Download the Tom's Hardware App from the App Store
The reference for current tech news
Yes No
Ads

DNS Problem Brings Great Firewall of China Global

by - source: Tom's Hardware US

Security experts around the globe are currently trying to unravel a mysterious networking error that saw Web traffic to sites like Facebook, Twitter and YouTube rerouted to Chinese servers.

CNet reports that on Wednesday, a Chilean DNS admin sent out an email to his counterparts in the rest of the world asking them about a strange problem a local ISP had noticed. The ISP said one of the main DNS root servers, called the I Root Server and operated in Sweden, was directing visitors endeavoring to access up to 30 different sites, including Facebook, Twitter and YouTube, to servers in China. Because people were being redirected to China, they ended up behind the Great Firewall of China.

It's no secret that China has changed DNS routing information to redirect users of censored services to government-run servers instead of sites such as Facebook and Twitter, however, ComputerWorld reports that this is the first public disclosure that those route have leaked outside of China. Citing Danny McPherson, a chief security officer with Arbor Networks, CW reports that the rerouting was probably an accident. McPherson says the ISP that used the bad routes probably misconfigured its BGP (Border Gateway Protocol) system.

"I don't think it was done intentionally," he told ComputerWorld. "This is an example of how easy it is for this information to be contaminated or corrupted or leaked out beyond the boundaries of what it was supposed to be."

Read more here.

Share:
40
Comments
Read more
X
Submit

Comments
Add your comment
starhoof 03/26/2010 2:58 PM
Hide
-20+

And this is how Google war I began

mayne92 03/26/2010 3:03 PM
Hide
--3+

starhoof :
And this is how Google war I began


what? lol

This doesn't surprise me really...

Anonymous 03/26/2010 3:07 PM
Hide
-11+

Just another display of Chinese arrogance and attacks against US companies. I hope this is a wake up call to all those who think doing business in China is a good idea. Maybe we ought to think about doing business in India,Thailand,Philippines or even again in the USA. What is funny to me is American companies are moving to China to take advantage of the reduced cost but Chinese companies are starting to build factories in the USA to promote their products. Seems like a contradiction. If Chinese companies can move here and manufacture their products in the USA why can't US companies do the same? The world needs to step up to the China threat and start taking it seriously!

JohnnyLucky 03/26/2010 3:09 PM
Hide
-12+

If I'm not mistaken this isn't the first time for strange rerouting.

rollerdisco 03/26/2010 3:12 PM
Hide
-4+

JohnnyLucky :
If I'm not mistaken this isn't the first time for strange rerouting.


I think your right, they were probably hacked too.

ikefu 03/26/2010 3:15 PM
Hide
-20+

We need a virus that reroutes China's traffic to US servers.

Oh the horror when the Chinese people will be free to surf youtube and watch videos of Lolcatz! Chinese stability will be doomed!!!

Gulli 03/26/2010 3:15 PM
Hide
-20+

Meanwhile our politicians (American, European and Down Under alike) are still addicted to kissing Chinese butt...

tomtompiper 03/26/2010 3:20 PM
Show
Pei-chen 03/26/2010 3:22 PM
Hide
--2+

LOL, another Jane's best.

BTW, did you guys understand the article? Outside ISPs misrouted their traffic to China, not the other way around. When you log on to your ISP in the US, you don’t automatically end up in China. Your ISP has to route your connection to China first.

digiex 03/26/2010 3:23 PM
Hide
-3+

It seems that the world wide web has a life of its own, or it it really evolving into a new type of life form.

IncinX 03/26/2010 3:36 PM
Hide
-12+

On March 26, 2010 SkyNet became self aware. It started without warning and disrupted world wide communications. This was but the first wave in a series of attacks.

CTT 03/26/2010 3:42 PM
Hide
-2+

pei-chen, DNS cache poisoning, think is what its called, someone submits updated DNS entries with incorrect addresses to redirect traffic. Not out of the realm of reality based on what China has already hacked, to think they could have done something like this.

viewwin 03/26/2010 3:56 PM
Hide
--2+

Maybe we need jumpers or some type of physical switch on routers to adjust settings.

