four networks connected to the Internet, the U.S. has more than 152,000 such networks, according to Dyn Research.

Flooding Servers

North Korea appears to be suffering from a relatively simple distributed denial-of-service attack that is causing temporary Internet outages, said Dan Holden, director of security research for Arbor Networks Inc., based in Burlington, Massachusetts.

Such attacks flood Internet servers with traffic to knock infrastructure offline. In North Korea’s case, the attack appears to be aimed at the country’s domain-name service system, preventing websites from being able to resolve Internet addresses, Holden said.
It’s unlikely the attack is being carried out by the U.S., as any hacker could probably spend $200 to do it, Holden said.
If the U.S. government was going to do something, it would not be so blatant and it would be way worse,” he said. “This could just be someone in the U.S. who is ticked off because they’re unable to see the movie.”

Limited Impact

The small number of computers connecting North Korea to the Internet makes disabling them straightforward, said Jose Nazario, chief scientist at Invincea Inc., a Fairfax, Virginia-based security-software company.
It’s actually pretty easy,” he said. “There are only a handful of hosts. It’s relatively easy to attack just those hosts or the pipes that are present there. There’s not that much bandwidth there. It’s very, very accessible to anyone who wanted to attack them.”
The impact of the outages will probably be limited, because so few people in North Korea have access to the Internet, and North Korea uses outposts in other countries to perform cyber-attacks, Nazario said.
It may not interfere with any cyber-operations they have going on,” he said. “It’s probably more symbolic and patting yourself on the back to launch these kinds of attacks than to disrupt any of their cyber-activities.”

Preliminary Probe

China has started an investigation into a possible North Korean role in the Sony hacking following a request from the U.S. government, a person with direct knowledge of the matter has said. The foreign ministry will cooperate with other Chinese agencies including the Cyberspace Administration to conduct a preliminary investigation, said the person, who asked not to be identified because the probe hasn’t been made public.
We have no new information regarding North Korea today,” White House National Security Council spokeswoman Bernadette Meehan wrote in an e-mail today. “If in fact North Korea’s Internet has gone down, we’d refer you to that government for comment.”
North Korea’s Internet outage was earlier reported by the North Korea Tech blog.

And Democracy Now!

"The Interview" Belittles North Korea, But is Film's Backstory & U.S. Policy the Real Farce?

President Barack Obama has said the United States is considering putting North Korea back on its list of terrorism sponsors after the hacking of Sony Pictures. 

Last week, the studio canceled the release of the screwball comedy film "The Interview," about a plot to kill North Korean leader Kim Jong-un, following threats against theaters and a hack of corporate data, which officials say was ordered by the North Korean government. 

North Korea was on the U.S. list of state terrorism sponsors for two decades until the White House removed it in 2008, after Pyongyang agreed to full verification of its nuclear sites. Last month's cyber-attack was claimed by a group calling itself The Guardians of Peace. 

The group released the salary and Social Security numbers of thousands of Sony employees, including celebrities, and also threatened to attack screenings of the film.

Although U.S. officials have said North Korea is behind the attack, many experts have questioned whether the evidence is sufficient. North Korea has denied involvement and proposed a joint investigation with the U.S. government to prove it. 

We are joined by two guests: Tim Shorrock, an investigative journalist who has been writing about U.S.-Korea relations for 30 years; and Christine Hong, assistant professor at University of California, Santa Cruz, and an executive board member of the Korea Policy Institute. Hong has spent time in North Korea, including a visit to the country as part of a North American peace delegation

No comments:

Post a Comment

Note: only a member of this blog may post a comment.