Telegram Traces Cyber Attack to China During Hong Kong Protests

https://www.bloomberg.com/news/articles/2019-06-13/telegram-traces-cyber-attack-to-china-amid-hong-kong-protests

168 23 7 years ago

tomglynch2• 7 years ago

I run a group of telegram bots for helping to moderate these large telegram groups. A quick look through the logs shows mostly a lot of marijuana for sale in Dutch and a heap of cryptocurrencies preventing spam attacks. Having said that, as the bots are used in hundreds of groups I wonder what analysis I could do on the data.

Robadob• 7 years ago

When I visited Ukraine, a friend pointed out lots of graffiti advertising people that sell drugs on Telegram.

kzzzznot• 7 years ago

Don’t these methods of selling drugs mean the police can really easily infiltrate/perform a ‘sting’ operation? How do they verify the buyer and protect themselves from this?

ggg2• 7 years ago

this is mostly because of reach.

telegram is the defacto communication medium in russia and ukraine.

they don't sell there for one reason or another. it's simply because all their clientele is there. no need to overthink it.

tomglynch2• 7 years ago

On another note, did any other services go down or have trouble during this period? What other methods of communication are people on the ground in Hong Kong using?

threeseed• 7 years ago

More interesting question is how many of those popular services in HK had good availability during the protests.

Because it would be a pretty good indicator of which ones the Chinese government had already intercepted.

throwaway1997• 7 years ago

Mostly used Telegram and LIHKG (local forum). Tried to use Firechat but it stopped working properly before we ever needed it.

spacehunt• 7 years ago

WhatsApp, Facebook, Gmail etc were all working fine without issue yesterday. The local TV stations were all livestreaming on Facebook and I set up a monitor with Chromecast in the office for my colleagues to keep up to date throughout the day.

Hong Kong isn't inside the GFW.

FDSGSG5• 7 years ago

While it's very likely these attacks are related to HK protests, it's simply not true that Telegram has "traced" this attack to China.

"IP addresses coming mostly from China" accurately describes most botnets, this tells us essentially nothing about the attackers.

wyuenho• 7 years ago

"Historically, all state actor-sized DDoS (200-400 Gb/s of junk) we experienced coincided in time with protests in Hong Kong (coordinated on @telegram). This case was not an exception."

At a certain point, you have to declare the correlation is actually a causation.

https://twitter.com/durov/status/1138942773430804480?ref_src...

FDSGSG5• 7 years ago

That doesn't really change anything I said, pointing out the correlation is very different from tracing the attacks. A better headline for this story would've been "Telegram Faces Cyber Attack During Hong Kong Protests"

FWIW 200-400Gb/s is mildly sophisticated teenager-sized, but perhaps that's who the state actors are paying.

officialchicken• 7 years ago

it's simply not true

Please provide us with facts supporting or disputing this claim. Otherwise I might have to assume that you are possibly participating in a disinformation campaign.

FDSGSG5• 7 years ago

If you suspect I am participating in a disinformation campaign you should email hn@ycombinator.com rather than post these silly insinuations.

I'm not going to waste my time trying to provide you with facts disputing a claim that has zero supporting evidence behind it in the first place. It is asinine of you to even ask.

majia• 7 years ago

You can probably "trace" most cyber attacks to China. Among all countries, it is comparatively easy for hackers to build a large botnet in China and use it to attack third parties because there are many unsophisticated Chinese internet users.

China could be behind this attack, but tracing IP address is really meaningless here.

supertiger• 7 years ago

Bloomberg is growingly anti China. Rigorous political-unbiased journalism is hard to find even in the US.

fabioyy• 7 years ago

200-400 gigabit/s is not that huge.

Telegram Traces Cyber Attack to China During Hong Kong Protests

Related Stories