Bruce Schneier

 
 

Schneier on Security

A blog covering security and security technology.

« UK Two-Tier Tax Security System | Main | VoIP Threats »

February 05, 2008

Fourth Undersea Cable Failure in Middle East

The first two affected India, Pakistan, Egypt, Qatar, Saudi Arabia, the United Arab Emirates, Kuwait, and Bahrain. The third one is between the UAE and Oman. The fourth one connected Qatar and the UAE. This one may not have been cut, but taken offline due to power issues.

The first three have been blamed on ships' anchors, but there is some dispute about that. And that's two in the Mediterranean and two in the Persian Gulf.

There have been no official reports of malice to me, but it's an awfully big coincidence. The fact that Iran has lost Internet connectivity only makes this weirder.

EDITED TO ADD (2/5): The International Herald Tribune has more. And a comment below questions whether Iran being offline has anything to do with this.

EDITED TO ADD (2/5): A fifth cut? What the hell is going on out there?

EDITED TO ADD (2/5): More commentary from Steve Bellovin.

EDITED TO ADD (2/5): Just to be clear: Iran is not offline. That was an untrue rumor; it was never true.

Posted on February 05, 2008 at 08:28 PM207 CommentsView Blog Reactions

To receive these entries once a month by e-mail, sign up for the Crypto-Gram Newsletter.

Comments

I blame either earthquakes, or the pentagon...

Posted by: josh at February 5, 2008 08:44 PM


Anyone else find it interesting that these cables are being cut right around the time ISP data fingerprinting is being proposed/introduced?

When will the people's free internet be introduced?

Something will have to change when our right to express ourselves is cut just as it is with big media radio/FCC bedroom behavior vs. individuals who cannot own their own radio station.

Snip snip, tick tock!

Freedom dies a little every day.

Posted by: prodigal sheep at February 5, 2008 08:57 PM


The internettrafficreport always reports that one Iranian router as being offline lately... Don't use one metric to make accusations!

Posted by: Anonymous at February 5, 2008 09:13 PM


Renesys has been having fairly good coverage of the issue, and they are stating that Iran is not down: http://www.renesys.com/blog/2008/02/attention_iran_is_not_disconne_1.shtml

Posted by: Hank at February 5, 2008 09:21 PM


What's the weather like there? If it's been rough and a lot of ships have been throwing down anchors, it could just be that. I don't know. Although it is improbable that dropped anchors would cut so many cables in such a short amount of time, this doesn't mean that it is impossible.

Or maybe it's some seals trained by the navy (the animals, not the elite navy forces) who are sneaking in and cutting the cables under directive of the CIA as a precursor to a US assault on Iran.

EVERYBODY PANIC!!!SHIFTONE!

Posted by: Portland Guy at February 5, 2008 11:37 PM


I love a good conspiracy theory as much as the next guy, but I'm just not sure about this one. At the very least, it doesn't seem like anything the U.S. or any Western nation would have a lot of interest or benefit in doing. (As has been widely pointed out, the U.S. has a nuclear submarine, the USS Jimmy Carter, specifically configured for tapping underwater fiber-optic cables, and cutting them is not how you install a tap.)

Plus, since the Internet is a major source of Western cultural influence in the Middle East, it would be self-defeating for a Western nation to go and cut the cables. (Not that the West isn't often self-defeating, but this is a little too blunt.)

The only workable malicious theory I've heard involves the cutting being the work of a group or groups who are in some way opposed to Western influences in the Middle East, or to the most Western-friendly groups, such as the Al Maktoum family. Since it doesn't take much in the way of resources to break a cable, it's not out of the realm of possibility for a fringe group.

That said, I think the possibility that it really is/was some sort of geologic phenomenon should be carefully investigated before anyone jumps to conclusions about what are effectively acts of war.

Posted by: Kadin2048 at February 6, 2008 12:26 AM


They're attempting to lower the 21st century version of the cone of silence.

Posted by: Righty-o at February 6, 2008 12:26 AM


"At the very least, it doesn't seem like anything the U.S. or any Western nation would have a lot of interest or benefit in doing."
That doesn't mean the current regime in Washington won't do it. The US didn't really have any interest or benefit in invading Iraq in 2003, for example.
As several people pointed out, losing one cable is probably accidental, and even losing 2 in a short space of time might be accidental. But five? Wake up, folks.

Posted by: Nostromo at February 6, 2008 01:00 AM


Yes, it could be the weather but 5 undersea cables down in less than a week is likely to be a coordinated attack. According to (http://personalpages.manchester.ac.uk/staff/m.dodge/cybergeography//atlas/alcatel_large.gif) this looks like maybe half of all the cables in this area.

I'm not saying a war is imminent or remotely close. More likely it is Israel and/or the US testing if their sims are accurate (note that Israel is not effected by these outages since they use different cables).

Posted by: NotUsuallyAConspiracyTheorist at February 6, 2008 01:01 AM


Well, it's an awful coincidence that the long-postponed launch of the (euro-denominated) Iranian Oil Bourse was due this week. They postponed it so many times already, the entire project would lose the last shred of credibility if it was postponed again, or maybe just appear sluggish on the launch day.

I'm not saying somebody is doing this to Iran, for what we know they might be doing it to themselves in order to cover their own failures by accusing a third party of sabotage. But it certainly is "funny" to have so many outages in one week which happens to be a very delicate week for the oil markets.

@Portland guy: people worry because we're in that period of the year (feb-apr) when you're supposed to start a military campaign in the ME if you really want to. Can't do it in the summer (untolerably hot), can't do it in winter (untolerably cold in desert areas); if you start in autumn, you risk not being done when the winter comes, so you have to do it in early spring.
This said, I don't see how the currently-overstretched US military could invade a country larger than Panama these days...

Posted by: Giacomo at February 6, 2008 01:15 AM


FWIW, there is a historical precedent for cutting cables before war:

The Z gram intercept: greatest cryptography coup of World War I
http://findarticles.com/p/articles/mi_m0QUY/is_2004_July/ai_n6142317/pg_2

Posted by: HistoricalPrecedent at February 6, 2008 02:01 AM


Regarding the comment that internettrafficreport.com has been showing that Iranian router as down recently, archive.org will at least confirm that there was 0 packet loss to Iran as of August 2007:

http://web.archive.org/web/20070808165242/http://www.internettrafficreport.com/asia.htm

Posted by: HistoricalPrecedent at February 6, 2008 02:09 AM


The funny thing about the metric you quoted is that the web server of the Iran University of Science & Technology ( http://www.iust.ac.ir/ ) in the same IP block as the router that's supposedly unreachable (router1.iust.ac.ir) works, although somewhat slowly.

Posted by: js at February 6, 2008 02:17 AM


Do you commentators even read the articles or even the first few comments?

Iran is not offline - that page monitors one router. It's disaffected sure, but not cut off.

It's been repeated across these pages that the first major cut was not on-site sabotage; they say it was most likely power failures(could also just as well be natural occurrences - mother nature's TOTM perhaps...). These cables depend on direct current to operate, so the question is... why's the power failing? What sites power these cables and what the hell happened there?

For my money the only conspiracy that might be here is that whatever supplies power to these lovely Harry Potter subway tunnels might have been manipulated? Not the first we've heard of malicious hackers playing with power plants.

But that's a Mr. Fantastic stretch...

Posted by: j0hnner_ca at February 6, 2008 02:21 AM


I think it's IPv6 straining the cables to their limits. ;)

Posted by: Dave at February 6, 2008 02:44 AM


"As has been widely pointed out, the U.S. has a nuclear submarine, the USS Jimmy Carter, specifically configured for tapping underwater fiber-optic cables, and cutting them is not how you install a tap."

Uhm, I realize my knowledge about this is extremely limited, but it was my understanding that fiber optic couldn't be tapped? If you intercept the information, it won't be going where it's supposed to go?

I guess it might be conceivable to read the signal and then resend it, but how would this be done in practice? Anyone have any insights?

As for the cables, I think someone's up to something.

Posted by: sortkatt at February 6, 2008 03:01 AM


I know you can tap normal consumer fiber optic cables if you have coils of them laying around(as is often the case. makes cutting and reworking easier). You attach on a little device called a bend coupler and it works because some stray photons actually escape through the insulation; enough to get the signal. But these things are thick as all hell aren't they? And I'd imagine when stringing them across the globe you're not going to be wasting any length

Posted by: j0hnner_ca at February 6, 2008 03:35 AM


"Once is happenstance, twice is coincidence, three times is enemy action." Auric Goldfinger in the James Bond movie "Goldfinger"

Posted by: Marc at February 6, 2008 03:59 AM


The ITR seems to be a very unreliable source of info. According to them, Germany and Florida are offline too. (And South Africa is part of Europe).

