<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Cyber Attack?</title>
	<atom:link href="http://www.davejustus.com/2007/05/21/cyber-attack/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.davejustus.com/2007/05/21/cyber-attack/</link>
	<description>None Sine Causa</description>
	<pubDate>Mon, 08 Sep 2008 02:01:30 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5</generator>
		<item>
		<title>By: probligo</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-44990</link>
		<dc:creator>probligo</dc:creator>
		<pubDate>Tue, 29 May 2007 20:49:25 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-44990</guid>
		<description>I had in mind the recent experience in &lt;a href="http://www.dailymail.co.uk/pages/live/articles/technology/technology.html?in_article_id=457504&#38;in_page_id=1965" rel="nofollow"&gt;Estonia&lt;/a&gt; where telephone,  financial, and emergency systems were all closed down by a concerted attack through the internet.

&lt;blockquote&gt;Look, for example, at what happened to Estonia last week. Ever since the government of the Baltic state decided (rather tactlessly it must be said) to remove a war memorial to the Red Army from a square in the capital, Tallinn, Russian outrage has ensued. 

This took the form of demonstrations and even riots. But then something extraordinary happened: quickly, and wholly without warning, the whole country was subjected to a barrage of cyber-warfare, disabling the websites of government ministries, political parties, banks and newspapers. 

Techniques normally employed by cybercriminals, such as huge remotely-controlled networks of hijacked computers, were used to cripple vital public services. 

Nato has sent its top cyber-terrorism experts to Tallinn, with western democracies caught on the hop over the implications of such an attack. 

The Estonian defence ministry said: "We've been lucky to survive this. If an airport, bank or state infrastructure is attacked by a missile, it's clear war. But if the same result is done by computers, then what do you call it? Is it a state of war? These questions must be addressed." &lt;/blockquote&gt;</description>
		<content:encoded><![CDATA[<p>I had in mind the recent experience in <a href="http://www.dailymail.co.uk/pages/live/articles/technology/technology.html?in_article_id=457504&amp;in_page_id=1965" rel="nofollow">Estonia</a> where telephone,  financial, and emergency systems were all closed down by a concerted attack through the internet.</p>
<blockquote><p>Look, for example, at what happened to Estonia last week. Ever since the government of the Baltic state decided (rather tactlessly it must be said) to remove a war memorial to the Red Army from a square in the capital, Tallinn, Russian outrage has ensued. </p>
<p>This took the form of demonstrations and even riots. But then something extraordinary happened: quickly, and wholly without warning, the whole country was subjected to a barrage of cyber-warfare, disabling the websites of government ministries, political parties, banks and newspapers. </p>
<p>Techniques normally employed by cybercriminals, such as huge remotely-controlled networks of hijacked computers, were used to cripple vital public services. </p>
<p>Nato has sent its top cyber-terrorism experts to Tallinn, with western democracies caught on the hop over the implications of such an attack. </p>
<p>The Estonian defence ministry said: &#8220;We&#8217;ve been lucky to survive this. If an airport, bank or state infrastructure is attacked by a missile, it&#8217;s clear war. But if the same result is done by computers, then what do you call it? Is it a state of war? These questions must be addressed.&#8221; </p></blockquote>
]]></content:encoded>
	</item>
	<item>
		<title>By: Aric</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-42128</link>
		<dc:creator>Aric</dc:creator>
		<pubDate>Sun, 27 May 2007 09:28:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-42128</guid>
		<description>Any distributed computing system risks a cyber attack.  Protocols make little difference; only physical isolation can completely protect from remote intrusion.

