Passport

Report: Indonesia Emerges as Hacking Powerhouse

Internet hackers have found a new home from which to spread online mayhem , and it's not where you might expect. According to a new report from cloud computing provider Akamai, Indonesia became a hotbed of hacking activity during the first quarter of 2013, rocketing to second place behind China among the most prevalent sources of Internet attacks.

In the final three months of 2012, Indonesia played host to a mere .7 percent of all Internet hacking activity, but during the following three months that figure ballooned to 21 percent. Accounting for a full 34 percent of Internet attacks, China remains the global hacking superpower, but Indonesia's sudden rise in the tables is indicative of how diffuse networks of hackers around the globe can exploit weaknesses in the web. (It's theoretically possible that detection has improved but that's still a pretty incredible jump.)

According to Akamai, the sudden rise in hacking activity emanating from Indonesia probably doesn't mean hackers are picking up their bags and laptops and decamping for the tropical climes of Jakarta. Rather, the sudden spike in activity is probably indicative of a decision by hacking collectives or large operations to utilize Indonesian servers for botnet operations, automated attacks that use a set of linked programs to carry out an attack and amplify their effect. That same system allows hackers to largely mask their true location.

With 8.3 percent of hacking activity emanating from its shores, the United States comes in third place in Akamai's ranking. With 4.5 percent and 2.7 percent, respectively, Turkey and Russia round out the top five. Here's the full ranking:

 

But this Akamai table also highlights the central problem of confronting hacking activity today: extremely hazy attribution. Consider a scenario in which a large financial institution finds its servers under siege by an attack emanating from a server in Shanghai. The company sees that data and makes an obvious conclusion: the Chinese government is trying to steal the bank's trade secrets. But IP attribution is not on its own sufficient to ascertain the identity of an attacker -- the assault on this hypothetical financial institution could easily have been bounced off servers in different corners of the world to mask the attacker's actual location. For all the bank knows, it could have been their competitor in the office next door trying to swipe trading strategies. 

Unsurprisingly, businesses remain the biggest targets of Internet attacks, according to Akamai. In an examination of so-called distributed denial of service attacks -- a type of hack that directs a massive amount of Internet traffic at a given website in order to take it off life -- the company found that its enterprise clients received 35 percent of all attacks. The full breakdown is here:

 

The following graph breaks those attacks down further and show how financial services remain a favorite target of hackers.

 

BAY ISMOYO/AFP/Getty Images

National Security

Drones Killed 94 Kids, Says Pakistani Report

For the past nine years, CIA drones have  struck militant commanders in Pakistan's tribal areas with deadly frequency, decimating the leadership of al Qaeda and the Taliban. But those very same strikes have also resulted in an untold number of civilian casualties. Because of the danger in travelling to these areas, the exact number of civilians killed in CIA strikes has remained something of a mystery.

Now, a new report from the Bureau of Investigative Journalism provides as close as we've come to an on-the-ground account of the full civilian toll of the CIA's strikes. That report, relying on figures compiled by officials in Pakistan's Federally Administered Tribal Areas, shows that civilian casualties may be far higher than officials in the Obama administration have so far been willing to admit.

According to that report, which covers the period from Jan. 1, 2006, to Oct. 24, 2009, CIA drone strikes have left at least 746 people dead. Among those casualties, Pakistani officials describe at least 147 civilians, 94 of whom were children. If anything, these figures are probably low-ball estimates. In some cases, the report, which covers strikes during the tail end of the Bush administration and the first nine months of the Obama administration, doesn't make entirely clear the exact number of civilians killed, only that civilians were among those dead.

The actual number of civilians killed is certainly higher. A tally of civilian deaths in Pakistan from drone strikes compiled by the Bureau of Investigative Journalism that relies largely on media reports estimates the total number of civilian casualties at somewhere between 411 and 890.

Unique among the reports thus far available of drone strikes in Pakistan, the bureau's latest finding relies on an internal Pakistani government report that draws on a network of local agents and informants in Pakistan's tribal areas to compile information about the strikes. Despite the fact that the CIA's use of drones in prosecuting the war on terror has generated intense media scrutiny, journalists have struggled reaching the tribal areas to investigate drone strikes. Volatile security conditions and a rampant risk of kidnapping make travel there impossible, which has allowed the CIA to largely shield its actions from public view. But those constraints are not a factor for local Pakistani officials, making this latest report of the CIA's shadow war one of the most reliable yet to emerge.

For defenders of the drone program, the report should make for uncomfortable reading. During the February confirmation hearing for CIA Director John Brennan, Sen. Dianne Feinstein, the chair of the Senate Intelligence Committee, claimed that civilian casualties of drone strikes each year have "typically been in the single digits." That's a claim that Pakistani government reporting manifestly contradicts.

The question of how to count civilian casualties is itself an issue of some controversy. In arguing that CIA drone strikes result in a minimal number of civilian casualties, the Obama administration has relied on a definition of who qualifies as a "combatant" that more or less classifies all military aged men killed in a strike as militants. While that definition that has been in effect immediately following the time covered by the report, it gives a sense of the semantic debates that underlie the Obama administration's claims on civilian casualties stemming from its program of covert drone strikes.

This latest report also illustrates how Pakistan has often served as a willing co-conspirator in the CIA's tribal area campaign. Though Pakistani officials -- including the newly elected prime minister, Nawaz Sharif -- have loudly objected to U.S. drone strikes on Pakistani territory, the country's officials have also played both sides of the issue, privately welcoming when strikes take out military leaders that the country is none too fond of. In the document, tribal area officials at one point refer to an August 2009 strike by writing that "17 miscreants were killed." And in private conversations with U.S. officials, Pakistani officials have been even more duplicitous. "I don't care if they do it as long as they get the right people," Interior Minister Rehman Malik said in August 2008, according to a leaked diplomatic cable. "We'll protest in the National Assembly and then ignore it."

Apparently, Malik was also ignoring his government's own reports about civilian casualties.

S.S. MIRZA/AFP/Getty Images