this post was submitted on 04 May 2025
64 points (100.0% liked)

Technology

38603 readers
432 users here now

A nice place to discuss rumors, happenings, innovations, and challenges in the technology sphere. We also welcome discussions on the intersections of technology and society. If it’s technological news or discussion of technology, it probably belongs here.

Remember the overriding ethos on Beehaw: Be(e) Nice. Each user you encounter here is a person, and should be treated with kindness (even if they’re wrong, or use a Linux distro you don’t like). Personal attacks will not be tolerated.

Subcommunities on Beehaw:


This community's icon was made by Aaron Schneider, under the CC-BY-NC-SA 4.0 license.

founded 3 years ago
MODERATORS
 

Archived version

Hackathons are common, but Chinese hacking competitions are different.

...

In 2017, Zhou Hongyi, the founder of Chinese cybersecurity giant Qihoo 360, publicly criticised the practice of sharing vulnerability discoveries internationally, arguing that such strategic assets should stay within China. His sentiments, supported by the Chinese government, gave birth to the national hacking competition called the Tianfu Cup. The contest is focused on discovering vulnerabilities in global tech products like Apple iOS, Google’s Android, and Microsoft systems.

How is Tianfu Cup different?

A 2018 rule mandates participants of the Tianfu Cup to hand over their findings to the government, instead of the tech companies.

Dakota Cary, a China-focused consultant at the US cybersecurity company SentinelOne, said, “In practice, this meant vulnerabilities were passed to the state for use in operations.”

This approach effectively turned hacking competitions into a government pipeline for acquiring zero-day vulnerabilities — software flaws unknown to vendors and extremely valuable for cyber-espionage.

...

In recent years, China’s hacking competitions have increasingly shifted focus toward breaching domestic products, including Chinese-made electric vehicles, phones, and security software.

...

all 23 comments
sorted by: hot top controversial new old
[–] randomname@scribe.disroot.org 3 points 6 hours ago (2 children)

As a response to several of the posts in this thread: It is really amazing how many people here on Lemmy are downplaying or even denying China's crimes (even many admins and mods). You can post articles critical of the US, EU, Australian or any other government, but if you post a China-critical text you are whatabouted to death. The tonality of many of these comments alone is very telling.

[–] LukeZaz@beehaw.org 1 points 5 hours ago (1 children)
[–] randomname@scribe.disroot.org 1 points 3 hours ago* (last edited 3 hours ago)

What does 'dishonest' mean in this context?

Your comment supports exactly what I said. I have been here on Lemmy for only a short period of time, but I have been observing that whenever one posts an article critical of China, this user gets whatabouted to death (and sometimes called "idiot", "F@ing liberal", and other names). One user here in this thread even asked me whether I support the war in Israel (!) - because I posted an article on China "building a cyber army of hackers."

What is this?

Such behavior is so widespread here on Lemmy that I argue it must be orchestrated, this doesn't rise up organically. And it appears to be supported not only by users but also by many admins and mods.

I will stop responding to this kind of comments, btw. This is off-topic and leads to nowhere.

[–] jarfil@beehaw.org 1 points 6 hours ago* (last edited 6 hours ago)

Why is this article "critical with China"? From the sound of it, the Tianfu Cup is clear about its goals, that's a surprisingly high level of transparency. All hackathons are geared towards finding and hiring hackers, both by companies and by governments. This way, people can decide whether they want to be recruited by the CCP or not.

[–] t3rmit3@beehaw.org 5 points 15 hours ago* (last edited 15 hours ago)

Chinese hacking competitions (plural) are different

A 2018 rule mandates participants of the Tianfu Cup (singular) to hand over their findings to the government

This approach effectively turned hacking competitions (plural)

So the article uses one competition doing this to assert this as "Chinese hacking competitions". There are tens if not hundreds of hackathons in China.

Please stop posting these heavily biased or misleading articles about China from questionable sites.

We get it, you don't like China. We got that after the first 50 posts about China being bad. Most of us don't like the CCP either.

But at least post reputable sources that don't push agendas quite so blatantly.

For anyone interested, this site (firstpost.com) is an english-language Indian news site owned by Network18, a news conglomerate with a right-leaning, pro-Modi bias.

[–] zephorah@lemm.ee 28 points 23 hours ago

It’s a good thing we dissolved our federal cybersecurity.

[–] ABetterTomorrow@lemm.ee 19 points 23 hours ago

Must be nice having an education.