Posted by: Ingvar at February 6, 2008 04:13 AM


Re: NotUsuallyAConspiracyTheorist:

That's what it looks like to me too. There's no way in hell this is accidental (sorry Portland Guy, these cables are relatively small, you don't stand a chance of hitting so many of them with anchors even if you cover the see with ships from shore to shore; point in case: how frequently does this happen with single cable only no matter what weather?). And it didn't actually knock any country off the Internet entirely, which suggests a test to me -- what's the point otherwise?

Posted by: Peter at February 6, 2008 04:16 AM


1. Cut the cable in a way which makes it look like an accident.

2. While the repair team is busy traveling to the place of the cut, splice in the wiretap pod nearby (nobody would notice, the cable is cut, and any small change in cable parameters will be written off as side effect of repair).

3. Wait for the repair team to bring the cable back to life.

4. Spend the rest of your life sifting through the babble.

Posted by: averros at February 6, 2008 04:24 AM


The history of submarine cables is littered with breaks out of the range of anchors, usually attributed to geologic phenomena (what do you call those really big mud flows in the Gulf of Mexico?). All of these breaks are around a geologically active area, the rift that runs through Israel and down to Ethiopia. The Internet traffic flows around the breaks, albeit more slowly, so consipirators would have to be naive, well-financed, and capable of executing over a large area. Can you hear the odds hitting the floor?

Posted by: Geoff at February 6, 2008 06:22 AM


http://www.tfhp.org/images/tinfoil-hat.jpg

Why doesn't everyone wait to see what comes of the reasons why they were cut after the repair teams have been out?

Posted by: Mike at February 6, 2008 06:42 AM


@averros

Good theory; if it is a set of deliberate cuts, this is one likely explanation.

Maybe they are using these cuts to track down terrorists. They are known to use the internet as a significant means of communication within their groups.

Posted by: RC at February 6, 2008 06:57 AM


@sortkatt - I've knon about at least two ways to tap fibre since the mid 80's. It wasn't common knowledge but not a tightly bottled secret either.

About the coincidence. In WWII during the battle of the Atlantic the Brits wanted to go after the refuelling U-boats. There were 5 as I recall. They decided to take out 2 using intel from their Nava enigma intercepts. A US warship stumbled on a third and sank it. The Germans almost changed their codes as a result.

Of course if it is just power, that makes a whole lot more sense.

Posted by: Anonymous at February 6, 2008 07:11 AM


It could be Jihadis trying to disrupt NSA's ability to monitor traffic.

Though the cables can be repaired at sea, it all depends on the kind of damage. If done professionally the damage could be fatal needing a new "system".

As currently most internet traffic is routed "through" US, ripping up cables will potentially give the cable operators the chance of "new routing" away from US.
@josh - don't blame pentagon whenever you wet your pants.

Posted by: sooth_sayer at February 6, 2008 07:21 AM


A blogger in the financial industry speculated that the submarine cable outages could be a shot across the bow from 'the powers that be'; that moving away from using the dollar as a market standard carries some risk; the information needed to run those markets traverses submarine cable and guess who owns a navy able to interdict that information?

Shrug. Seems like a rather clumsy way to send a message; an intelligent operator already knows this.

Sometimes things just happen. The likely explanation seems to be this is not enemy action but a maintenance issue.

Posted by: Brian at February 6, 2008 07:39 AM


Even if these were accidental, which I highly doubt, I think Averros is right on the money. This is a prime opportunity to introduce a packet vaccuum cleaner on every cable that needs repair. The other alternative is to force people to go to satellite, which can have it's own illicit surveillance charms.

Incidentally, the US Army is currently heavily involved in "helping" Afghanistan to build it's own Internet architecture. I know someone who's directly involved.

Posted by: Trichinosis USA at February 6, 2008 08:21 AM


Its actually our new business plan.

1. Cut undersea Internet cables
2. ???
3. Profit!

Posted by: Abdul Abdullah Akbar Usuq M'diq at February 6, 2008 08:49 AM


Can someone confirm these cable cuts independently, please?

one off of Marseille, France
two off of Alexandria, Egypt
one off of Dubai, in the Persian Gulf
one off of Bandar Abbas, Iran in the Persian Gulf
one between Qatar and the UAE, in the Persian Gulf
one in the Suez, Egypt
one near Penang, Malaysia
initially unreported cable cut on 23 January 2008 (Persian Gulf?)

Posted by: The Peach at February 6, 2008 09:09 AM


Marseille: no dice (hint - it's the other end of the cable from Alexandria).
"Suez" - probably same as the two off Alexandria.

"off Bandar Abbas"; functionally equivalent to off Dubai.

Posted by: Alex at February 6, 2008 09:14 AM


Sortkatt,

There have been fibre-optic "sniffers" available for over 10 years. They rely on the fact that you can lose a reasonable percentage of the photons in any bit without corrupting the signal, and chop part-way through the cable to take a feed.

OK, I've never seen one big enough (or waterproof) enough to chop an under-sea cable, but I've never had an application for such a thing :-)

Posted by: Mark Harrison at February 6, 2008 09:19 AM


Averros paints a very interesting scenario, and I don't want to say he or she is wrong, but just point out a couple of things.

The submarine environment is pretty unforgiving, so installing a 'data vacuum cleaner' underwater is tough - even with the USS Jimmy Carter. You have two problems (a) how do you power your vacuum cleaner and (b) how do you get data off it?

The cable systems in question are not owned by US companies. FLAG is ultimately owned by Reliance (Indian), and SEA-ME-WE 4 is owned by a consortium. FALCON is owned by Reliance as well. This make covert operations much more difficult. Obviously there's more detail behind this, but I don't want to clutter up Bruce's blog.

Multiple cable failures are not that unusual. FLAG and SEA-ME-WE 3 were both cut by an earthquake off Algeria. The Taiwan earthquake cut many cables in the sea off Taiwan. Large companies who use and rely on submarine cables tend to specify multiple paths taking geographic dissimilar routes (where possible) - for example, using one of FLAG, SEA-ME-WE3 or SEA-ME-WE4 and specifying the use of SAT3/SAFE as backup (and taking the hit on latency). Alternatively, one can use satellite backup.

The place to install a 'data vacuum cleaner' is at the cable landing station. There you have power and a convenient data network to send the 'interesting' filtered data off to a government facility.

Cassie

Posted by: Cassandra at February 6, 2008 09:23 AM


Connecting The Many Undersea
Cut Cable Dots - 9 Or More?

http://www.rense.com/general80/cable.htm

This is quite an interesting comment. It claims there may be as many a nine cables down now.

Posted by: manotick at February 6, 2008 09:31 AM


Iran is NOT offline.

One router in Iran -- the one that happens to be used by Internet Traffic Report -- is unreachable. As are dozens of single points on the internet in many states in the region.

A quick perusal of, e.g., newspaper web sites in Iran finds every one I have tried working fine, including all state-run media:

http://www.onlinenewspapers.com/iran.htm

As is the web site of the Government of Iran:

http://www.iran.ir

...and numerous other government and press web sites physically located in Iran. See for yourself:

http://www.google.com/search?q=site:.ir

(And yes, I am aware that simply ending in .ir does not mean the site is necessarily physically in Iran, but you can easily verify via ARIN that nearly all of them are.)

So the premise that Iran is "offline" and its implication are inaccurate.

Posted by: Dave Schroeder at February 6, 2008 09:32 AM


I was talking about this with a friend last week. We decided that sharks were finding optical cables to be a light snack.

Posted by: Josh at February 6, 2008 09:33 AM


I blame global warming...

Posted by: kryptomaniac at February 6, 2008 09:36 AM


NESSIE? The infamous Lock Ness....unleashed is anger overseas....

Posted by: Jonnhy at February 6, 2008 09:42 AM


"Once is a freak occurence. Twice is a coincidence. Three times is enemy action." We're on five at the moment.

Posted by: Sue at February 6, 2008 09:47 AM


It must be global cooling. The cables are shrinking and snap off...

Posted by: Herman at February 6, 2008 09:48 AM


It could be that someone does not want the world to know what's going on in those areas for awhile. The information coming out of those areas has stopped also. US invasion of Iran, maybe.

Posted by: TooDopey at February 6, 2008 09:49 AM


Earlier last month there was an article about how terrorists were more effective at using the internet for propaganda then the US was. Perhaps some think tank decided that it would be best to prevent them from using the internet in an effort to level the playing field.

Posted by: waldo at February 6, 2008 09:53 AM


I, for one, welcome our new cable cutting overlords!

