Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

I am sure the DDoS problem is something that the free market will sort out. The individual players will make it costly for the other players to send problems their way. I expect a chain of "charge the next node for resource usage" to evolve.

If this chain will go all the way to the end user, I don't know. If it will, then end users will probably start using routers that feature restrictions / monitoring / control of outbound traffic. So you know your coffee machine will not be able to use up too much resources. Just like you have a fuse for the power line.

Re: Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

#6

Post by skarap » Sat, Oct 22, 2016, 12:37 PM UTC

nucotano wrote: post #3

I'm so looking forward at IPv6, the death of NAT, and billions of IoT devices with all ports exposed to the world :-)

A brave new world!

Re: Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

#7

Post by pyvpx » Sat, Oct 22, 2016, 12:38 PM UTC

ComodoHacker wrote: post #4

This attack looks like another probing into critical internet infrastructure Bruce Schneier had talked about. Who's next?

because a number of high profile sites decided to put all their DNS eggs in a single, vulnerable basket does not make Dyn "critical internet infrastructure" nor this volumetric DDoS attack a "probe"

Re: Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

#8

Post by heypete » Sat, Oct 22, 2016, 12:38 PM UTC

nucotano wrote: post #3

I'm so looking forward at IPv6, the death of NAT, and billions of IoT devices with all ports exposed to the world :-)

NAT != stateful firewall.

Re: Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

#9

Post by Kenji » Sat, Oct 22, 2016, 12:39 PM UTC

TekMol wrote: post #5

I am sure the DDoS problem is something that the free market will sort out. The individual players will make it costly for the other players to send problems their way. I expect a chain of "charge the next node for resource usage" to evolve. If this chain will go all the way to the end user, I don't know. If it will, then end users will probably start using routers that feature restrictions / monitoring / control of…

I am not sure why this is being downvoted. I think it's an interesting perspective. After all, it's in pretty much every internet user's and provider's interest to have a working internet.

Re: Update Regarding DDoS Event Against Dyn Managed DNS on Oct 21

#10

Post by kukx » Sat, Oct 22, 2016, 12:40 PM UTC

ComodoHacker wrote: post #4

This attack looks like another probing into critical internet infrastructure Bruce Schneier had talked about. Who's next?

You suggest it's probing. Then how would the full scale attack look like? Also, how does probing help the perpetrators, doesn't it lead to better defenses in the future?