TCP/IP serves as the backbone of current computer networks.  The reason for this is that it is simple, efficient, and flexible.  Like any computer system, the methods it uses are subject to exploitation.  Over the course of the last 20 years, as security issues have been raised, counters to electronic attack have been developed:  Packet Encryption, Jails, Firewalls, Tar Pits, and a host of others.  The evolution of such tools will go hand in hand with the development of methods to circumvent them.  IPv6, which was to replace IPv4 with a more secure, reliable and flexible method of data delivery was recently discovered to have a very serious security flaw.  This only goes to show that any new "secure" system will always be at risk because the people who design it are human, and will make mistakes.</description>
		<content:encoded><![CDATA[<p>Any distributed computing system risks a cyber attack.  Protocols make little difference; only physical isolation can completely protect from remote intrusion.</p>
<p>TCP/IP serves as the backbone of current computer networks.  The reason for this is that it is simple, efficient, and flexible.  Like any computer system, the methods it uses are subject to exploitation.  Over the course of the last 20 years, as security issues have been raised, counters to electronic attack have been developed:  Packet Encryption, Jails, Firewalls, Tar Pits, and a host of others.  The evolution of such tools will go hand in hand with the development of methods to circumvent them.  IPv6, which was to replace IPv4 with a more secure, reliable and flexible method of data delivery was recently discovered to have a very serious security flaw.  This only goes to show that any new &#8220;secure&#8221; system will always be at risk because the people who design it are human, and will make mistakes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: probligo</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-41431</link>
		<dc:creator>probligo</dc:creator>
		<pubDate>Sat, 26 May 2007 20:54:16 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-41431</guid>
		<description>Language in question Dave is HTTP.

It is not just the interface translation that is at fault (Firefox or iMax vs Explorer proves that).

The problem is the ability for HTTP itself to be abused and the functions it contains to be used for more nefarious purposes.</description>
		<content:encoded><![CDATA[<p>Language in question Dave is HTTP.</p>
<p>It is not just the interface translation that is at fault (Firefox or iMax vs Explorer proves that).</p>
<p>The problem is the ability for HTTP itself to be abused and the functions it contains to be used for more nefarious purposes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dave Justus</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-37628</link>
		<dc:creator>Dave Justus</dc:creator>
		<pubDate>Wed, 23 May 2007 18:46:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-37628</guid>
		<description>If the 'problem' is that all the network software is from a single source (which is plausible but probably not the case) wouldn't greater standardisation make the problem worse, not better?  

Obviously means of defense need to be found, and I expect that many many people are working on that, and many others are working on ways to overcome that defense.</description>
		<content:encoded><![CDATA[<p>If the &#8216;problem&#8217; is that all the network software is from a single source (which is plausible but probably not the case) wouldn&#8217;t greater standardisation make the problem worse, not better?  </p>
<p>Obviously means of defense need to be found, and I expect that many many people are working on that, and many others are working on ways to overcome that defense.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: probligo</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-37626</link>
		<dc:creator>probligo</dc:creator>
		<pubDate>Wed, 23 May 2007 18:31:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-37626</guid>
		<description>The "how" is a series of IT industry standard routines.

The problem is that &lt;b&gt;the&lt;/b&gt;&lt;b&gt; primary network software is from one source.

That is exacerbated by the fact that the software is not the most reliable.

Having said that,  there is a need for some level of standardisation and that introduces the risks associated with the likes of html.

Of greater importance though must surely be the development of specialised protocols for strategic (and I mean here non-military such as financial and commercial traffic) functions.

FWIW...&lt;/b&gt;</description>
		<content:encoded><![CDATA[<p>The &#8220;how&#8221; is a series of IT industry standard routines.</p>
<p>The problem is that <b>the</b><b> primary network software is from one source.</p>
<p>That is exacerbated by the fact that the software is not the most reliable.</p>
<p>Having said that,  there is a need for some level of standardisation and that introduces the risks associated with the likes of html.</p>
<p>Of greater importance though must surely be the development of specialised protocols for strategic (and I mean here non-military such as financial and commercial traffic) functions.</p>
<p>FWIW&#8230;</b></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Aric</title>
		<link>http://www.davejustus.com/2007/05/21/cyber-attack/#comment-36676</link>
		<dc:creator>Aric</dc:creator>
		<pubDate>Tue, 22 May 2007 23:39:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.davejustus.com/2007/05/21/cyber-attack/#comment-36676</guid>
		<description>I deny all responsibility.</description>
		<content:encoded><![CDATA[<p>I deny all responsibility.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