Posted by: Vivevtvivas at February 6, 2008 09:56 AM


A quick perusal of, e.g., newspaper web sites in Iran finds every one I have tried working fine, including all state-run media:

Those are all faked by the CIA and cops man, pretty soon George Bush will be flying airplanes into buildings and causing natural disasters again...

Posted by: chong at February 6, 2008 09:58 AM


Seriously people. Try and be a little bit rational and use common sense. Cutting an undersea cable would most likely not 'harm' a government due to redundant connections, such as through satellite. In addition, the internet is only one way of sending and receiving information. Also, why tap an undersea cable when it would be hundreds of times easier and less expensive to intercept information on the other side of the ocean.

An imminent invasion of Iran? Not likely. I and the 'bad guys' know that large scale secret invasions are a thing of the past. For that, we can thank cnn, foxnews, etc.

Posted by: Conspiracy theorist need a dose of reality at February 6, 2008 09:59 AM


"Once is happenstance, twice is coincidence, three times is enemy action." -- Ian Fleming

Five times? Prelude to war.
Perhaps as little going-away present from our Fearless Leader? I don't believe in coincidence...

Posted by: Elvis Gump at February 6, 2008 10:00 AM


The fifth cut in Bruce's update is near Penang. That's only about six thousand miles from the other cuts, and has NO

repeat, NO

connectivity to Iran.

All you "OMFG teh Iranz is kick the plug out!!!" guys might want to change your theories a bit- are we adding Vietnam to the Axis of Evil?

Posted by: tekel at February 6, 2008 10:02 AM


Why hasn't anyone linked them to the recent tsunamis going on for those zones ?

http://tsunami.name/

Posted by: Daniel Garcia at February 6, 2008 10:03 AM


As previously said, Iran is not offline and it is irresponsible fear mongering to state it.

The only 'group' that would see an advantage from this would be Middle east groups that want to be isolated. Nothing scares people who make a living off superstition woo-hoo than open information.

We, westerners, are looking at this as "they are being cut off from us, which one of us could it be?" When it could also be looked at as "we are being cut off from them".

Posted by: Geekoid at February 6, 2008 10:04 AM


You would have to compare the usual number of cables needing maintenance to the current state to reach a meaning full conclusion.

Posted by: gangslang at February 6, 2008 10:04 AM


cui bono? who benefits?

1) anti-globalization groups? if the recently-outsourced call center is down half the time, business might re-think outsourcing...
2) military operations? i doubt it. it isn't politically likely for the US to start a new war, and even if they did, no sane military relies on the internet.
3) competing telecom businesses? are satellite or land-based cable owners raising prices right now?
4) nessie? i agree that the loch ness monster is the most likely source. grainy photos are one thing, but digital surveillance could end the mystique this monster thrives upon.

bruce, your spam filter is a piece of junk, by the way.

Posted by: Nick at February 6, 2008 10:07 AM


Considering the locations, traffic from the EM-ME is now flowing west to east to reroute around the breaks.

This means traffic going from the ME to to points west needs to pass through the US and thru the NSA's Narus STA's (semantic traffic analyzers).

I love global security conspiracy theories as much as the next guy. Maybe, if it were cut intentionally, it was a specific, targeted intelligence operation, and they expect to be finished by the time proper traffic flow is restored.

Posted by: Topher at February 6, 2008 10:10 AM


I agree that we should be careful about excessive paranoia, and it does seem easier to tap cables at the ends rather than mid-ocean. But then this comment:

>The cable systems in question are not owned by US companies...This make covert > operations much more difficult.

Assuming it's the NSA doing the tapping, I think instead of "difficult" it should have said "necessary".

Posted by: Quercus at February 6, 2008 10:10 AM


Ahh, but they don't need to physically tap the cables, just break them so traffic goes in a more.. ahem... "orderly" direction.

Posted by: Topher at February 6, 2008 10:14 AM


Feb 8th is the next new moon - the optimal time to conduct a stealth attack...

i don't take credit for that observation - i saw it mentioned in a comment on this story on news.ycombinator.com

sean

Posted by: Sean Tierney at February 6, 2008 10:15 AM


What if they are all related to undersea geological activity and a massive earthquake is looming?

Posted by: Jason at February 6, 2008 10:16 AM


Someone is headed to war. This is about a s good declaration as it gets these days.

Posted by: Moz at February 6, 2008 10:20 AM


You're all missing the best crackpot theory.

Atlantians have started a major subsurface construction project and the cables happen to lay in areas of expansion. They probably didn't even notice as then bulldozed the cables for the new luxury housing and commercial development.

This is probably as likely as some of the other theories suggested.

Posted by: Markitect at February 6, 2008 10:21 AM


Averros is onto something, but I would venture it's easily as likely US or UN taps were already in place somewhere along these particular cables, and that they were cut deliberately to cease all intercepted communique.

They are far too Mid-east specific, and too well timed (not simultaneous, more like tactfully uncoordinated) to be coincidence IMHO, but I'm no conspiracy nutter... although it *IS* interesting that this comes just moments before an online live webcast of Brittany Does Dubai was to begin... which I find also to be more than simply coincidence.

Posted by: Nutter at February 6, 2008 10:22 AM


This advertising for Cloverfield has gotten out of hand...

Posted by: Dan at February 6, 2008 10:22 AM


This is my favorite wired article:
http://www.wired.com/wired/archive/4.12/ffglass.html

Yes. 56 pages about undersea cables. That's about what it occupied in the dead tree edition as well. With lots of exquisite photos.

One segment is:
>When a trawler snags a cable, it will pull it up off the seafloor. How far it gets pulled depends on the weight of the cable, the amount of slack, and the size and horsepower of the ship. Even if the cable is not pulled all the way to the surface, it may get kinked - its minimum bending radius may be violated. If the trawler does succeed in hauling the cable all the way up out of the water, the only way out of the situation, or at least the simplest, is to cut the cable. Dave Handley once did a study of a cable that had been suddenly and mysteriously severed. Hauling up the cut end, he discovered that someone had sliced through it with a cutting torch.


>There is also the obvious threat of sabotage by a hostile government, but, surprisingly, this almost never happens. When cypherpunk Doug Barnes was researching his Caribbean project, he spent some time looking into this, because it was exactly the kind of threat he was worried about in the case of a data haven. Somewhat to his own surprise and relief, he concluded that it simply wasn't going to happen. "Cutting a submarine cable," Barnes says, "is like starting a nuclear war. It's easy to do, the results are devastating, and as soon as one country does it, all of the others will retaliate.

Posted by: Peter at February 6, 2008 10:23 AM


As several people here have pointed out, Iran is not disconnected from the Internet. Users in Iran have been able to connect to the internet without any atypical problem... this rumor has been swirling about for a few days. I manage a Persian-language website with many readers in Iran, so I have both the motivation and the resources to check into this... we've seen no decrease in traffic from within Iran. I've also been able to find no source for this that doesn't trace back to the Internet Traffic Report, which as other has pointed out does not provide enough data to conclusively state anything other than some particular servers in Iran are down.

Posted by: Eliza at February 6, 2008 10:24 AM


I blame it on the New World Order. Bush and his minions are setting the final wheels in motion...

Posted by: A Name at February 6, 2008 10:32 AM


I see people arguing over the phrase "Iran offline". What does the phrase "Iran offline" mean - I expect there may be different interpretations.

First, .ir Internet domains vs. physical geography in that country may not be 1-1.

Second, some might think that the phrase means every single Internet connection in the region/country is not connected to the outside world, others may interpret the phrase to mean just a significant fraction.

To add one data point, taking a traceroute to iran.ir produces a series of IP addresses that go through Turkey, specifically Bursa and Istanbul accoring to te obviously innacurate ip2location.com site.


All the best.

Posted by: Tsarin at February 6, 2008 10:35 AM


Some decent analysis among the posters. My own guess is that it psyops against Iran. The Iranian people have been less than thrilled with their government lately, if they felt the government cut access to the world it would only turn up the heat.

If this is US action it is designed to promote an internal revolution. Probably not the only thing but one factor.

Posted by: rjschwarz at February 6, 2008 10:36 AM


This also seems like the kind of thing that might happen as a giant radioactive lizard moved around looking for a city to attack. That's probably not it of course, I'm just saying if a few fishing boats start to come up missing...

Posted by: rjschwarz at February 6, 2008 10:38 AM


Folks it's soooo OBVIOUSLY the after effects of 2007 TU24.

http://www.badastronomy.com/bablog/2008/01/29/2007-tu24-told-ya-so/

(Snicker ...)

Posted by: anonymous at February 6, 2008 10:39 AM


Ah confess. Uncle Jed said Ah couldn't use the cee-ment pond fer tryin' out mah new double-nought spy de-vices, 'specially that new underwater sled Ah made from a dozen weed-whackers.

Posted by: Jethro Bodine at February 6, 2008 10:41 AM


After much discussion, several of us have concluded that it's either bored dolphins or angry whales...

Posted by: Brian Knoblauch at February 6, 2008 10:43 AM


What about the TIME the cables were cut? Two were cut with military-like precision, 0800h and 0559h if memory serves. There are reports of them being cut with torches!

Let's suppose it wasn't a human attack. The two theories are anchors and earthquakes/plate movement. Was that the most perfectly timed series of earthquakes ever? Do ships drop anchor timed precisely so they reach sea bottom and snap cables within seconds of the hour?

5 cables, within days of each other, on the hour marks, and we think it could be a natural event or anchor coincidence? Great Occam's razor!

Posted by: sunshinex at February 6, 2008 10:46 AM


If something bad happens...

... once it is bad luck.

... twice it is coincidence.

... three times is enemy action.

Posted by: bob at February 6, 2008 10:46 AM


Mr. Schneier, as a respected individual who stands against FUD and the spread of fear mongering, I urge you to revise your original post: Iran is not offline.

Posted by: thomas lackner at February 6, 2008 10:46 AM


Okay, here's a thought that could support the "war on terror" theory...

We know that the "enemy" is internet savvy and uses anonomizing tech to obscure their tracks and make themselves harder to find. Cutting the cables reduces the number of paths available for packets to connect the middle east to the rest of the world, thus creating a more linear connection path that is easier to back track. Also, by forcing traffic through fewer and fewer routers, the chances that it will pass through a friendly (aka tapped) router increase dramatically.

By severing all of the west bound data pipes from the Middle East, isn't westbound data then forced eastbound through friendly countries like Japan, Australia and ultimately the US?

Food for conspiracy oriented thought...

Posted by: Anonymous Coward at February 6, 2008 10:48 AM


Forgot to mention - re: tapping the cables. Perhaps they ARE being tapped. I'd go after the routers personally, but.. The cuts may be done as a diversion. As others have mentioned, when tapping (by bending) fibre, there is signal loss which may be noticed. Cutting them in a different location at the same time as tapping them provides an excellent explanation for any post-tapping signal loss. The repair process likely reduces signal strength, and would hide the degradation caused by bending/tapping.

Posted by: sunshinex at February 6, 2008 10:51 AM


There's an easy solution to all of this: shareware trial period for some piece of software in the submarine tapping pods ran out. Or it's 2^32-1 milliseconds since the last maintenance of these things. Some sub is probably scrambling out to reboot...

Posted by: Anonymous at February 6, 2008 10:52 AM


Holy crap, Florida is down, too!

http://www.internettrafficreport.com/namerica.htm

 
 
 

Well, it isn't. Just one small router is down, that happens to be used by internettrafficreport.com. Same is true for iran.

Posted by: heinzkunz at February 6, 2008 10:54 AM


Could someone please post the "Three times is enemy action" thing again? But this time, get it right and cite Ian Fleming.

I had three people clsoe to me die within weeks of each otehr a few months ago. Enemy action, I have to assume.

Posted by: yurp at February 6, 2008 10:55 AM


I was told by a reliable source that Cpt Nemo is cutting the lines around the world. In his Nautilus Sub, he plans on cutting all the lines around the world and then sinking all ships he finds. Then he plans to retire in his offshore mansion at 20,000 leagues under the sea.

Posted by: Cpt Nemo at February 6, 2008 10:56 AM


I don't want to alarm anyone, but I think the giant squid are trying to hack net access for themselves...

Posted by: Chelloveck at February 6, 2008 10:58 AM


I think the issue can be cleared up to a high degree of probability by simple analysis. Let's start with what it is not:

1. US cyber attack against Iran: 5 cables is by far not enough. Iran is going to be back online (maybe with slightly higher latency) within days. With regard to actual US capabilities a real attack would have been much more devastating.

2. Geological phenomena: There haven't been any reports by geologists or other scientists recently about increased activity within the affected areas. So 5 cuts within this short time frame are hardly explainable.

3. Installments of eavesdropping equipment: If you need to cut a cable at all to install your devices you don't do this on 5 cables within such a short time frame. Too much noise.

So what's likely?

1. Think about entities responsible for researching cyber attacks from a viewpoint of national security. Their main endeavors are mapping and monitoring global infrastructure and simulating possible scenarios. As with every simulation (e.g. development of nuclear warheads) you need real world data to make your simulation behave like the real world would do.

These entities do likely own warehouses full of real world netflow data, but only for more or less regular operation of the global network. To be really sure, that their virtual attack scenarios can be trusted, they need real world feedback for their own "interactions" with those networks. Now think about the interesting load of data you can collect when cutting undersea cables: number of nodes immediately offline, congestion on alternative routes, average response times of responsible institutions, measures taken by those institutions, unexpected backlash, general short, mid, and long term effects, on and on... Endless highly interesting parameters.

You don't need to be a conspiracy theorist to see that this would make a LOT of sense.

2. All was plain coincidence. Stuff like this happens. Just remember, every week people win the lottery against all odds.

Posted by: Uebber at February 6, 2008 11:01 AM


I think the issue can be cleared up to a high degree of probability by simple analysis. Let's start with what it is not:

1. US cyber attack against Iran: 5 cables is by far not enough. Iran is going to be back online (maybe with slightly higher latency) within days. With regard to actual US capabilities a real attack would have been much more devastating.

2. Geological phenomena: There haven't been any reports by geologists or other scientists recently about increased activity within the affected areas. So 5 cuts within this short time frame are hardly explainable.

3. Installments of eavesdropping equipment: If you need to cut a cable at all to install your devices you don't do this on 5 cables within such a short time frame. Too much noise.

So what's likely?

1. Think about entities responsible for researching cyber attacks from a viewpoint of national security. Their main endeavors are mapping and monitoring global infrastructure and simulating possible scenarios. As with every simulation (e.g. development of nuclear warheads) you need real world data to make your simulation behave like the real world would do.

These entities do likely own warehouses full of real world netflow data, but only for more or less regular operation of the global network. To be really sure, that their virtual attack scenarios can be trusted, they need real world feedback for their own "interactions" with those networks. Now think about the interesting load of data you can collect when cutting undersea cables: number of nodes immediately offline, congestion on alternative routes, average response times of responsible institutions, measures taken by those institutions, unexpected backlash, general short, mid, and long term effects, on and on... Endless highly interesting parameters.

You don't need to be a conspiracy theorist to see that this would make a LOT of sense.

2. All was plain coincidence. Stuff like this happens. Just remember, every week people win the lottery against all odds.

Posted by: Uebber at February 6, 2008 11:03 AM


The issue is that some of the countries affected are allies of the USA and others aren't but we should of seen this happening a while ago and taken measures to fix it!

Posted by: Movado at February 6, 2008 11:06 AM


Folks,

Keep your panties on. War is not coming, at least not any war with Iran. All of these submarine cables lost connectivity the same day they upgraded to Vista. Coincidence? I think not!

Posted by: tux at February 6, 2008 11:09 AM


BUT...

Either way, for geeks this is all terribly exciting.
- How are they fixed?
- How were they broken in the first place?
- Are they "cut," "Broken," or just "sick?"
- If they are cut, who investigates, and how?
- And, as a previous poster said "cui bono?"

My bet's on Murphy, because that dude ALWAYS comes through, but this is the most fun news I've seen in a while...

OR IBM - they want to host the Internet on one system these days...

Posted by: Echo4Mike at February 6, 2008 11:11 AM


It seems plausible to me that Iran is doing this, since the internet is a source of evil and western influence in the middle east.

In any case, it seems too much of a coincidence to be random.

Posted by: IC at February 6, 2008 11:12 AM


I bet Iran themselves cut the cables. Those nutjobs tend to view the Internet as the devil's playground, and they just happen to own 3 of the world's quietest submarines, the Russian-built Kilo-class diesel boats...so they find the cables, send out some frogmen/divers and cut the cables...win/win situation for them, because they're cut off from the internet, AND they can blame the USA for it.

.H*P*D.

"When in doubt, I whip it out!"

Posted by: .HighPingDrifter. at February 6, 2008 11:14 AM


Step 1. Cut cable in location A.
Step 2. Splice "Carnivore" packet spy into down line at location B.
Step 3. Wait for cable to be fixed in location A
Step 4. Intercept all traffic over cable.
Step 5. ????
Step 6. Profit!

Posted by: Carnivore at February 6, 2008 11:18 AM


Once is excusable.
Twice is coincidence.
Thrice is Hostile Action.

I love my country.
I fear my government.

Posted by: Glo at February 6, 2008 11:19 AM


@Glo, thanks for answering my call!

That has been posted five times now. Enemy action.

Posted by: yurp at February 6, 2008 11:21 AM


Wow, shame on Bruce for falling victim to the hysteria. I trust a clarification ("Iran is not offline, sorry for overreacting") will be forthcoming.

Posted by: Fearmonger at February 6, 2008 11:24 AM


Never attribute to malice that which you can attribute to incompetence (or coincidence).

Posted by: Chip at February 6, 2008 11:24 AM


Um, does nobody read H.P. Lovecraft any more? It's CLEARLY the work of Deep Ones, in the service of Great Cthulhu.

It couldn't be Nessie, you see, because she is a freshwater beastie.

Posted by: Huw Bowen at February 6, 2008 11:25 AM


My guess is it's either Israel or some sort of Islamic Fundamentalists.

Israel doesn't seem to be effected by these at all. Coincidence? I think not?

Islamic Fundamentalists could be trying to stop the freedom of information. If you limit these countries from taking part in the international economy (call centers, e-commerce, etc...), then you will limit the number of McDonalds and StarBucks opening up there.

Posted by: LaBarge at February 6, 2008 11:27 AM


Uebber said: "All was plain coincidence. Stuff like this happens. Just remember, every week people win the lottery against all odds."

That argument is a fallacy. The odds for any one individual of winning the lottery are very slim indeed, but the odds of *somebody* winning the lottery are fairly good, given the number of people who take their chances every week.

Posted by: Guillaume Castel at February 6, 2008 11:34 AM


Google? M$?

Posted by: syLANtkiller at February 6, 2008 11:40 AM


Actually, this is the latest leftist obsession.

Voting machines are no fun anymore.

Gotta "move on" to something else!

Posted by: Albert at February 6, 2008 11:42 AM


Has anyone checked to see if SKYNET is self-aware yet? Or maybe the Forbin project just went online.

Posted by: Anonymous at February 6, 2008 11:44 AM


its not western, its Iran. put this together... a nuclear weapons program, atmospheric launch vehicles (space rockets, ICBM's) launch, then communications are disrupted to the middle east... Iran is gearing up to start (or escalate) a war and is trying to prevent any means of warning reaching outside its borders... my 2 cent conspiracy theory anyway.

Posted by: darthbert at February 6, 2008 11:45 AM



I guess:

Each cable have two cuts. One near the coast (reported) and another deeper. While cable operators are fixing the first one (the only one they know) someone is putting a sniffier in between second cut.

Posted by: Javier at February 6, 2008 11:47 AM


ah, crap! i posted before i saw the cthulu response! THATS what i meant to say! >:)

Posted by: darthbert at February 6, 2008 11:49 AM


I say it is some Linux fanatic.

Posted by: Steve Ballmer at February 6, 2008 11:51 AM


Randomness

Posted by: Drew Condon at February 6, 2008 11:51 AM


Just a small note to people arguing that there is no benefit to the West in cutting off Iran prior to attacking it. Though I do not know whether Iran has really lost connectivity or not, I would like to point out that part of what made Israel's relatively recent war on Lebanon unpopular was the ability for people in Lebanon to communicate with people out of country and send messages and images showing the damage done to civilian infrastructure and homes.
It is not difficult to imagine in my opinion any attack on Iran taking the form of a bombing campaign. Bombing campaigns cause collateral damage which a country being attacked wants to present as proof of the other side being "unjust". The internet gives everyone the ability to reach a large audience. In this hypothetical scenario Iranians would send pictures and videos of the damage to and death of civilians in order to argue their own position.

Posted by: Zephyros at February 6, 2008 11:56 AM


@Peter: There's no way in hell this is accidental

I agree that this /can't/ be a coincidence. Let's try to put some numbers to our gut feelings:

Consider how long we usually go with no, or occasionally one, cable loss. Some time, no? Using that as a baseline, calculate the probability of a cable outage: as a SWAG, take 1/year, say 1/52 = roughly 0.02 per week. (Yes, this assumption is hopelessly naive. See @Cassandra's comments on multiple failures.)

Taking the absolutely simplest instance (discrete values each observation, as in flipping a coin), the odds of this within one week are 0.02**5 ~= 3e-9, or three in a billion.

I'd be delighted if someone would use a better model and a better calculation, but I bet this is within a couple of orders of magnitude of the best answer. Heck, give it three orders of magnitude; you still end up with one chance in 300,000.

Good enough for me: someone's up to something. As to what their point is....?

Posted by: Terry Cloth at February 6, 2008 12:03 PM


I blame either earthquakes, *by* the pentagon...

Posted by: Tatonca at February 6, 2008 12:05 PM


@Carnivore:

On the cut once, splice twice theory: I don't know about fiber, but with metal conductors you can ``ping'' the end of the cable. That's how they figure where to go to do the repairs. In fact, I bet fiber cables include a few copper conductors for exactly that reason.

Thus, if their pings from both ends give numbers != total length of cable, you'll find someone mucking about at one of the breaks. Unless, of course, the attackers cut in two places, then install the tap between these two cuts, in the disconnected portion, which is invisible until one of the (visible to repair crews) cuts is spliced.

Posted by: Terry Cloth at February 6, 2008 12:11 PM


If the U.S. wanted to severe internet access to a country, it doesn't need to touch the cables. Simply knocking down the power grid would be enough...which they did to Iraq almost immediately during the first Gulf War with a series of calculated air strikes. All communications become problematical without power.

I'm more inclined to think either espionage or terrorism.

Posted by: Fritz at February 6, 2008 12:19 PM


HAL9000 has decided you don't need any internet.

Posted by: Bubba at February 6, 2008 12:22 PM


Sounds like your normal run-of-the-mill cable service to me. I'm surprised there's any uptime at all.

Posted by: old guy at February 6, 2008 12:23 PM


Did you notice how new reports started coming out after the first two? How often are such defects? Almost no-one knows and it's not reported. It reminded me of the anecdote that airplane accidents happen in clusters: once there is one big accident media focuses and reports on front page even minor ones

Posted by: Andy at February 6, 2008 12:27 PM


@Terry Cloth

Yes, it it called optical time domain reflectometry - doesn't need copper. Do an Internet search on OTDR.

Cassie

Posted by: Cassandra at February 6, 2008 12:37 PM


From http://abcnews.go.com/Technology/story?id=4244474&page=1

Undersea cable damage is hardly rare--indeed, more than 50 repair operations were mounted in the Atlantic alone last year, according to marine cable repair company Global Marine Systems. But last week's breaks came at one of the world's bottlenecks, where Net traffic for whole regions is funneled along a single route.

This kind of damage is rarely such a deep concern in the United States and Europe. The Atlantic and Pacific Oceans are crisscrossed so completely with fast fiber networks that a break in one area typically has no significant effect. Net traffic simply uses one of many possible alternate destinations to reach its goal.

So it's bottleneck in Middle East! The increased traffic of recent years causes such a defect to be noticeable.

Posted by: Andy at February 6, 2008 12:42 PM


If the US wanted to severe internet access cutting the cables is a better option than taking out the power grid.

You take out the power grid then you have to rebuild it. Which costs more money than splicing a few undersea cables.

Posted by: Peter at February 6, 2008 12:47 PM


Terry: you can ping fiber, too. A good part of the laser pulse will reflect back from the break. But if cuts are supposed to be a cover for installing taps, they'd cut once, wait until the location was pnged and the repair scheduled, then splice into the line elsewhere while it's inactive waiting for the repair.

However, how hard is it to locate cables on the sea bottom? I'd think that you'd usually be looking for each one for days, so taking out 5 (or was it 4 or just 3 that actually affect Iran?) in such a short time would probably involve several submarines in an operation that would be hard to keep secret - but there may be tricks that I haven't heard of. A geological disturbance would be more likely to break multiple cables in the same area in a short time. OTOH, usually geological disturbances show up in other ways, and I haven't heard of anything like that.

Posted by: Anonymous at February 6, 2008 12:51 PM


Iran is NOT offline. Ping or traceroute 217.218.174.198 which is a bank located in IRAN. It is not offline.

Posted by: hydertech at February 6, 2008 12:56 PM


Ding..conspiracy time.
As pointed out earlier, the West has little incentive to cut the cables. My crackpot theory is that agents from Iran are about to unleash a devastating computer virus on the world and the blackout is designed to keep their systems from getting infected.

Posted by: Anonymous at February 6, 2008 01:07 PM


@Carnivore

"Step 1. Cut cable in location A.
Step 2. Splice "Carnivore" packet spy into down line at location B.
Step 3. Wait for cable to be fixed in location A"

You apparently are not very smart. When a cable is cut how do you think they know where the cut is? Using some sort of OTDM...so if it is cut again they would know it almost right away and could go fix it there too. If the cable was cut in two places, the middle cable could be hacked into then -- but I think if it was cut in two places at one time then the owner of the cable would want to look at the middle segment to see if such shenanigans are indeed going on.

Posted by: Savik at February 6, 2008 01:13 PM


@hydertech - careful with all of Bruce's readers you might be calling for a DDoS!

Posted by: Snickers at February 6, 2008 01:25 PM


OK, actually reading the reports shows the cable problems were spread over two weeks, and one of them may be due to power problems rather than a break. My ``analysis'' now is:

1/26 = 0.038/two weeks
0.038**4 = 2.2e-6 = roughly two in a million.
Using the same 3 orders of magnitude slop factor, it still leaves us with one chance in 500.

Maybe it /is/ coincidence, but you'll need to give me more info before I sign on for that.

Posted by: Terry Cloth at February 6, 2008 01:26 PM


Where are the facts? Cables don't just go down for no reason. Why are important conduits going down while we are being told nothing but speculation about why they are going down? What does it take to find exactly where the broken cables are broken and do reasonable forensics? What is being done to insure a much higher degree of dependable network connectivity? It is really troublesome to me that the "global brain" can have these sorts of "strokes" and everyone seems to be just saying "well I'll be darned". Surely we can do better and should demand much better news coverage and explanations of anomalous events.

Posted by: Samantha Atkins at February 6, 2008 01:27 PM


@HPD --

Please don't confuse the Iranian people with Ahmadinejad. The average Iranian that would be capable of or think about something like this also likes the Internet and the ability to access information from overseas.

And as noted, Iran's still online, and not only that, they can still ping us. So if it's an attempt to turn off the lights by either party, the operation was pretty bungled.

So let's all just go back to hacking Counterstrike servers, or whatever it is conspiracy theorists do when there's nothing unusual going on.

Posted by: JS at February 6, 2008 01:27 PM


Thoughts...

1. Submarine recon of cable locations would be done well in advance. Secrecy of such an operation is beyond trivial, it is the rule. If the US wants to know where the cables are, it knows, with great accuracy and precision.


2. cut once/ splic twice: relatively lossless taps could be placed without leaving signficant OTDR signatures; the cut would assure that any signal analysis of the system would be sufficiently muddied to cover the tap emplacement.

3. Any operation that does not violate the laws of physics is simply an engineering problem and can be $olved with the application of money. Lots of money, the amount available to a nation-state like the US, can buy/build LOTS of capability.

4. It is unlikely that 5 (or whatever) taps are being emplaced at once, as even the US would be hard pressed to pull off a stunt like that. This suggests that some breaks are either normal or distractions

4a. However, JIMMY CARTER is NOT the only US sub capable of the kind of operation imagined here.

5. Perhaps the "tap" is not merely a listening station but a man-in-the-middle.

6. Perhaps the purpose of all this is not to tap anything but to shunt traffic to systems that are already tapped.

7. To call this sort of speculation as mere conspiracy theory is to ignore documented US and Soviet Naval history.

Posted by: emergency blow at February 6, 2008 01:28 PM


Assume there's a conspiracy unless proven otherwise.

Seriously. It's a great rule of thumb for our modern world. And I think it applies very well in this particular case.

Posted by: Dan Van Riper at February 6, 2008 01:28 PM


Another conspiracy theory for the brew. A lot of factions in the area are very unhappy about cultural contamination. If they are savvy enough to see the internet as the main conduit and essential to Western valuse and interest expansion then it may be seen as in their interest to sabotage it.

Posted by: St. Joan at February 6, 2008 01:34 PM


I blame Al Gore. He invented the damn thing, after all.

Posted by: Glenn at February 6, 2008 02:00 PM


Imminent attack? Not likely, you don't telegraph your move like this. And as mentioned earlier, it would be simpler to hit the communication centers as the first phase of the attack.

Espionage? Not likely the US knows that if you want to get good information you don't let anyone know you did it. Considering the US was able to successfully able to tap Soviet Navy underwater cables, my guess is they could tap these cables without this much interruption. Lastly if you are using the internet to transfer any sensitive data you can't protect, you kinda were asking for it. Remember you should assume any data on the internet is being viewed by others. It's also naive to believe that the US needs data to come through the US to tap it.

Posted by: RAK at February 6, 2008 02:04 PM


"Pentagon: The internet needs to be dealt with as if it were an enemy "weapons system"."
by Brent Jessop
Global Research, February 2, 2008
(http://www.globalresearch.ca/index.php?context=viewArticle&code=JES20080202&articleId=7980)

Pentagon: "The Pentagon's Information Operations Roadmap is blunt about the fact that an internet, with the potential for free speech, is in direct opposition to their goals. The internet needs to be dealt with as if it were an enemy "weapons system"."

Posted by: emsaidso at February 6, 2008 02:18 PM


Interesting time for all this. A perfect storm of why? Good to hide under. Order has no priority.
1. Government, USA, wants to monitor the internet more.
2. Extortion attempts with computers and electrical power. Why not cables?
3. New fact not seen here: USS San Jacinto, in Haifa, Israel, for ''anti-missile' training', however sure has serious advanced *underwater* surveillance systems.
4. Iran issue seems weak, but thrown in here for whatever.
5. Got to be something else, time will tell. Copycat well, we don't have x, so lets do y, for cable cutting, tapping or ?
6. Internet and 404's and filtering has suddenly been the vogue thing in power.
7. Time sure seems ripe for stuff to go down.
8. Time to lay some pipe...fiber, with underwater features for whatever, why not?
9. World is going back to cold war creepy things going on.

Posted by: Anonymous at February 6, 2008 02:19 PM


Iran is *not* offline and the "fifth cut" happened on January 23rd.

See: http://radar.oreilly.com/archives/2008/02/many_eggs_few_b.html

Posted by: Jesse Robbinsq at February 6, 2008 02:43 PM


About conspiracy theories and the like...

Follow the money. If someone-- or even multiple someones-- were behind even *some* of these cuts, who profits the most?

Yeah, yeah, it _could_ be politics... but that'd imply that we'll eventually hear about it 'cuz the people carrying out the real work won't get paid enough to stay silent.

Posted by: Jack C Lipton at February 6, 2008 02:49 PM


Headline in Cairo newspaper: "Record rainfall; Israeli plot suspected."

Posted by: Observer at February 6, 2008 02:54 PM


Ok let's not be paranoid here people, and apply a bit of the critical thinking class everyone took in college. Five Separate locations, with one reporting power problems. A bit of detective work using the following data will lead to the most simple and likely conclusion for geological activity.

Map of affected areas:
http://www.ilovebonnie.net/cablecuts.jpg

Map of undersea cables:
http://image.guardian.co.uk/sys-images/Technology/Pix/pictures/2008/02/01/SeaCableHi.jpg

Seismic activity report for the past 30 days from the IRIS Consortium:
http://www.iris.edu/seismon/last30.html

Seismic activity report from the USGS NEIC (Shared with IRIS):
http://earthquake.usgs.gov/eqcenter/recenteqsww/

Add a little third party analysis and study from when the first effects were seen:
https://confluence.slac.stanford.edu/display/IEPM/Effects+of+Fibre+Outage+through+Mediterranean
"Bear in mind that the fact the outage did not start until around 6:00am, and re-routing traffic before the end of the day will both dilute the effect. Also the effects were not uniform on all hosts in a country."

Statement denying ship anchor involvements:
http://ukpress.google.com/article/ALeqM5hTi5wNwTD66nvWdTAQw20SaFI_GQ
"'A marine transport committee investigated the traffic of ships in the area, 12 hours before and after the malfunction, where the cables are located to figure out the possibility of being cut by a passing vessel and found out there were no passing ships at that time,' said the statement. The ministry added that the location, 5 miles from the port of Alexandria, was in a restricted area so ships would not have been allowed there to begin with."

Correlating the affected locations, dates and above analysis dates we can find the following.

