China’s Salt Typhoon Spies Are Still Hacking Telecoms—Now by Exploiting Cisco Routers

Comments

• Tregetour@lemdro.id ⁨1⁩ ⁨year⁩ ago

  What I’ve learned over the last few years:

  • Only academics, commentators and researchers truly care about collective security, where the whole world gains because certain technology and is commonly agreed to be off-the-table
  • Everyone else (that is, corporations including government and private enterprise) only cares about zero-sum security - your insecurity is my security gain - but they pretend in their messaging to care about collective security. It explains why nation states continue to demand purpose-built backdoors into hardware and encryption implementations, and why employers are content to treat your mobile phone like their own property, demanding apps, RATs, etc. be installed
  • Most cybersecurity is thinly-veiled compliance, and amounts to certified bureaucrats implementing products from that small bunch of vendors with the means to influence policymaking
  • The public messaging around security always uses the noun in the abstract, which to me is telling. Security for whom? Security against what? Security for what? See also social media and the term “safety”.

  source

  • FauxLiving@lemmy.world ⁨1⁩ ⁨year⁩ ago

    • Anyone implementing real security is seen as suspicious and likely criminal and subjected to greater scrutiny by law enforcement and intelligence agencies.

    source
• Blaster_M@lemmy.world ⁨1⁩ ⁨year⁩ ago

  Almost as if those “backdoors only for the good guys” ideas are bad ideas afterall…

  something something leopards and faces

  source
• ininewcrow@lemmy.ca ⁨1⁩ ⁨year⁩ ago

  If only the US had a cohesive, cooperative, positive reinforcing, mutually benefiting coordinated government organization staffed by people that mutually trusted one another and their leadership for the protection and benefit of their nation.

  source

  • FauxLiving@lemmy.world ⁨1⁩ ⁨year⁩ ago

    Best I can do is a hollow shell piloted by the most corrupt individuals which only exists to the extent that it channels tax dollars into donors pockets.

    source
• blackberry@midwest.social ⁨1⁩ ⁨year⁩ ago

  no good. beyond using a VPN and dnssec, how can end users protect themselves from this?

  source

  • Godort@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Against this specifically?

    • Don’t ever expose your firewall/router management access to the Internet.
    • Install firmware updates asap.
    • Don’t be a an attractive target for nation-state hackers.

    Additionally, ensure that you are following best practices for your own data by enabling MFA wherever you can and dont re-use passwords for any service.

    source
  • bobs_monkey@lemm.ee ⁨1⁩ ⁨year⁩ ago

    Probably make sure you have your own firewall on your private network, and if anything is exposed to the internet, make sure it’s locked down as tight as you can. For the record, very few people outside of professionals and enthusiasts are running Cisco equipment in their homes.

    source