A recent academic report claims that China has been routinely and systematically hijacking internet traffic from the United States, Canada, Europe and other countries through security flaws in the deep structure of the internet. To put it simply, somebody in Beijing may be receiving and reading your emails before you do, as well as capturing your passwords and other personal data from websites you visit.
“China ’s Maxim – Leave No Access Point Unexploited: The Hidden Story of China Telecom’s BGP Hijacking,” by Chris C Demchak of the US Naval War College and Yuval Shavitt of Tel Aviv University. The report was published in a peer-reviewed journal published annually by the Military Cyber Professionals Association.
The report alleges that a voluntary US-China 2016 agreement, which aimed to stop military forces from hacking commercial enterprises for economic gain, has appeared to reduce Chinese internet theft against western targets. However, as the report also notes, China’s technological development still continues to be “dependent on massive expropriation of foreign R&D.”
The report documents one way in which that is carried out.
An ‘innocuous player’
As Chinese companies such as Huawei and ZTE are viewed with suspicion in the West, the Chinese government has chosen what the researchers call “a seemingly innocuous player” to reroute, or hijack, internet traffic. The so-called “innocuous player” is state-owned China Telecom, a telecoms giant with close to 300,000 employees.
To understand how China Telecom has been able to divert internet traffic to China and copy it, as the report claims, it is necessary to delve briefly into the obscure world of the internet’s foundational infrastructure.
Essentially, China Telecom has numerous Points of Presence (PoP) in the US and Europe. Think of a PoP as a delivery system that ensures that “packages” sent via the internet reach their intended destinations as efficiently as possible. They are delivery services that connect all the smaller networks that comprise the overall internet.
The small networks are called autonomous systems and could be anything from banks and tech giants to your local Internet Service Provider.
On the other hand, overseas telecoms are barred from operating PoPs in China. The country has just three gateways, in Beijing, Shanghai and Hong Kong. This protects China’s domestic traffic from foreign hijacking.
Meanwhile, enter Border Gateway Protocol (BGP) – the key Internet routing protocol for connecting the innumerable autonomous systems that comprise the internet.
Insecure protocol
“BGP is a notoriously insecure protocol used to route internet traffic,” comments Cory Doctorow, a respected technology pundit. Doctorow continues: “By design it is dynamic and responsive, moving traffic away from congested routes and onto those with more capacity: this flexibility can be exploited to force traffic to route through surveillance chokepoints.”
BGP was developed in 1989 – when the internet was generally perceived as an emergent technology bringing the world closer together. It was also the same year that the internet first began to be used in China. In fact, the country did not start to fully implement the internet, and on a negligible scale, until 1994, when China was still widely regarded as a benign backwater.
China is rightly no longer regarded as benign or a backwater, and its hijacking activities are difficult to detect. China Telecom has multiple points of presence (PoPs) in North America and Europe and rerouting traffic via ultra-fast fiber-optic cables causes delays to be almost unnoticeable.
All the same, the report is not exactly news. BGP exploits are probably more common than is largely realized and are probably used by all state players capable of doing so, notably Russia.
But China is regarded as a particularly egregious player. In 2010, for example, the US-China Economic and Security Commission reported to the US Congress on such “hijacks” in a 300-page report that included information on an incident in which 15% of global internet traffic suddenly started to pass through Chinese servers en-route to its intended destinations, according to Ars Technica, a technology-focused news website.
Malicious intent
This would be less problematic if all internet traffic were highly encrypted. Unfortunately, some of it is not. But as the researchers also note: “If diverted and copied for even small amounts of time, even encrypted traffic can be broken.”
In the meantime, the attacks continue and will likely continue to do so. The researchers describe the hijacks as “repetitive,” suggesting “malicious intent.”
Events documented by the report include a six-month period from February 2016, when traffic from Canada to South Korea was “hijacked by China Telecom and routed through China” and a similar incident in which traffic from several locations to the US to “a large Anglo-American bank headquarters in Milan, Italy was hijacked by China Telecom to China.”