For the January 30th time frame cuts, the following seismic activity was in the region on the following dates:
DATE LAT LON MAG DEPTH REGION
31-JAN-2008 00:01:23 39.97 33.27 4.8 10.0 TURKEY
29-JAN-2008 15:16:55 37.63 23.39 4.3 42.0 SOUTHERN GREECE
04-FEB-2008 22:15:41 38.13 21.95 4.9 30.8 GREECE

For the February 1st and (1st) 5th cut, the following seismic activity was in the region on the following dates:
DATE LAT LON MAG DEPTH REGION
02-FEB-2008 05:33:21 26.42 52.96 4.8 10.0 PERSIAN GULF

For the (2nd) February 5th cut, the following seismic activity was in the region on the following dates:
DATE LAT LON MAG DEPTH REGION
04-FEB-2008 08:26:54 -8.83 107.99 4.9 35.0 JAWA, INDONESIA
30-JAN-2008 11:03:20 -9.80 108.06 4.8 10.0 SOUTH OF JAWA, INDONESIA
30-JAN-2008 10:31:59 4.27 96.60 4.5 39.3 NORTHERN SUMATERA, INDONESIA
27-JAN-2008 12:48:00 -8.65 110.69 4.6 35.0 JAWA, INDONESIA
26-JAN-2008 06:08:02 1.08 97.23 4.5 35.0 NORTHERN SUMATERA, INDONESIA
24-JAN-2008 12:03:39 -3.95 101.63 5.3 35.0 SOUTHERN SUMATERA, INDONESIA
23-JAN-2008 19:23:34 -2.89 101.12 5.1 50.0 SOUTHERN SUMATERA, INDONESIA
23-JAN-2008 13:03:21 1.37 97.22 4.8 29.0 NORTHERN SUMATERA, INDONESIA


We can look at this data and conclude the simplest explanations is likely to be undersea damage associated with seismic activity. Rock slides and underwater stresses aren't limited to the specific time frame for an earth quake either. There are aftershocks, dislodged seabed and other hazards that can be triggered prior to and after an Earthquake, so it is safe to assume that when an earthquake occurs it causes problems before and after for the surrounding area and time frames.

It's also well documented that undersea earthquakes can cause land slides, generate tears and subject cable to various temperatures and stresses. This is in fact what happened in 2006 to Taiwan when an under-ocean landslide cut nine cables between Taiwan and the Philippines for 9 weeks.

So what's more plausible here, a conspiracy theory, or seismic activity that coincides very closely with the dates and regions of the affected cuts?

Posted by: Gabriel at February 6, 2008 02:57 PM


Suppose you're a government with the desire to impress (threaten, intimidate) your neighbors. If you have a submarine, this could be a way. I find it interesting that all of the mid-east cable breaks affect western-leaning oil-producing regimes. I think this would be quite effective in sending a message.

Posted by: ADifferentTheory at February 6, 2008 03:01 PM


All your cable are belong to us.

Posted by: Cardassia Prime at February 6, 2008 03:15 PM


The underlying cause might very well be Iran's attempts to get the Oil Bourse up and running this month.

http://www.cyberspaceorbit.com/ConnectingTheDots.htm

Posted by: David at February 6, 2008 03:23 PM


I dont quite know if this is correct but something that I have read a little about and its what I fear may be 'in play'.

From my limited understanding of international politics, I have developed this opinion.

The reason the cables are being cut is to isolate Iran and its data communications not for the purpose of war, but for the purpose of saving and securing the US dollar. Iran is stated to be 'opening' their internationational Oil Bourse on Feb 11, 2008. This 'may' have a drastic impact on the US dollar; I believe the primary reason the US dollar is valued as high as it is, is because ALL world wide trade in Oil is done in the US Dollar. Once the new Iranian Oil Bourse (Oil market) goes live they will be trading in Euro. Thus allowing trillions of dollars worth of oil to be 'de-coupled' from the US dollar. I believe this would send the already weak US economy into a collapse like never imagined.

I also cant say for certain, but I believe the last country to try and de-couple their Oil from the US dollar was Iraq.

Posted by: Johhny Sprocket at February 6, 2008 03:45 PM


Gabriel - nice analysis. However, my biggest question would be that why has there never been any severence before in the long history of seismic activity? And then for 5 cables to go down in the same timespan sounds a little too fishy (no pun).

Everyone else who thinks this is some targeting of/from Iran to prevent internet access - IRAN IS STILL ONLINE!

I am surprised at how little coverage this incident is getting in mainstream press in the UK (e.g. BBC, ITN, Sky) - but then maybe they don't think its a big deal. The papers tomorrow might hold a different story.

Posted by: perpetual at February 6, 2008 03:54 PM


"Once is happenstance, twice is coincidence, three times is enemy action." Auric Goldfinger in the James Bond movie "Goldfinger"

What's four and five times? Wait, isn't the fifth time where Bond was tied to a table with a laser gunning for his groin?

Or is that the wrong movie?

Posted by: b0fh at February 6, 2008 03:57 PM


It all makes sense now. A fish has chewed through the cables.

James Pond. Licence to gill.

Posted by: Perpetual at February 6, 2008 04:05 PM


The US Dollar will not collapse because of Iran shifting away from the US Dollar.

Posted by: RealMoney at February 6, 2008 04:07 PM


Hey! We've got agency staff posting. Hello Gabriel! Impressive post. The listed magnitudes normally don't cause any damage, though. There are about 30,000 of them each year, not even affecting mud huts.

Posted by: Anonymous at February 6, 2008 04:07 PM


@Nick at February 6, 2008 10:07 AM

qui bono? who benefits?

The people who already have the surveillance taps on the cables that are already left, of course.

By cutting the other cables, you force all the data to flow through the links that are left.

Posted by: TinfoilHat at February 6, 2008 04:07 PM


It is entirely reasonable to say that Iran is offline when the only readily available reliable datapoint has Iran in the red state. That is simply the state of our knowledge. When a more systematic and deeper survey of link states with respectable provenace emerges, then our state of knowledge will be different. Until then, the carping by "fearmonger" and his kin is just troll noise. If they really wanted to shed light rather than heat, they could provide better information.

It's ludicrous to claim the 5 breaks are coincidental and there are only 2 actors who have motive means and opportunity to engage in this: The US and the Israeli governments.

Taps would be powered by thermionic batteries, electrothermal generators, or tidal generators. They would offer both data access (tap and injection) and emergency flow control. They would be accompanied by radio controls and secondary cable data flow links, as well as data storage units for submarine retrieval.

Posted by: Aminorex at February 6, 2008 04:15 PM


Question:
What happens when the lines are cut?
Answer:
The data is re-routed through a different route to reach its destination per the way tcpip was designed.

That sure could come in handy if there's several pipes to a country and you have a tap on one or two of them, just break the rest of the connections that you have NOT tapped and now everything is going through the ones you DO have tapped.

The problem with a submarine is that the data it could intercept is pretty much limited to stay within that submarine, but if the traffic were forced to be re-routed through a land based tap, you could access that data remotely from anywhere.

Posted by: pfsr at February 6, 2008 04:16 PM


Having dived around Alexandria, a common site is a bunch of locals in a 10m boat throwing a grappling hook over the side over known or suspected wrecks in an attempt to snag some scrap metal and haul it up. Several times we had to abort to alternate dive sites to avoid locals who were tearing up wrecks like this. As for the egyptian military being able to contain a restricted area ... their training makes mcdonalds workers seem well trained.

Posted by: divealex at February 6, 2008 04:22 PM


Aminorex, the US and Israel are not the only 2 actors of cutting cables. Now who is fear mongering?

Posted by: RealMoney at February 6, 2008 04:31 PM


tekla:~ dezent$ ping 194.225.150.2
PING 194.225.150.2 (194.225.150.2): 56 data bytes
64 bytes from 194.225.150.2: icmp_seq=0 ttl=239 time=568.234 ms
^C
--- 194.225.150.2 ping statistics ---
52 packets transmitted, 51 packets received, 1% packet loss
round-trip min/avg/max/stddev = 562.058/567.581/582.311/2.912 ms


Seems like Iran is still online

Posted by: dezent at February 6, 2008 04:49 PM


Neither earthquakes or dragging anchors have caused the cutting of 5-9 (depending on your count) buried, undersea cables that are fairly widely disbursed. To assert this is to cling to the notion of a chain of coincidences that increase in mathematical improbibility with each new cut.

It should be obvious that virtually all of these cuts are in cables leading to Muslim countries. It should also be obvious that the U.S. and israel have been attempting to interest the rest of the world in a war against Iran, with no success. The Iranian bourse was to have come online this week, now postponed (by the cuts) till 2/19/08, this while American banks have *negative* 8.7 Billion dollars in their reserves when by law (and up until a few days ago) they are supposed to have +40 billion in reserve (curious how this story isn't in the news, eh?). The American economy isn't on the verge of melting down, it IS melting down and the Iranian bourse will make that obvious to one and all. The Bush administration solution to this problem? Nuke Iran!

