Was the Chinese Cyber-Attack On Google A False-Flag Operation?

image courtesy of the EFF

Today the Wall Street Journal announced that it uncovered a new government program ominously dubbed “Perfect Citizen”. The project will bring NSA monitoring equipment to corporate computer networks that the government deems to be “critical infrastructure” with the stated goal of detecting cyber-attacks. Sources familiar with “Perfect Citizen” told the Wall Street Journal that “[the NSA] wouldn’t persistently monitor the whole system”, which is troubling since that statement indicates that the system can be persistently monitored. Since the NSA had no qualms about illegally tapping every phone in America, how can they be trusted not to abuse the “Perfect Citizen” system? In my mind, trusting the NSA with this power is akin to leaving a junkie locked in a room with their drug of choice and telling them not to touch it. For now at least, companies will have to opt-in to allowing the NSA to install sensors onto their networks. However, with the recent Chinese attack on Google held up as an example, what company would choose not to participate in program to “protect national security”, especially if there was any chance of it being leaked that they declined to participate in something called “Perfect Citizen” (ever notice that the more onerous the program or law the more patriotic sounding the name – PATRIOT Act anyone?).

This of course brings me to the obvious poster child for “Perfect Citizen”, Google. At the beginning of this year it came to light that a number of systems belonging to Google, as well as systems of several other large corporations were penetrated by hackers. According to Google (and later persons within the US government as high ranking as Secretary of State Clinton) the attacks originated from China. From the onset the attack was represented to the public as a state sponsored cyber-attack. In fact, the phrase “act of war” was bandied about in some circles. As Google’s investigation progressed (aided by the NSA), however, little supporting evidence was presented despite strong accusations against the Chinese Government. For the world at large the die had been cast, China had attacked US computers. Admittedly, even I accepted Google’s story as fact. At least until this morning when the Wall Street Journal released the details of “Perfect Citizen”. I started thinking, why would China risk such a widespread attack that was certain to be uncovered and could possibly be considered an act of war. Especially in the case of Google where (according to what we were told) the attacks targeted uncovering dissidents, whose identities are almost certainly not worth going to war to uncover.

On the other hand, if a foreign power were to be caught attacking US companies the NSA would not face anywhere near as much resistance if it were to, months later, announce that it was willing “help” infrastructure providers by installing monitoring hardware. In fact, many companies would be lining up for the “help” for fear of stockholder retaliation if they were seen to be doing nothing to prevent becoming the victims of the next attack. It is the same principle that alarm companies use by sending sales people to neighborhoods that have just experienced a burglary. However, burglaries happen everyday – government sponsored cyber-attacks, not so much. This leaves the NSA either waiting for a large scale cyber-attack to sell its latest Big Brother program to the public or to use its considerable expertise to launch an attack that would appear to come from a foreign power. The later is far more predictable and can be executed so as to guarantee discovery on a time-table that would be best for the agency and the administration. Additionally, by offering to “help” the victim, the NSA would be in the perfect position to destroy any damning evidence and make sure the “correct” culprit was fingered.

Is there any evidence (at least that is available to the public) that even remotely suggests that the NSA launched a false-flag attack on it’s own citizens to forward it’s own agenda? No. This is all solely conjecture and theory, but unfortunately the US government has time and again proven that it cannot be trusted to obey its own laws. Because of this, one is forced to ask themselves, is my government willing to take such extreme measures to build popular support to expand it’s already illegal and unpopular domestic surveillance programs?