DDoS attacks slow down Citizens' Initiative signing in Finland

213 points by ptaipale 3 years ago | 37 comments
The recent dramatic policy shift in Russia has brought out two Citizens' Initiatives in the Finnish government's net portal. Both are about NATO membership in the country which is traditionally militarily non-aligned.

First initiative (open Feb 21) proposes a NATO membership referendum, the other (open Feb 28) proposes that parliament should go ahead to membership procedures without referendum, because of expected Russian harrasment and influence on the referendum procedures.

The government portal for initiatives has been very slow today. The authentication to sign any of the initiatives is done either by a person ID smartcard, or bank-based identification. Most people use the bank authentication (in most cases 2FA using mobile phone) because they don't bother with smart card readers.

The first of the initiatives has already passed the threshold (50 000) which automatically brings it to the table in Parliament. The other initiative has collected 35 000 signatures in 30 hours, meaning it will also pass the threshold tomorrow, despite many people not being able to sign it due to bank connections failing under DDoS.

YLE (state broadcaster) news about the attack: https://yle.fi/uutiset/3-12338542

Initiative 1 (referendum): https://www.kansalaisaloite.fi/fi/aloite/9866 Initiative 2 (parliament direct decision): https://www.kansalaisaloite.fi/fi/aloite/9997

  • zokier 3 years ago
    Just to be absolutely clear, that YLE news article that OP linked does not mention the Citizens Initiatives platform at all. It reports only an attack against one bank (banks are popular authentication providers in Finland). There are total of 10 different banks providing authentication for the Citizens Initiatives platform, and additionally two non-banking based authentication options.
    • usr1106 3 years ago
      Agree. The submission sounds more like a conspiracy theory. Why does the submitter needs to write a news article? Because there is no source to cite (the given link is absolutely not a source for what the submitter claims, probably everyone can understand that even if over 999/1000 readers need machine translation to do so).

      It's was already in today's printed newspaper that the parliament will put NATO membership on the session agenda. Nordea is the biggest bank in Finland so there could be all kind of reasons to DDoS them. But not having more people sign the petition seems a far-fetched one. Polls show that support to join raised from 30% in January to 53% in the last poll. The last poll started already before Putin's attack and especially the news that this time Europe does not only watch and make some symbolic declarations, so one can easily assume that support has gone up since then.

      Should it become mainline news that this attack was directed against signing the petition, support will go up further.

      My feeling is bringing down the petition site would be much easier than the bank that many but far from all potential sginers need for authentication. The petition site is little used after all and has not gained much attention before, certainly not internationally. 50,000 signers needed. Over 90% of the petitions get just a small fraction of that during the 6 months a petition can be supported. Nordea bank handles that many customers in just a couple of hours every day and they have been target of DDoS before.

    • kichik 3 years ago
      Any indication to suggest it's DDoS and not just too many legitimate visitors for the site to handle?
      • smoe 3 years ago
        The article doesn't talk about the site of the initiative, but Nordea one of the banks whose services can be used for identification. Nordea says on twitter they are under a DDoS attack and their services are slow at the moment (but don't seem to say anything about the identity service or citizens initiative specifically).

        https://twitter.com/Nordea_Aspa/status/1498681430993473542

        • Hamuko 3 years ago
          I think Nordea might be the second most popular retail bank in Finland, at least if we go by mortgages as a proxy metric. Osuuspankki would be the largest one, but I haven't heard of them having any issues.
        • praash 3 years ago
          Nordea in Finland is known for having slight issues several times a year, and they usually end rather quickly.

          Yesterday, 2022-03-01 at roughly 09:00 UTC, I was completely blocked from accessing my bank account. Eight hours later, at roughly 17:00 UTC, it took me several attempts, each loading for over a minute, until I gained access to my account. "Normal" issues fail immediately, so this time felt completely different.

          The YLE news article stated that this was indeed a DoS attack, and I think it's been years since a Finnish bank was targeted.

          • zeruch 3 years ago
            This is a very valid question. While Russia likely cares, I'm not sure this is "top of mind" for them to dedicate resources against.
            • dragonwriter 3 years ago
              > While Russia likely cares, I'm not sure this is "top of mind" for them to dedicate resources against.

              It's top of mind enough for them to have just issued a threat of “military and political consequences” if Sweden or Finland were to join NATO.

              https://thehill.com/policy/international/russia/595853-russi...

              • Ensorceled 3 years ago
                Russia has a ton of resources in psyops and cyber espionage, this isn't a big operation. Why is keeping the Finns and Sweden out of NATO not "top of mind"?
                • distances 3 years ago
                  Slowing down this vote would do nothing for a potential for NATO membership process. It's quite far-fetched that this would be a valid target.
                • paxys 3 years ago
                  > I'm not sure this is "top of mind" for them to dedicate resources against

                  This entire war is about Ukraine joining NATO, and the expanding NATO influence in general. How would another bordering country having a NATO referendum not be top of mind for Russia?