The cutting of these cables is meant to limit person to person communication in the Middle East, in the hopes that "official" news about the event will suffice (thus tamping down outrage somewhat). Of course, this is asinine thinking (just what we've come to expect from these people) and not only won't this plan fail to stop the economic slide, it'll accelerate it. The images of the cynical glassing of Iran will get out, one way or another and will turn the U.S. into a pariah state unprecidented in human history. The rest of world's nations will destroy the dollar within days of the attack and the U.S. will find itself without a funtioning currency, a vaporized economy, a FEMA that will be more useless than it was in New Orleans, an oil-based transportation system that will be dry as a bone in less than a week, a military unable to help at home (Russia and China won't let a nuked Iran go without response) and the formerly fat and rich Americans will be dying of waterborne diseases within weeks. Many will try to "head for the hills" and will end up putrifying in rural gridlock, entombed in their now-fuel-less SUV's. All of the "just in time" deliveries of food and basic merchandise will be frozen, not that a dollar (or a hundred thousand of them) would buy anything at that point anyway.

Do the first really sensible thing you've ever done in your life: listen to that fear in your gut. Get your ass to Costco and load up those wholesale carts with a years worth of food for your family. Don't wait until you see everyone else trying to do it (because you're afraid of looking foolish), just do what that inner voice is telling you to do, it's the only thing that is going to give you and your loved ones a chance to survive this rapidly approaching s**tstorm.

Go. NOW, YOU IDIOT!!

Posted by: Element 5 at February 6, 2008 04:53 PM


Aminorex: The problem is that the datapoint in question does not provide adequate information to draw the conclusions that have been draw from it (namely that all internet in Iran is down). Several users on this board have provided other data-points (links to sites hosted within Iran that are active), as well as logical critique of the original report methodology, indicating that the report of internet outages in Iran are exaggerated. Pointing out that there is data indicating the message is incorrect and requesting a clarification should not be considered trolling.

Again, the Internet in Iran is not completely down as was stated in this post. Users from inside Iran have been visiting my site normally for the past week, with no noticeable interruption in service.

Posted by: Eliza at February 6, 2008 05:01 PM


Ok, the NSA is on to me, so I might as well come clean here. The reality is that some friends and I were so pissed at AOL for upping the price on our 56k modem connection that we decided to take the Internet into our own hands.

We donned our snorkel gear, dove to about 900m and tried to splice the cables with some RF transmitters.

Unfortunately, a Megamouth Shark ate one friend, an Israeli special ops sniper shot another friend with a spear and one friend ran out of breath after 45 minutes under water. I, the lone survivor, completed the task on the sixth attempt.

Alas, the RF transmitter wasn't strong enough to get the signal back to Arkansas.

Oh well, I guess I'll pay the extra $.75/mo to AOL afterall.

Feeling guilty for denying the Middle East of their porn,

"The Culprit"

Posted by: Culprit at February 6, 2008 05:07 PM


element5, stop regurgitating silly claims about the Iranian Bourse and US Dollar. Why exactly would this hurt the dollar?

Furthermore, your statement about "Virtually all" cuts leading to Muslim countries completely ignores the fact that France is supposedly one of the cuts. The US and Israel love Sarko, why would they cut his country off?

Stop being a simplistic US/Israel hater.

Posted by: RealMoney at February 6, 2008 05:10 PM


This is no coincidence.

How is this NOT an act of war?

This is a digital Pearl Harbor!

Posted by: Kevin Burton at February 6, 2008 05:12 PM


Here is my attempt at a theory to explain this anomally.

Could it be that some group has decided to try and teach a sort of lesson to these somewhat unprogressive countries about the value of western influance?

Over simplistic in a lot of ways I know but im not saying its a good plan.

Posted by: My two cents at February 6, 2008 05:17 PM


@Gabriel

"We can look at this data and conclude the simplest explanations is likely to be undersea damage associated with seismic activity. Rock slides and underwater stresses aren't limited to the specific time frame for an earth quake either. There are aftershocks, dislodged seabed and other hazards that can be triggered prior to and after an Earthquake, so it is safe to assume that when an earthquake occurs it causes problems before and after for the surrounding area and time frames."

So... the NSA controls earthquakes now to stop the economic collapse of the US while shielding friendly Arab states from cultural contamination all thw while blaming Iran or Jihadists thereby continuing the status quo of things?

To quote the Simpsons Comicbook Guy:

"Best Conspiracy Theory.... EVER!"

:)

Ok just kidding, but seriously that is a nice analysis.

Posted by: xd0s at February 6, 2008 05:18 PM


I don't believe in any seismic actvivity causing this, they are to widely disbursed, as mentioned upthread.
Still, we don't know yet. It can be much ado about nothing or something sinister.
The fact that so many cables has gone bust at the same time should at least make us aware of the fragility of the undersea network (if not of the net as a total).

There are two things that are not mentioned here: the fact that this simply can be a terrorist action. If indeed terrorists realy exist. And also (more likely in case of a 'conspirational' explanation) the goal of this may not be at all to cut off traffic, but to redirect traffic to other, more convenient routers available for surveillance by the three letter agencies.

Just some days before these events, Dubya expanded the powers of the NSA, giving them new muscle to fight attacks supposedly coming from Chinese hackers:

"President Bush signed a directive this month that expands the intelligence community's role in monitoring Internet traffic to protect against a rising number of attacks on federal agencies' computer systems.

The directive, whose content is classified, authorizes the intelligence agencies, in particular the National Security Agency, to monitor the computer networks of all federal agencies -- including ones they have not previously monitored.

Until now, the government's efforts to protect itself from cyber-attacks -- which run the gamut from hackers to organized crime to foreign governments trying to steal sensitive data -- have been piecemeal. Under the new initiative, a task force headed by the Office of the Director of National Intelligence (ODNI) will coordinate efforts to identify the source of cyber-attacks against government computer systems. As part of that effort, the Department of Homeland Security will work to protect the systems and the Pentagon will devise strategies for counterattacks against the intruders."

http://www.washingtonpost.com/wp-dyn/content/article/2008/01/25/AR2008012503261_pf.html

1. This can be the NSA diverting traffic into routes more easy to monitor.
2. This can be the rogue CIA's response to the NSA's new rights to monitor them.

Or it can have a perfectly natural explanation, although I think that's not likely with the number of cables cut.
I don't remember hearing about any cables cut during the tsunami in Dec. 2004, caused by a 8.0 Richter earthquake.

Posted by: knutm at February 6, 2008 05:21 PM


Do we have to wait until Friday before the squids are accepted as a serious threat? Or can we just make do with Cloverfield?
http://flickr.com/photos/12224828@N00/2247612674/

Posted by: Chris at February 6, 2008 05:37 PM


Bill & Hillary. Wetsuits & wirecutters.

Think about it.

Posted by: Jonathan Blaque at February 6, 2008 06:10 PM


Everyone is referring to three cable cuts but there are at least four. On Sunday Qatar reported its cable being cut in the Persian Gulf.

4th cable snaps, Qatar-UAE traffic disrupted

http://www.business-standard.com/common/news_article.php?leftnm=lmnu9&subLeft=2&autono=312626&tab=r

Posted by: manotick at February 6, 2008 07:10 PM


@Chris

The squids are taking down "teh intarwebs" cos they don't like Bruce's unauthorized news coverage of their private lives.

Posted by: Skail at February 6, 2008 07:22 PM


The amount of fear mongering and conspiracy mongering in this discussion is mind boggling.

Are people really this scared of the world? I hope I'm just being trolled and falling for it.

Really, the Cthulhu theory makes the most sense of any of this. No nation would announce their intent to go to war by cutting undersea cables - that's the most ridiculous thing I've heard in a long time. Nations disrupt enemy nations' C3I with bombs and cruise missiles, not with subtle means.

Almost as ridiculous is the idea that we would somehow need to cut a cable in order to attach a tap. Of course we don't! We had effectively unlimited funds to develop a means to secretly attach a cable tap during the cold war. At the very least the research budget available was the cost of several nuclear submarines, and the problem really isn't that hard.

What a load of rubbish.

Posted by: Skorj at February 6, 2008 07:41 PM


unless i am mistaken, the cables are not continuous, but in fact are several kilometer lengths with joints, and i imagine one can put these inside an enclosure, disconnect, add some hardware between the joints, and let it go. as for how to tap the information? just send it up the line with it. i am of the opinion that this is actually an operation aimed at installing hidden man-in-the-middle attack nodes for sniffing encrypted traffic between certain known addresses on the network suspected of being involved in organising terrorist activity and also, more than likely, and probably more importantly, from several angles, dissidents and informants, as well as general strategic military communications. because they are all happening so close together the implication is that it's one group organising this activity, and that they probab