Von Death 03/26/2010 4:20 PM
Show
figgus 03/26/2010 4:26 PM
Hide
-12+

von death :
Has Google really been far even as decided to use even go want to do look more like?



Say what?

bogcotton 03/26/2010 4:32 PM
Hide
-0+

figgus :
Say what?



I'm trying, really hard to translate this.

I think he/she means.

Has google gone so far as to even want to look like they are doing more?

Abrahm 03/26/2010 4:37 PM
Hide
-16+

von death :
Has Google really been far even as decided to use even go want to do look more like?


But with then Google does even else China where if let's fighting love.

hang-the-9 03/26/2010 4:46 PM
Hide
-20+

von death :
Has Google really been far even as decided to use even go want to do look more like?



This is what you get when you text too much and then try to write a real sentence.

STravis 03/26/2010 5:55 PM
Hide
-1+

Egads!!! There's a lot of China in the news lately...seems like they're always up to something!

aford10 03/26/2010 6:04 PM
Hide
-1+

So others got a little taste of the censorship that China has forced on their citizens. I wonder how they liked it?

ossie 03/26/2010 6:06 PM
Hide
-0+

More probably modified DNS records were leaked outside by the chinese I anycast servers (replicating the root I one for faster local access), which are for "internal" use (aka redirecting chosen domains to local servers), due to some routing misconfiguration.

pharge 03/26/2010 6:17 PM
Hide
--2+

hmm... by the way... an off topic news (maybe already old but this news just remind me that)..

I heard that Go Daddy and Dell are thinking to leave China, too.

hmm... Guess google is not alone.

jesseralston 03/26/2010 6:52 PM
Hide
-1+

pei-chen :
LOL, another Jane's best.BTW, did you guys understand the article? Outside ISPs misrouted their traffic to China, not the other way around. When you log on to your ISP in the US, you don’t automatically end up in China. Your ISP has to route your connection to China first.


Exactly, simplified, but hitting the main point. The other point to be made is that BGP is a weak point of the internet. Some idiot ISP accidentally screwed up a BGP route and it propagated before it was stopped, hence the problems.

jesseralston 03/26/2010 6:53 PM
Hide
-1+

CTT :
pei-chen, DNS cache poisoning, think is what its called, someone submits updated DNS entries with incorrect addresses to redirect traffic. Not out of the realm of reality based on what China has already hacked, to think they could have done something like this.


Except that's not what the experts who actually understand the issue think. I'd have to completely agree with Pei-chen here.

Anonymous 03/26/2010 6:59 PM
Show
jesseralston 03/26/2010 7:16 PM
Hide
-5+

markdeno :
Yes, the Chinese have been way too brutal and honest about their censorship and control of the media. Blah Blah Blah.


Thank you for that amazingly "enlightened" view of Chinese politics that has nothing to do with the article.

hundert 03/26/2010 8:09 PM
Hide
--2+

China is a big garbage manufacturing land.

i dont like the way people are treated in there. Neither do I like any of their native products.

All the Chinese toys I bought for my son broke soon after. Some of them in the first day.

Getting quality (even those manufactured in China) stuff should be your responsibility, as it does have warranty, low breakability, no cancer causing paints, and good quality.

Buy American, rly. Or European :P Lego and stuff

twu 03/26/2010 10:55 PM
Hide
-0+

What will happen if China open up the internet without filtering and banded Google's service and products.

Anyone support that?

twu 03/26/2010 10:58 PM
Hide
-0+

hundert :
China is a big garbage manufacturing land.



I agree only if you willing to get pay 50 cents an hour and trashing the manufacture wast on your yard.

utgardaloki 03/27/2010 12:21 PM
Hide
-4+

von death :
Has Google really been far even as decided to use even go want to do look more like?



Oh man. China is invading Tom's hardware.

twu 03/27/2010 12:23 PM
Show

Ads

Best offers

Newsletters


OK
Ads