Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

INFORMATION WARFARE: Slapper, Son of Code Red
Strategypage.com ^ | January 30, 2003 | Jim Dunnigan

Posted on 01/30/2003 9:23:59 AM PST by John H K

Last Saturday, a little after midnight, someone, apparently the semi-official Chinese "Honkers Union", unleashed the Slapper worm. Similar to the 2001 Chinese Code Red worm, Slapper spread faster and did more damage. Like Code Red, Slapper took advantage of known flaws in Internet software (in this case, Microsoft's widely used SQL Sever.) A British Internet security firm discovered the software flaw six months ago and described how something like Slapper would work. A few months later, Honkers Union members published a more complete example of a worm, giving credit to the earlier work. Microsoft quickly created a patch for their SQL Server software. But, as is common, not everyone using SQL Server applied the patch (including some people at Microsoft itself).

Taking apart the code Slapper installs indicates that this was probably a Honkers Union attack. Slapper was faster and generated much more network traffic than Code Red. Within an hour of being released, Slapper infected 50,000 servers, and eventually got 200,000 servers. But what made Slapper so damaging was the enormous amount of additional data it put onto the net, clogging communications and servers. Because Slapper was attacking the "back office" parts of the Internet, and not user PCs directly, the damage was greater. Many ISPs had to cut service until they could block the Slapper flood and patch SQL Servers.

Fortunately, in the last two years, Internet managers and technicians have developed more effective procedures to respond to something like Slapper, and this limited the damage. However, our main ISP (Qwest) had Strategypage cut off from most of the world for nearly 24 hours because of Slapper. It was also revealed that some large financial organizations run Internet and non-Internet stuff through the same lines, which is why in some cases, ATM systems were shut down by Slapper.

China has been encouraging local organizations like the Honkers Union to operate agressively. This may change as many foreign governments (especially South Korea, a major Chinese trading partner and worst hit victim of Slapper) complain to the Chinese about their semi-official Information War activities.

For more information on how all this works, in plain language, see my new book; "The Next War Zone.")


TOPICS: Business/Economy; Foreign Affairs; Technical
KEYWORDS: china; computers; slapper; virus
Navigation: use the links below to view more comments.
first 1-2021-4041-51 next last

1 posted on 01/30/2003 9:23:59 AM PST by John H K
[ Post Reply | Private Reply | View Replies]

To: John H K
Thanks for posting this.

Microsoft has built in so many doors they probably have forgotten where some of them are. They should concentrate on "quality" of programming for a while.
2 posted on 01/30/2003 10:46:14 AM PST by RISU
[ Post Reply | Private Reply | To 1 | View Replies]

To: John H K; rdb3; Dominic Harr; Bush2000; TechJunkYard
I thought last Saturday's worm was called "Slammer," not "Slapper." Wasn't Slapper the Linux worm last summer?
3 posted on 01/30/2003 10:53:46 AM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 1 | View Replies]

To: ShadowAce
Correct. The author is confused.
4 posted on 01/30/2003 10:55:56 AM PST by Bush2000
[ Post Reply | Private Reply | To 3 | View Replies]

To: rdb3
Ping.

Dunnigan is a long-time writer and commentator on military subjects.
5 posted on 01/30/2003 10:58:41 AM PST by FreedomPoster (This space intentionally blank)
[ Post Reply | Private Reply | To 2 | View Replies]

To: RISU
Microsoft - Where Quality is Job 1.6
6 posted on 01/30/2003 11:22:15 AM PST by tx_eggman
[ Post Reply | Private Reply | To 2 | View Replies]

To: tx_eggman


Red Flag Linux.

What Communist Do You Want to Help Today? (tm)

7 posted on 01/30/2003 11:46:33 AM PST by Bush2000
[ Post Reply | Private Reply | To 6 | View Replies]

To: RISU
Microsoft has built in so many doors they probably have forgotten where some of them are. They should concentrate on "quality" of programming for a while.

Why bother?

Microsoft's license agreements absolve it from any responsibility to distribute safe code, so it can point the finger of blame at its customers who don't keep up with all of the patches or don't install new software when it's available.

The Trustworthy Computing Initiative promises that things will be better Real Soon Now, so customers won't lose confidence in future Microsoft risks like .NET or the next version of Windows/Office.

Meanwhile, Microsoft's old stuff continues to subvert the Internet, causing intermittent but stunning pain to international commerce, while Microsoft says, "Hey, not our problem!"... until the government -- in the persona of Fritz Hollings or Billy Tauzin -- finally asserts that it has to step in and do something.

And so to avoid regulation of the software industry, Microsoft admits that the old hardware/software model is fatally flawed, and as a "public service" to the computing world... rolls out Palladium.

Everything's going according to plan.