                  • multjoy 3 years ago
                    Because the Finns and Russians have form. A second invasion against Finland would be a second go at the Winter War, and while they may not be a nato member, they are a full fledged EU member and Ukraine has shown that the EU will absolutely step up.

                    The EU may not include the US or UK, but it does include every other nuclear weapon on continental Europe.

                    • Hamuko 3 years ago
                      Ukraine is a much larger fixation to Putin beyond NATO. There wasn't really any indication of Ukraine joining NATO before Russia started its attacks, and Finland and Sweden have been floating the idea of joining NATO if Russia started a full assault.
                    • tablespoon 3 years ago
                      > While Russia likely cares, I'm not sure this is "top of mind" for them to dedicate resources against.

                      I'm not so sure. It seems Putin really doesn't like NATO, and especially doesn't want Russia's neighbors belonging to it.

                      • zeruch 3 years ago
                        I agree on that point, and it's history with Finland is quite...terse. It's been a duchy inside Czarist Russia, a buffer zone between it and Sweden (when both were kingdoms), it's had civil unrest fomented by the USSR, etc.

                        It's a relationship fraught with bad blood, but strategically it's second tier compared with CIS states, the Middle East, or the Baltic states.

                        At this stage I'm more curious as to whether (if Russia was actually DDoSing instead of just a poorly configured webhead with extra traffic due to 'timeliness' of the initiative) it makes sense to draw more negative attention to oneself, as Putin has, by doubling down on taking jabs at everyone he shares a border with...and if he's starting to see that himself, or if he's only observing through a very paranoid, myopic lens that he simply can't get out of his own policy rut long enough to not totally collapse the Russian state, and him with it.

                  • exact_string 3 years ago
                    Just tried using the portal both with the mobile phone authentication and non-Nordea bank authentication. Everything works smoothly.

                    I'm also not sure how important these two initiatives are in practice since it's clear that the politicians are already very much aware of the increased support for NATO membership.

                    • container 3 years ago
                      In case anyone is wondering, the (only) article linked in this post only talks about the bank Nordea (which some users might use to verify their identity on the initiative site)
                      • wolverine876 3 years ago
                        Is it HN policy to accept self-written posts? I don't remember it until maybe a few months ago. I thought you need to either post a link or Ask HN.
                      • hutrdvnj 3 years ago
                        I mean it's kinda obvious that the DDoS is ordered by russians, but can we prove it?
                        • wongarsu 3 years ago
                          Even if it's from within Russia it doesn't tell you if it's ordered by the government. Not every Anonymous hack is orchestrated by the US government, the same can happen inside Russia.

                          Unless someone screws up we will probably never know for certain.

                          • robotnikman 3 years ago
                            The Russian government pretty much turns a blind eye to their hackers as long as they don't target Russia
                            • SXX 3 years ago
                              Nah it's was always fairly-tale. Russian FSB always cooperated with Visa / Mastercard and international banks when it's had something to do with financial fraud.

                              They only turn a blind eye on those who work specifically for them.

                            • mmsbdjjkvjj 3 years ago
                          • mmsbdjjkvjj 3 years ago
                            So, time to cut off Russia from internet.
                            • thnujmikkkk 3 years ago
                              Americans should know they are responsible for what is happening in Ukraine now because their government has continuously interfered with Ukraine and Russian for a long time. This aggression coming out of America seems accounted for by the American culture that they worship money and strength and don't care much about weak people that they exploit. Even though I was born in a western country under the influence of western media, I have an impression that American irresponsibility is appalling as I consider the following facts:

                              1. The current Ukraine contains historically Russian territories that were moved to Ukraine in the era of USSR. Russian government cannot ignore originally Russian people living there. And Ukrainian nationalists are quite dangerous people. They are repressing proRussian people in the east. This is not something that Putin made up. My Russian acquaintances who work in the west directly know acquaintances and relatives living in the east Ukraine who witnessed such repression, namely, torture and murder. They joined the overturning of the government in 2014 holding the same flag as that they used when they cooperated with Nazis in 1940's. American government seems to often fund and arm such group of (almost terrorist) people, as they did to Mujahidn in Afghanistan (closely related to Taliban and AlQuaida) when it fought against Soviet.

                              2. The US have actually interfered with Ukraine and was likely involved in overturning the democratically elected Ukrainian government in 2014, establishing a puppet. Most notably, there was evidence, leaked conversation between American officials about who they want as the next Ukrainian leader. They had this conversation before the overturn actually happened, which even those US officials themselves admitted, although they denied American support of the overturn. Joe Biden was at the top of the then US administration, and his son earned millions of dollars in Ukraine afterwards. Anyone would suspect his deep involvement from this.

                              3. Russia has always been threatened by the economic aggression by the US. Putin was at first friendly to orgarches and the US when he took the position of president, but he started fighting them when they tried to sell off the shares of the companies that possess Russian natural resources to American capitals in 2004. If this had happened, the Russian oil money would have directly flowed into the US capitals, and therefore wouldn't have been accessible to Russian people. Notably, I was impressed by how IMF forced a country to privatise their state-owned companies and then American capitals tried to absorb them. Fortunately, this aggression was stopped by Putin, and a half of the shares of Russian oil companies are now owned by the state. This appears to be the key to the reason why the American government regard Putin as enemy.

                              4. Western media are highly suspected to intentionally broadcast distorted images of Putin. A typical example is Navalny's assassination. He claimed that he rang FSB agents and recorded their confession of the attempted assassination, by pretending to be their boss on the phone. What is this stupid story? He barely escaped from the assassination by FSB, and the notorious Russian spy agents confessed their attempt of assassination on the phone? Well, I personally believe that Putin is killing his opponents when they threaten his power. But, after hearing many such crappy stories from the western media, I started to believe Putin's opponents are sponsored by westerners that try to economically exploit Russia. 5. The current Ukrainian president who was from the south but elected by people in the pro-EU part, Zelensky, provoked Russia to an unthinkable extent. He showed the will to get back crimea, to crush the rebels in the east, to join NATO, and to increase their armament to cope with Russia (even nuclear armament). The first three plainly violates the Minsk agreement, and undermines Germany and France who joined it. Based on this fact, any sensible people would think that he risked own people's lives. From the fact that he could boldly do this, I suspect that he was backed by the US. No other countries would have been able to give him confidence to do so.

                              All these stories and others that I hear consistently indicate American aggression. Thus, despite pro-western media in my country, I started to believe that, even though Putin is a dictator and killing his opponents, he tells more genuine things. Europeans should reconsider their relationship with the US that destabilise Europe.

                              • turndown 3 years ago
                                I find it highly interesting how people who try and put these despots in a rosy light almost always require using “America” as a foil for how totally evil and wrong they do everything, meanwhile ignoring the person they support has launched no fewer than three(just from my amateur knowledge) invasions into countries that Russia has __literally__ zero claim to in any sense.

                                By the way, I found your post totally unhinged, though you did hide it pretty well until your final point where the guy ordering assassinations against his political opponents(read: “when they threaten his power”) is somehow painted as the reasonable and moral person.

                                • mola 3 years ago
                                  It's pretty clear almost all Ukrainians don't want to be part of Russia. The fact that Putin has a theory of history that he believes the will of common people should just bow down before is the cause of this invasion and the tensions between US and Russia. As usual, a paranoid leader obsessed with honor gained through force and machismo is blaming everyone but himself. Moreover, the so called "eastern expansion" of the west is driven by common people wanting freedom and prosperity, not by imperialistic machinations. Meanwhile russia has one of the highest emigration rates in the world. If NATO was war mongering why didn't NATO do much after the occupation of Crimea? Or after the attack on Georgia?

                                  Putin life's work is bringing some imagined Russian glory back. But that's the exact mentality that brought suffering on the Russians through the ages. Be it a Tzarist Russia, a communist Russia or a putinist Russia. The common Russian was always sacrificed for some imagined Russian glory.

                                  It's amazing that you can brush away the fact that Putin murders politicians activists and journalist who expose his corruption, and you still think he is genuine. Remember that he denied that he is going to invade ukrain multiple times just before he invaded? The only truth Putin recognizes is power. He will use half truths to manipulate, control and assert his dominance. Compare for example the western rhetoric blaming the war on Putin while acknowledging the common Russian as a victim. Putin's rhetoric OTOH is generalizing the enemy as some fictive "westerner" conglomerate coming after russia. This sort of demagogy is a tool to prepare a people for bloodshed and war, not for peace.

                                  • mec31 3 years ago
                                    By similar logic to Russia’s claim on Crimea, wouldn’t Finland have a claim on eastern Karelia?
                                  • xxxriptidexxx 3 years ago
                                    By the time Americans recognize their own country's fault here it will be far too late. I think that both sides have their own propoganda machines, but the western/American machinery is far more complex, giving us the guise of "impartial journalism".
                                    • sidibe 3 years ago
                                      Lots of new accounts like parent and gp blaming America for Russia invading Ukraine
                                      • xxxriptidexxx 3 years ago
                                        I usually lurk yes.. and there are new accounts i do not agree with too.. so would you like to comment on the actual substance of what I said?
                                    • pbourke 3 years ago
                                      There are many holes in your statements. I am too tired to rebut them in HN-normal form.

                                      However, I will say this: even if one accepts everything that you claim at face value, nothing justifies what Putin/Russia are doing in Ukraine right now.

                                      • thnujmikkkk 3 years ago
                                        I never said that Putin was a good guy or that I am in favor of his actions. You must see this as more nuanced than what the western media is presenting it as, though. If you look at this through a pragmatic lens, and see Putin as an actor playing the same game of geopolitical interests every other country is playing, you will easily understand how Washington's actions have led us to this point (albeit more subtly than the Kremlin).
                                    • aaron695 3 years ago
                                      • swayvil 3 years ago