I'm Surprised That Your Kung Fu Is So Expert

This story is so awesome.

Hacks of Chinese Temple Were Online Kung Fu, Abbot Says

A hacker who posted a fake message on the Web site of China's famous Shaolin Temple repenting for its commercial activities was just making a mean joke, the temple's abbot was cited as saying by Chinese state media Monday.

That and previous attacks on the Web site were spoofs making fun of the temple, Buddhism and the abbot himself, Shi Yongxin was cited as telling the People's Daily.

"We all know Shaolin Temple has kung fu," Shi was quoted as saying. "Now there is kung fu on the Internet too, we were hacked three times in a row."

Why am I not surprised that a Shaolin monk has a better grasp of the fundamentals of computer security than some people in IT?

Bonus: Props to anyone who recognizes the title of this post.

Comments

ekse said…
http://www.badmovies.org/movies/kungfudrunk/kungfudrunk3.wav
12:14 PM
Jim Steele said…
This comment has been removed by the author.
3:50 PM
Metajunkie said…
This post has good blog-fu. :)

I'm partial to the Japanese martial art traditions, but I've studied one form of Kung-Fu as well. :) I do value "The Art of War", which is Chinese in origin. I think both the "Art of War" (Chinese) and "A Book of Five Rings" (Japanese) have much to offer Information Security.

I write a little blog called cyber-jutsu, hosted at blogspot. I attempt to merge what I have learned about the martial arts with what I have learned about cyber-security.

Admittedly, my blog-fu isn't up to speed yet. :)

MetaJunkie

aka Ken Walling, CISSP, GREM
4:55 PM
Crawley Martial Arts said…
Yup totally agree - I think I saw that mentioned on some Kung Fu mag (can't quite remember) and whilst all the shaolin monks were on their mobile phones when I was there this year - I'm not surprised that their martial arts expertise applies to cybercrime!
7:58 AM
Christopher C. Welber said…
Unfortunately I think many monks/masters/managers in the Buddhist communities [I'm a Tibetan Buddhist myself] are not really up security issues and the monetary and other types of damage which can be caused these days. It's rare to find a monk who is up on technology at all because that's not really their thing.

One day I want to build a Buddhist and Senior center myself and in general I think it would be great if technology professionals [I've been in the business for over 22 years] put together some sort of association to help these religious organizations, I would be happy to do this! And just because their large and well known does not mean their technology is advanced at all.
9:41 AM
Post a Comment

Popular posts from this blog

Zeek in Action Videos

Image
This is a quick note to point blog readers to my Zeek in Action YouTube video series for the Zeek network security monitoring project .  Each video addresses a topic that I think might be of interest to people trying to understand their network using Zeek and adjacent tools and approaches, like Suricata, Wireshark, and so on.  I am especially pleased with Video 6 on monitoring wireless networks . It took me several weeks to research material for this video. I had to buy new hardware and experiment with a Linux distro that I had not used before -- Parrot .  Please like and subscribe, and let me know if there is a topic you think might make a good video.
Read more

MITRE ATT&CK Tactics Are Not Tactics

Image
Just what are "tactics"? Introduction MITRE ATT&CK  is a great resource, but something about it has bothered me since I first heard about it several years ago. It's a minor point, but I wanted to document it in case it confuses anyone else. The MITRE ATT&CK Design and Philosophy document from March 2020 says the following: At a high-level, ATT&CK is a behavioral model that consists of the following core components: • Tactics, denoting short-term, tactical adversary goals during an attack; • Techniques, describing the means by which adversaries achieve tactical goals; • Sub-techniques, describing more specific means by which adversaries achieve tactical goals at a lower level than techniques; and • Documented adversary usage of techniques, their procedures, and other metadata. My concern is with MITRE's definition of "tactics" as "short-term, tactical adversary goals during an attack," which is oddly recursive. The key word in the tacti...
Read more

New Book! The Best of TaoSecurity Blog, Volume 4

Image
  I've completed the TaoSecurity Blog book series . The new book is  The Best of TaoSecurity Blog, Volume 4: Beyond the Blog with Articles, Testimony, and Scholarship .  It's available now for Kindle , and I'm working on the print edition.  I'm running a 50% off promo on Volumes 1-3 on Kindle through midnight 20 April. Take advantage before the prices go back up. I described the new title thus: Go beyond TaoSecurity Blog with this new volume from author Richard Bejtlich. In the first three volumes of the series, Mr. Bejtlich selected and republished the very best entries from 18 years of writing and over 18 million blog views, along with commentaries and additional material.  In this title, Mr. Bejtlich collects material that has not been published elsewhere, including articles that are no longer available or are stored in assorted digital or physical archives. Volume 4 offers early white papers that Mr. Bejtlich wrote as a network defender, either for technica...
Read more