Have We Attacked China Yet?

No sooner was it publicly revealed that the United States would now treat damaging cyberattacks by other nations as an act of war, threatening retaliation with conventional weapons, the new, bold, some say foolish, policy, was immediately put to the test.

China Google hackers’ goal: Spying on U.S. Govt.

It’s the second time Google has blamed a major computer hacking scheme on China, reports CBS News correspondent Wyatt Andrews.

This time Google says unknown hackers from Jinan, China, a city with a military command center, stole the personal Gmail passwords of hundreds of senior U.S .government officials.

Google said the hackers’ “goal” was to eavesdrop on the officials — “to monitor the content of the users’ emails.”

That suggestion — of spying — rang alarm bells in the Administration.

“These allegations are very serious,” said Secretary of State Hillary Clinton. “We take them seriously. We’re looking into them.”

See also:
Clinton: Google’s China Hacking Claims ‘Very Serious’
Hillary Clinton says FBI will probe Gmail hacker attack
US Investigating Google Claim of China Hacking
FBI Investigating Google Claim that China Hacked Them
Google breach gives way to diplomatic, high-tech tensions
China Denies Accessing High Profile Gmail Accounts
Google’s groundless accuses hurt global trust on Internet
The Google-China Saga Continues
Admin: Gmail phishers stalked victims for months
Gmail Hack Targeted White House
Cyber war: Google, China in fresh spat over email hacking
Google, what exactly is the China connection for the phishing scare?
Is Google an agent of the US Government? It certainly gives that impression

So far, the U.S. has uncovered a successful espionage phishing expedition, against top level U.S. Government officials, tracked back to a specific Chinese city. Why aren’t we bombing China, isn’t this a perfect situation to show how our new military policy will treat hacking intrusions like this as acts of war? Unfortunately for us, China denies the attack and, as I pointed out yesterday, it’s extremely difficult to be absolutely sure as to the origins of cyberattacks like this, so we do nothing and our brand new policy looks foolish and radiates national weakness.

/instead of making toothless threats to send missile strikes in response to hack attacks, why don’t we just send the Chinese back a nice Stuxnet worm or take down Baidu with a complimentary DoS attack

What The Hell Happened?

It’s been over 24 hours now and still no one has any idea as to what caused Thursday’s bogus market plunge. Needless to say, that’s not good.

Yesterday’s market swerve: fat fingers, glitch, or cyber-warfare?

Theories about yesterday’s stock market swoon, where within a matter of 20 minutes, the stock market plunged by 1,000 points and then nearly completely recovered, are abounding. Fortune asked Rishi Narang, founder of the hedge fund Telesis Capital and author of Inside the Black Box, to share the theories he’s heard and handicap them in terms of likelihood and plausibility.

Narang, who uses high-frequency trading techniques, explains why high-frequency traders got out of the market during the dive, and why the catalyst for the drop is far more important to understand than the drop itself:

What happened yesterday?

There are two points to understand. First, what catalyzed the activity? What was the reason for the market wanting to fall? It might be that the catalyst was of such size that it overwhelmed all other factors. There are three plausible theories:

1) The fat finger. Plausible, but unlikely. Typing in billions with a “b” versus millions with an “m” seems impossible. Trading systems don’t work that way. More likely, the trading system accepts the sell/buy amount in thousands. Some trader in the heat of the moment forgets it’s in thousands, types in an order for 16,000,000 instead of 16,000. That kind of thing seems far more plausible.

But even then: why on Earth would the trading entry system not have a sanity check? For almost no one in the world is a $16 billion sell order okay to send out as soon as it’s entered. The trader should be fired, along with everyone in the IT department. If this happened, most likely, it was something along those lines. If it wasn’t all one order, maybe it was meant to sell just $1 billion shares but was sent 3 or 5 times instead of once.

2) Software error. Plausible, likely, but doesn’t fit the facts. Here, the trading software is in a recursive loop, pounding out sell orders due to a bug somewhere in the software. In a sense, this is more plausible, more likely, but doesn’t seem to fit the facts well enough.