[–] quartz@kbin.earth 1 points 13 hours ago

who does not ?

[–] gezginorman@lemmy.ml 6 points 20 hours ago

oh no, not my country's enterprise systems!

anyway...

[–] demesisx@infosec.pub 8 points 23 hours ago (2 children)

This story deserves a “no doy!”

All major world powers are bolstering their cybersecurity. If they weren’t, they wouldn’t survive in such an opportunistic world.

[–] randomname@scribe.disroot.org 12 points 22 hours ago (2 children)

This is not about 'bolstering cybersecurity' but rather about attacking other countries. There is nothing even remotely similar to a 'Tianfu Cup' in any other country.

As I asked already in another thread: Why is it that whenever one posts something critical of China here on Lemmy, there is some commentary arguing that the US is doing the same? I don't understand that.

That's whataboutery back and forth.

[–] demesisx@infosec.pub 7 points 22 hours ago (3 children)

Embedding Trojans in your enemy’s infrastructure and leaving them to be switched on in times of war is ABSOLUTELY defense. You may not like it. But that’s called cyber warfare.

Quick question: Do you fundamentally disagree with what China is accused of but fully support Israel and the US’s extrajudicial backdoors, Trojan horses, domestic spying, pager bomb assasinations, AI targeted air strikes, and other clandestine war crimes just because they are perpetrated by “the good guys”?

[–] xrun_detected@programming.dev 3 points 19 hours ago* (last edited 18 hours ago)

nice try derailing the conversation with a "quick question", let's ignore it.

you are correct, it is cyber warfare, and china sees the US as their enemy. however it is not "ABSOLUTELY" defense.

i guess the conventional warfare equivalent would be to place explosives on the territory of your enemy to set it off in case of war. which smells way more like preparing active warfare than some kind of defense.

it brings it's own set of problems as well. let's say they get triggered by accident, either by incompetency or a third conflict party.

it will be very hard to explain why they were there in the first place, and "yes we deployed the <insert 'defensive' measure> on your soil, but it wasn't us who triggered it." might just not cut it.

[–] randomname@scribe.disroot.org 4 points 21 hours ago (1 children)

@demesisx@infosec.pub

Quick question also to you: Do you fundamentally disagree with what Israel and the US are accused of but fully support China's domestic surveillance, transnational repression, supression of free speech and freedom of the press, bullying of its neighbours, aggression against Taiwan, just because they are perpetrated by “the good guys”?

[–] demesisx@infosec.pub 6 points 20 hours ago* (last edited 19 hours ago) (1 children)

You conveniently dodged my question, then asked me stupid questions, thinking I'd have to agree with cherry-picked offenses by China. I am not a fan of China. I just think they are justified in defending themselves. Furthermore, I think it's hilarious that the the US decided to offshore our high tech goods to have them manufactured there as if we weren't ASKING to be hacked. The only solution going forward is CLEARLY domestic RISC-V manufacturing and not allowing our enemies to manufacture our critical technologies.

Do I support China's:

  • domestic surveillance: of course not
  • transnational repression: of course not
  • supression (sp!) of free speech and freedom of the press: of course not
  • bullying of its neighbours: of course not
  • aggression against Taiwan: of course not

Do I support China engaging in pre-emptive cyber warfare against aggressors: absolutely

Do I support the US engaging in pre-emptive cyber warfare against aggressors: absolutely

Do I support Israel engaging in pre-emptive cyber warfare against aggressors: absolutely

Do I support war crimes being committed by ANY of these countries: NO

[–] avidamoeba@lemmy.ca 6 points 21 hours ago

This post is critical of China? I thought it shows their competency and forethought. I wish my government was competent enough to realize the importance of cyber warfare and organize such contests.

[–] Tablaste@linux.community 4 points 19 hours ago

It reminds me of the PowerPoint my company had.

It was this graph showing how many tech people they have since 1960, and the numbers kept multiplying.

How they rated tech people was someone who works behind the computer. So yeah, as we gain more employees, we tend to put them behind computers to do work?

[–] randomname@scribe.disroot.org 3 points 21 hours ago

'China has almost doubled their aggression in cyber’, experts say

Today, Western governments have been more outspoken in linking China to cyber attacks and sanctioned organizations linked to malicious cyber activity. Despite this growing awareness of the threat posed by China-backed groups, ... people still don’t have a firm grasp on the extent to which China has infiltrated enterprise systems ...