If there is any key takeaway from reports such as this, it is that the internet, which has revolutionized modern life, was built on trust. We now live in untrusting times.
They’re in Salt Lake City, Utah. The Five Eyes monitor each other’s all traffic, every phone call, every packet and share with each other to bypass local country laws. Every ISP and manufacture is required to log and provide back door to the FBI to tap traffic without notice as required by the Digital Millennium Act. Any traffic going outside/inside is the domain of NSA.
They’re in Salt Lake City, Utah. The Five Eyes monitor each other’s all traffic, every phone call, every packet and share with each other to bypass local country laws. Every ISP and manufacture is required to log and provide back door to the FBI to tap traffic without notice as required by the Digital Millennium Act. Any traffic going outside/inside is the domain of NSA.
Actually I read an article that the US government has surveilance computers centres that require air conditioning and consume megawatts of electricity. Virtually all internet traffic is monitored and data mined. That is why many nations require their data to be stored in computer centres within their own boundaries.
Actually I read an article that the US government has surveilance computers centres that require air conditioning and consume megawatts of electricity. Virtually all internet traffic is monitored and data mined. That is why many nations require their data to be stored in computer centres within their own boundaries.
Another racist, stupid white man piece. NSA, CIA, and Anonymous not to mention thousands of other amateur hackers have read our emails for years. Singling out China is just another racist play by another white man.
Another racist, stupid white man piece. NSA, CIA, and Anonymous not to mention thousands of other amateur hackers have read our emails for years. Singling out China is just another racist play by another white man.
No, it’s not ok for any Govt to hack your phones or emails. Thats the point !
No, it’s not ok for any Govt to hack your phones or emails. Thats the point !
And the CCP has learnt from Stalin, ‘the death of a 100 people is a tragedy, the death of m’s a statistic’. 70m dead during the cultureal revolution, and now m’s more Uighurs facing death.
And the CCP has learnt from Stalin, ‘the death of a 100 people is a tragedy, the death of m’s a statistic’. 70m dead during the cultureal revolution, and now m’s more Uighurs facing death.
Charles Bilyeu Two wongs dont make a white.
Charles Bilyeu Two wongs dont make a white.
Two wrongs don’t make a right.
Two wrongs don’t make a right.
For every sin committed by China in espionage, there would at least 20 committed by the trillion dollar intelligence complex of the USA. The article is just more blatant propaganda. But American propaganda has learnt well from Goebbels: "If you repeat a lie often enough, people will believe it, and you will even come to believe it yourself". And they are able to muster almost the entire globe’s media, including this Asiatimes, to serve up more of the same. In comparison, the Chinese are rank amateurs. They are losing the PR in all the Western nations.
For every sin committed by China in espionage, there would at least 20 committed by the trillion dollar intelligence complex of the USA. The article is just more blatant propaganda. But American propaganda has learnt well from Goebbels: "If you repeat a lie often enough, people will believe it, and you will even come to believe it yourself". And they are able to muster almost the entire globe’s media, including this Asiatimes, to serve up more of the same. In comparison, the Chinese are rank amateurs. They are losing the PR in all the Western nations.
So it is okay if the US hack you, because the US do that for your own good. You just need to trust uncle sam, because uncle sam care about your well being. Long live galactic empire, I mean the US empire.
So it is okay if the US hack you, because the US do that for your own good. You just need to trust uncle sam, because uncle sam care about your well being. Long live galactic empire, I mean the US empire.
The writer is stupid or wrote this article with malicious intent. Why did you not mention that the US has the world most advanced serveillance technology. Even Google is reading my mail. Yet you play like China is the only one doing it.
The writer is stupid or wrote this article with malicious intent. Why did you not mention that the US has the world most advanced serveillance technology. Even Google is reading my mail. Yet you play like China is the only one doing it.