Live data from Hacker News

Anonymous plans to take down the 13 root DNS servers that power the Internet?

pastebin.com

1–10 of 108 posts

Re: Anonymous plans to take down the 13 root DNS servers that power the Internet?

#4
post #3

does this mean, that even if we typed the IP address of a site, we would get an error? i'm not sure how all the protocols work, so any clarification would be great.

No, you could still get to the site with just an IP address, if you have it.

Re: Anonymous plans to take down the 13 root DNS servers that power the Internet?

#8

hmm..and people here on HN say they aren't a digital terrorist group.....

While the DOS discussed in that link is quite obviously misguided, counterproductive, juvenile and likely criminal, 'terrorism' seems like a pretty strong word.

Re: Anonymous plans to take down the 13 root DNS servers that power the Internet?

#9
Most interesting bit :

The principle is simple; a flaw that uses forged UDP packets is to be used to trigger a rush of DNS queries all redirected and reflected to those 13 IPs. The flaw is as follow; since the UDP protocol allows it, we can change the source IP of the sender to our target, thus spoofing the source of the DNS query.

The DNS server will then respond to that query by sending the answer to the spoofed IP. Since the answer is always bigger than the query, the DNS answers will then flood the target ip. It is called an amplified because we can use small packets to generate large traffic. It is called reflective because we will not send the queries to the root name servers, instead, we will use a list of known vulnerable DNS servers which will attack the root servers for us.

Post reply on HN