The speed of the decline in the market just doesn’t seem to fit — should be a series of small orders, not a series of large orders. In 7 minutes we saw a 580-point drop. That doesn’t look like a recursive loop. But there is a lot of software, and somewhere a bug is bound to exist. You can easily imagine a software glitch happening. Things go buggy. Like the Toyota [accelerator] problem, at heart a software problem. Technology is a two-edged sword, and this is the other edge of the sword. We rely on software, but it’s not always written well enough.

3) Computer hacking. Implausible without proof, but possible. This is the most interesting theory because we know terrorists are interested in cyberterrorism. We know they would target the financial markets. We know a great day to launch an attack would be one with a mild bit of panic [due to the Greek crisis and sovereign debt downgrades].

Some other really crazy things happened with stocks, like Accenture and Exelon. [Both stocks traded for one cent for short periods of time.] Two parties really transacted on these trades [at one cent], even though they were later busted and cancelled. If it was just high-frequency traders bailing out, why wouldn’t [that drop] happen on every stock? It just doesn’t add up. Things are too idiosyncratic and that feels uncomfortable. This also happened in the options markets, but again, only on a handful of options.

And the second point to understand?

That’s the question of the enabler. What, if anything perpetuated the selloff? And did so in seconds? There’s a lot of speculation about high-frequency traders vanishing from the marketplace.

The consensus is that high-frequency guys didn’t provide the liquidity and that’s what allowed for prices like one penny on Accenture. I do know for sure that high-frequency traders backed off, but old school market makers would’ve done the same thing, in a little bit different way. They just would’ve created super-wide market spreads. Same thing.

We shouldn’t be so sanguine about taxes and impediments to high-frequency trading if we are upset when high-frequency traders leave the market. Those are incompatible ideas.

As a side point: traders have stop loss levels; one big move triggers other moves. There are systematic, discretionary, and plain-old panic trades.

But for all of those styles and programs, once they see the stock market fall 6%, a liquidation effect takes hold. That’s just a function of people. Someone screams fire, and if enough people start running, everyone will. Those are the dynamics of computer software, people, animals, fires, whatever. It’s how we work. That kind of stampeding effect could easily be part of the response.

But the speed of the market falling down, going back up, and partway back down again? If this was really a stampede, why not repeat the 1987 crash [which kept going]? Nothing ‘stopped’ this crash except that the catalyst seemed to have ended.

If it was an error or a software bug, it stopped. If it was a hack, the hackers left. In other words, the enabling side of this drop is totally irrelevant [to the catalyst]. The only interesting thing here is the catalyst. If this was a gas pedal that was stuck, it would’ve looked differently, kept going.

Whether this was intentional or unintentional, it happened all at once. If it was an intentional [attack], then the question is, was it a demonstration, a test, or the attack itself? Whatever it was, we didn’t stop it. It stopped itself.

See also:
Regulators Are Stumped by Drop
NYSE, Nasdaq bicker over stock-market drop
Plunge highlights fragmented markets, fast traders
Stock Market Crash? Or Trading Error?
Theories abound about how the 1,000 point Dow drop occurred
UPDATE: Everyone Seeks Answers Behind Stock Market’s Rout
Programs, NYSE Circuit Breakers Contribute To Market Plunge
Nasdaq cancels the trade of 296 stocks after Thursday’s Wall Street stock market crash
SEC reviewing Thursday’s sudden stock market drop
SEC Said to Outline Possible Causes of Market Plunge (Update1)
House panel to hold stock market inquiry

All I can say is that the investigators at the SEC had better get off their asses, take a break from their prodigious porn surfing, and get to the bottom of what exactly caused Thursday’s bogus market plunge. And they had better come up with a definitive answer quickly.

/the ongoing inability of exchange operators and regulators to pinpoint the problem is beginning to shake market confidence even more than the bogus plunge itself