8 posted on 01/30/2003 12:36:55 PM PST by TechJunkYard (via Blue)
[ Post Reply | Private Reply | To 2 | View Replies]

To: Bush2000
Microsoft

What Terrorist Group Do You Want to Help Today? (tm)

9 posted on 01/30/2003 1:42:18 PM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Bush2000
Red Flag Linux.

What Communist Do You Want to Help Today? (tm)

The Redmond, Wash.-based software giant is courting government officials, donating money to educational projects, and investing in joint ventures with local companies, said Jun Tang, president of Microsoft China.

Pot, meet kettle.

10 posted on 01/30/2003 1:44:01 PM PST by Mr_Magoo (Single, Available, and Easy)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Mr_Magoo
Note "educational projects". Not military infrastructure.
11 posted on 01/30/2003 2:03:45 PM PST by Bush2000
[ Post Reply | Private Reply | To 10 | View Replies]

To: ShadowAce
Microsoft told the Associated Press that it ... ended the matching grants after it learned of the terrorism allegations. Both UBS and Hewlett-Packard, which acquired Compaq last year, said they had also severed their ties with the charity.

You're not honestly going to assert that these companies sponsored terrorism, are you? Weak. But one thing is clear: You in the open source community know that your code is directly benefiting your Chinese communist buddies. The Chinese military-industrial complex continues to incorporate fixes and optimizations from the open source community into Red Flag Linux -- making its killing machine that much more lethal.
12 posted on 01/30/2003 2:07:16 PM PST by Bush2000
[ Post Reply | Private Reply | To 9 | View Replies]

To: Bush2000
Is there such a thing as a business in China that the PRC Military is not involved in?
13 posted on 01/30/2003 2:19:57 PM PST by Mr_Magoo (Single, Available, and Easy)
[ Post Reply | Private Reply | To 11 | View Replies]

To: Bush2000
Note "..courting government officials."
14 posted on 01/30/2003 2:23:52 PM PST by ShadowAce (Linux -- The Ultimate Windows Service Pack)
[ Post Reply | Private Reply | To 11 | View Replies]

To: Bush2000
The same Bloomberg report said the purpose of Red Flag was to reduce domination of the Chinese computer market by Microsoft's Windows operating systems.

As I said, Pot meet kettle.

15 posted on 01/30/2003 2:26:51 PM PST by Mr_Magoo (Single, Available, and Easy)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Bush2000
Research outfit Gartner has noted an ominous development for Microsoft and other non-indigenous firms operating in China. On 28th December 2001 the Beijing municipal government awarded contracts to six local software vendors, and rejected the seventh bidder - Microsoft. The contract covers office automation, antivirus and operating software, one of the winners being Linux OS vendor Red Flag.

It is starting to look more like your beef with red flag is that it is replacing Micro$lop as the OS of choice in one of the largest markets in the world.

16 posted on 01/30/2003 2:36:05 PM PST by Mr_Magoo (Single, Available, and Easy)
[ Post Reply | Private Reply | To 7 | View Replies]

To: Mr_Magoo; ShadowAce
The same Bloomberg report said the purpose of Red Flag was to reduce domination of the Chinese computer market by Microsoft's Windows operating systems. As I said, Pot meet kettle.

Every dollar which leaves China won't be spent on the Chinese military. Including every copy of Windows sold.
17 posted on 01/30/2003 3:30:25 PM PST by Bush2000
[ Post Reply | Private Reply | To 15 | View Replies]

To: Bush2000
Chinese Military - - - Windows (any varient)

Is there a difference? Both want to take over the world.
18 posted on 01/30/2003 4:28:09 PM PST by Mr_Magoo (Single, Available, and Easy)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Bush2000
Every dollar which leaves China won't be spent on the Chinese military...

And every dollar that enters China... might. How do you know your precious "education" projects are going to get all of the money?

19 posted on 01/30/2003 6:07:57 PM PST by TechJunkYard (via Nancy)
[ Post Reply | Private Reply | To 17 | View Replies]

To: Bush2000
You in the open source community know that your code is directly benefiting your Chinese communist buddies.

China's Linux coders not sharing, says Red Hat

They take, but they don't give back. Big surprise. That's not exactly going to endear them to the Open Source crowd. Eric S. Raymond, for one, was not pleased about the Linux in China idea, and said so back in 1999.

On the other hand...

Microsoft China's Chief: "We Have One Customer: The Government"
Microsoft, China in $750-m investment deal

Microsoft is donating mucho dinero to education in China, helping to develop China's own software industry, which will (like India) eventually take jobs away from American programmers.

Thanks a lot, Microsoft.

20 posted on 01/30/2003 7:03:57 PM PST by TechJunkYard (via Nancy)
[ Post Reply | Private Reply | To 12 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-4041-51 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson