pexels olly man on laptop

Sliced Cables and Cyber-Attacks: How Safe is Our Internet?

30 April 2024

6 MINS

Did you know that our access to the World Wide Web is primarily facilitated by miles of undersea cables, not satellite signals? 95 per cent of international data is carried through these “information super-highways”, merely the width of a garden hose, as the ABC reported on March 13, 2024 (“The cloud under the sea: China and the U.S. are wrestling over a web of cables we never see, but rely on every day”). Consider the vulnerabilities inherent in this system.

There are two main threats to submarine cables: physical tampering and digital hacking. Accidental damage from commercial fishing and shipping, as well as underwater earthquakes, creates 150 to 200 subsea cable faults each year. More worryingly, cables may be damaged or tapped by pirates, terrorists or aggressor states.

Tonga and Taiwan have experienced disruptions to their internet access – the former due to a natural hazard, and the latter thanks to human interference (see News Weekly‘s infographic here).

Disasters

In January 2022, an underwater volcanic eruption created tsunamis that severed the undersea cable that supplies Tonga’s internet connection. Atmospheric ash obstructed satellite communications.

For three days, the island-nation was completely cut off from the world, and it took five weeks for the international cable to be restored, during which families had no way of contacting their loved ones except through spotty satellite connections.

Taiwan has experienced 27 instances of damage to its submarine cables over the past five years, ostensibly by Chinese fishing vessels “accidentally” breaking them with errant anchors trailing along the ocean floor. The cables take months to repair. The Taiwanese Government has begun to prepare for the scenario where their country might lose contact with the rest of the globe.

After a missile attack by Houthi militants on the British-owned vessel Rubymar off the coast of Yemen on February 18, three internet cables were damaged, most likely by the Rubymar’s anchor, disrupting 25 per cent of Red Sea internet traffic.

Over 90 per cent of Europe-Asia internet traffic is routed through the Red Sea, and it is challenging to undertake repair work in a warzone. Repair vessels are unlikely to obtain permission to enter Yemen’s territorial waters, and the insurance costs for vessels in such dangerous areas are huge – up to $US150,000 ($A233,700) per day.

Last June, former Russian president Dmitry Medvedev warned that Russia could wreck the undersea cables linking the United States and Europe to the internet, as a reprisal for the West’s alleged role in blowing up the Nord Stream gas pipelines.

The Centre for Strategic & International Studies (CSIS) points to Russia’s capacity to tamper with undersea cables: “Moscow has two primary means by which it could directly threaten the cables: sub­marines and surface vessels that can deploy autonomous or manned submersibles.”

Such sabotage may aim at severing government or military communications, especially during a war; undermining economic competition; or isolating a target population.

In August 2021, the Irish Naval Service investigated possible tampering by a suspected Russian deep-sea vessel off the coast of Ireland. Russia’s military intelligence service, the GRU, had been observed mapping Irish landing points for subsea cables connecting Europe to the U.S.

The Russian Navy even has a marine mammal program, using dolphins, seals and beluga whales. Naval News posits: “It is plausible that beluga whales could covertly reconnoitre undersea infrastructure. They are the ultimate stealthy operator and can dive to depths of about 1,000 metres (3,280 feet).”

Another danger is that information may be siphoned from cables. CSIS explains that this may be accomplished “in one of three ways: inserting backdoors during the cable manufacturing process; targeting onshore landing stations and facilities linking cables to networks on land; or tapping the cables at sea”.

“Each is more difficult than the one before, and the last – tapping the cables at sea – is believed to be so technically challenging that it is not publicly known whether any country is even capable of it.”

Yet, Washington and Beijing have both accused each other of doing so, and are trying to out-manoeuvre each other to wrest dominance over the global system.

Control

The very first trans-Atlantic submarine cable was constructed for the telegraph. It was completed on August 5, 1856. Comprised of seven copper wires encased in rubber, tarred hemp and a sheath of iron wires, it soon failed after the voltage was raised too high and damaged its insulation.

The Asia-Pacific National Internet Registry narrates:

“Over the ensuing years, techniques improved, with the addition of in-line amplifiers (or repeaters) to allow the signal to be propagated across longer distances, and progressive improvements in signal processing to improve the capacity of these systems.

“Telegraph turned to telephony, valves turned to transistors and polymers replaced rubber, but the basic design remained the same: a copper conductor sheathed in a watertight insulating cover, with steel jacketing to protect the cable in the shallower landing segments.”

The first Australian telegraph system was established in 1872, with an overland route through Darwin, and short undersea segments connecting to Singapore and from thence to India and Britain.

Nowadays there are almost 400 submarine cables in service worldwide, totalling 1.2 million kilometres of cable. Each length of cable is designed to operate for at least 25 years.

CSIS reports:

“The planning, production, deployment, and maintenance of subsea cables are almost entirely in the hands of the private sector. Currently, the four largest suppliers are Alcatel Submarine Networks (France), SubCom (United States), NEC (Japan), and newcomer Huawei Marine Networks, rebranded as HMN Tech in 2020 (China), whose market share has progressively risen to 10 per cent.”

Over the past decade, content providers such as Google, Microsoft, Facebook and Amazon have become prominent investors in undersea cables to maintain connections between their data centres.

U.S. cable-laying company SubCom is currently building the South East Asia-Middle East-Western Europe 6 (SE-ME-WE 6) network, running from Singapore to France with almost 20,000 kilometres of fibre linking multiple nations.

SubCom gives the United States tremendous control over the international stream of data. Chinese company HMN Tech is making inroads; it would have snagged the SE-ME-WE 6 contract had the U.S. Government not blocked it. This was one of six private deals in the past four years where the U.S. has intervened to bar Chinese companies from the deal or compel cables to be re-routed to avoid direct links from China to the U.S.

(HMN Tech’s parent, Huawei, is widely and credibly suspected of being in thrall to the Chinese Communist Party.)

Subsea-cables

Map of subsea cables | Image: Telegeography

Reuters journalist Joe Brock observes:

“The South China Sea has been essentially blocked off from U.S. companies so they can no longer run cables through there, so they’re running cables around. Chinese companies can’t run cables to the U.S., which is the biggest internet market in the world.”

In May 2023, the Chinese Government opened talks with ten South-Pacific countries, offering loans to erect and expand their telecommunications networks through Huawei. China presents an affordable option for developing nations keen to catch up with the rest of the world.

In response, the U.S. is funding the Central Pacific cable, connecting American Samoa with Guam and extending to various other Pacific islands, such as Fiji and Papua New Guinea.

Digital Danger

Hackers are also an ever-present threat to the World Wide Web, if they manage to gain control over network management systems.

Last month, several French government departments sustained a series of cyber-attacks. Pro-Russian hacker group Anonymous Sudan claimed responsibility for targeting the French Interministerial Directorate of Digital Affairs. Its modus operandi is “distributed denial of service” attacks (DDoS), overwhelming a website, server or network with a flood of internet traffic, causing it to go offline.

Recently, Microsoft engineer Andres Freund found malicious code “embedded deep inside XZ Utils, some software designed to compress data used inside the Linux operating system, which runs on virtually all publicly accessible internet servers.”

The Economist reported:

“Those servers ultimately undergird the internet, including vital financial and government services. The malicious code would have served as a ‘master key’, allowing attackers to steal encrypted data or plant other malware.”

Freund may have saved the entire world from a massive cyber-attack.

Professor John Naughton told The Guardian:

“XZ Utils is open-source software, that is, software with source code that anyone can inspect, modify and enhance. Much open source is written and maintained by small teams of programmers, and in many cases by a single individual.

“In XZ Utils, that individual for years has been Lasse Collin… about two years ago a developer ‘with no prior online footprint’ and calling himself Jia Tan appeared out of the blue and started making helpful contributions to the XZ Utils library.”

The malware-infected updates were released by Jia, suspected of being involved with Russia’s foreign intelligence service.

Naughton reflects:

“We have constructed a whole new world on top of a technology that is intrinsically and fundamentally insecure. … we are critically dependent on open-source software that is often maintained by volunteers who do it for love rather than money – and generally without support from either industry or government.”

The internet has become an integral part of modern society, the vehicle for our banking and payments, interface with government and health services, communications with loved ones and strangers, source of entertainment and education, and means of work. This entire virtual world can collapse in the blink of an eye. Are we prepared for such a catastrophe?

___

Republished with thanks to News Weekly. Image courtesy of Andrea Piacquadio.

About the Author:

SHARE >

We need your help. The continued existence of the Daily Declaration depends on the generosity of readers like you. Donate now. The Daily Declaration is committed to keeping our site free of advertising so we can stay independent and continue to stand for the truth.

Fake news and censorship make the work of the Canberra Declaration and our Christian news site the Daily Declaration more important than ever. Take a stand for family, faith, freedom, life, and truth. Support us as we shine a light in the darkness. Donate now.

7 Comments

  1. 659027928e33071356b5c9c099ce27477f49bb005145dc58b1581308fbd3ee0a?s=54&d=mm&r=g
    Joshua M 30 April 2024 at 8:21 am - Reply

    Naughton is wrong. The xzutils breach was found extremely quickly thanks to the open source nature of the software. Freund was a performance tester and found performance degradation notably before any malicious payload was inserted

    If it were closed source there would be zero eyes on the code and an exploit could easily be state sponsored or even cooperatively added with a corporation and a rogue state (think PRISM)

    The facts are also
    1. xzutils are not a default part of sshd configuration and only a couple of distributions add it in , meaning the widespread nature was fairly limited
    2. We don’t know the contents of the payload as it was never successfully executed. It could have been a rogue party chasing a quick buck with bot nets for DoS or something like ransomwear
    3. xz may be maintained by “volunteers” but in most cases their day job is computer programming. The Microsoft engineer who has eyes was doing it professionally as a part of his job. If he didn’t find this we can be pretty confident someone would’ve (but he did the world a favour by finding it when he did)

    • DAY 31 Warwick Author CD MAY 2023 OPT
      Warwick Marsh 30 April 2024 at 9:21 am - Reply

      Thanks Joshua for setting the record straight!!!

    • 659027928e33071356b5c9c099ce27477f49bb005145dc58b1581308fbd3ee0a?s=54&d=mm&r=g
      Joshua M 30 April 2024 at 10:49 am - Reply

      For reference, the affected systems were:

      Linux distributions including SuSE Tumbleweed, Fedora 40, Fedora Rawhide, Debian Sid (unstable), ArchLinux, and Gentoo

      All of these are deemed “Rolling releases” or at least on the Edge of newness, and with “latest features” you are always risking bugs and exploits that have less eyes on them.

      All standard organisational distributions, ie. Red Hat (RHEL9) or Canonical (Ubuntu 22.04.4 LTS) were unaffected.

  2. DAY 31 Warwick Author CD MAY 2023 OPT
    Warwick Marsh 30 April 2024 at 9:22 am - Reply

    Jean really great article about a subject of profound imporatance that not many people know!!!!

  3. 88895edd636b06243f9fd428bd489df187815eaea5fa354be4a52463f62a2932?s=54&d=mm&r=g
    Gail Petherick 30 April 2024 at 12:07 pm - Reply

    Thank you Jean for the intricate details which shows great vulnerability to Australia and all countries around the world. We need to know this and also to pray for God’s protection on cables and especially the Red Sea area and to pray for the submarines that intend to do harm that hover around the Pacific and other countries. Also to pray for the emergency tech workers who repair broken communications. So much can be brought down in a moment as you say. May God be merciful.

    • 880fd9b6015e6d9a2462acc3c438a67bb7f26ce9dba9becfd94ff7a0a4e8a85e?s=54&d=mm&r=g
      Jean Seah 30 April 2024 at 4:10 pm - Reply

      Amen! God bless you, Gail!

  4. 0420391077f8111996bb838f71e47c0f9bd9c371f65b3429541324068047dbf1?s=54&d=mm&r=g
    Countess Antonia Maria Violetta Scrivanich 11 May 2024 at 1:28 am - Reply

    Thanks for this important information which most people are not privy to. Like others I wrongly assumed we depended on satellites.

Leave A Comment

Recent Articles:

Use your voice today to protect

Faith · Family · Freedom · Life

MOST POPULAR

ABOUT

The Daily Declaration is an Australian Christian news site dedicated to providing a voice for Christian values in the public square. Our vision is to see the revitalisation of our Judeo-Christian values for the common good. We are non-profit, independent, crowdfunded, and provide Christian news for a growing audience across Australia, Asia, and the South Pacific. The opinions of our contributors do not necessarily reflect the views of The Daily Declaration. Read More.

MOST COMMENTS

GOOD NEWS

HALL OF FAME

BROWSE TOPICS

BROWSE GENRES