Internet traffic hijack disrupts Google services

In this Monday, Nov. 5, 2018, photo, a woman carries a fire extinguisher past the logo for Google at the China International Import Expo in Shanghai. Internet traffic hijacking disrupted several Google services Monday, Nov. 12, 2018, including search and cloud-hosting services. (AP)
Updated 13 November 2018
Follow

Internet traffic hijack disrupts Google services

  • Google confirmed Monday’s disruption on a network status page but said only that it believed the cause was “external to Google”

CALIFORNIA: An Internet diversion that rerouted data traffic through Russia and China disrupted several Google services on Monday, including search and cloud-hosting services.
Service interruptions lasted for nearly two hours and ended about 5:30 p.m. EST., network service companies said. In addition to Russian and Chinese telecommunications companies, a Nigerian Internet provider was also involved.
Google confirmed Monday’s disruption on a network status page but said only that it believed the cause was “external to Google.” The company had little additional comment.
The specific method employed, formally known as border gateway protocol hijacking, can knock essential services offline and facilitate espionage and financial theft. Most network traffic to Google services — 94 percent as of October 27 — is encrypted, which shields it from prying eyes even if diverted.
Alex Henthorn-Iwane, an executive at the network-intelligence company ThousandEyes, called Monday’s incident the worst affecting Google that his company has seen.
He said he suspected nation-state involvement because the traffic was effectively landing at state-run China Telecom. A recent study by US Naval War College and Tel Aviv University scholars says China systematically hijacks and diverts US Internet traffic.
Much of the Internet’s underpinnings are built on trust, a relic of the good intentions its designers assumed of users. One consequence: little can be done if a nation-state or someone with access to a major Internet provider decides to reroute traffic.
Henthorn-Iwane says Monday’s hijacking may have been “a war-game experiment.”
In two recent cases, such rerouting has affected financial sites. In April 2017, one affected Mastercard and Visa among other sites. This past April, another hijacking enabled cryptocurrency theft .
The Department of Homeland Security did not immediately respond to a request for comment.
ThousandEyes named the companies involved in Monday’s incident, in addition to China Telecom, as the Russian Internet provider Transtelecom and the Nigerian ISP MainOne.


Apple to update EU browser options, make more apps deletable

Updated 22 August 2024
Follow

Apple to update EU browser options, make more apps deletable

  • iPhone maker came under pressure from regulators to make changes after the EU’s sweeping Digital Markets Act took effect on March 7
  • Apple users will be able to select a default browser directly from the choice screen after going through a mandatory list of options

STOCKHOLM: Apple will change how users choose browser options in the European Union, add a dedicated section for changing default apps, and make more apps deletable, the company said on Thursday.
The iPhone maker came under pressure from regulators to make changes after the EU’s sweeping Digital Markets Act took effect on March 7, forcing big tech companies to offer mobile users the ability to select from a list of available web browsers on a “choice screen.”
The new rules require mobile software makers to show the choice screen where users can select a browser, search engine and virtual assistant as they set up their phones, which earlier came with preferred options from Apple and Google.
In an update later this year, Apple users will be able to select a default browser directly from the choice screen after going through a mandatory list of options.
A randomly ordered list of 12 browsers per EU country will be shown to the user with short descriptions, and the chosen one will be automatically downloaded, Apple said. The choice screen will also be available on iPads through an update later this year.
Apple released a previous update in response to the new rules in March, but browser companies criticized the design of its choice screen, and the Commission opened an investigation on March 25 saying it suspected that the measures fell short of effective compliance.
The company said it has been in dialogue with the European Commission and believes the new changes will address regulators’ concerns.
It also plans to introduce a dedicated area for default apps where a user will be able to set defaults for messaging, phone calls, spam filters, password managers and keyboards.
Users will also be able to delete certain Apple-made apps such as App Store, Messages, Camera, Photos and Safari. Only Settings and Phone apps would not be deletable.