Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Global Internet slows after 'biggest attack in history'

bbc.co.uk

Post reply on HN
Print view View original

51–60 of 159 posts

Re: Global Internet slows after 'biggest attack in history'

#51

Post by jgrahamc »

timtadh wrote: post #47
jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

Can you also describe exactly what the connection between CyberBunker and the attack is. Is there any indication that the hosting company is actually involved? It seems dubious but of course there are defunct hosting companies that have done such things (Russian Business Network comes to mind). However, this host does not seem shady in comparison to RBN. It has an actual location. The name of the owner is known. It h…

I don't know.

Re: Global Internet slows after 'biggest attack in history'

#52

Post by msy »

timtadh wrote: post #47
jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

Can you also describe exactly what the connection between CyberBunker and the attack is. Is there any indication that the hosting company is actually involved? It seems dubious but of course there are defunct hosting companies that have done such things (Russian Business Network comes to mind). However, this host does not seem shady in comparison to RBN. It has an actual location. The name of the owner is known. It h…

According to spamhaus these guys hosted the RBN: http://www.spamhaus.org/news/article/673

Re: Global Internet slows after 'biggest attack in history'

#53

Post by salmanapk »

jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

Interesting.. they were also attacked a week ago (and started using CloudFlare): http://blog.cloudflare.com/the-ddos-that-knocked-spamhaus-of...

Re: Global Internet slows after 'biggest attack in history'

#54

Post by stiller »

peterwwillis wrote: post #16
xSwag wrote: post #2

Funny story from the Hosting company[1]: "Before the break of dawn on a morning in April, a full SWAT team was sent to execute a search warrant on CyberBunker's property." "It must not have occurred to the officers that the blast doors were designed to withstand a 20 megaton nuclear explosion from close range. When the SWAT team realized that the door was not being opened for them, they throw flashbangs and take othe…

I looked up a video with an actual Dutch SWAT team and their uniform looks different. The one in the picture is pretty derpy, and they're carrying what looks like tiny medieval shields. I'm not convinced.

That photo looks like regular Dutch police officers in riot gear. Dutch SWAT (Arrestatieteam) look like special forces only with jeans.

Re: Global Internet slows after 'biggest attack in history'

#55

Post by Trufa »

dclowd9901 wrote: post #42
mikeash wrote: post #21

Earlier quoted context omitted.

According to a convenient nuclear effects calculator I found[1], 20MT at 5km and an optimal burst height will generate over 40psi of overpressure. The fireball itself will reach about 4km in radius. According to another site[2], 20psi is enough to severely damage or destroy heavily built concrete buildings, and the maximum wind speed at 40psi will be greater than the speed of sound. For comparison, 3psi is enough to…

Glad to know in the case of full scale nuclear war, the only survivors will be lunatics and data center admins.

Sounds like the beginning of a series!

Re: Global Internet slows after 'biggest attack in history'

#56

Post by ihsw »

error54 wrote: post #14

"We can't be brought down." I understand taking pride in your work but isn't bragging like this kind of an invitation for more things like this to happen to Spamhaus?

I was under the impression that their statement was less of a challenge and more of a declaration as such:

"We mustn't be brought down."

Re: Global Internet slows after 'biggest attack in history'

#57

Post by danielweber »

leethax0r wrote: post #45
sp332 wrote: post #30

Earlier quoted context omitted.

Maybe I should say, spikes in outgoing traffic. The internet is not safe for banking, and I don't see any way it can be made safe.

It is safe for banking. Have you heard of encryption?

That is assuming your endpoint is secure.

Most people's personal finance is probably safe to do on the Internet because of legal requirements on banks. Small businesses are another matter.

Re: Global Internet slows after 'biggest attack in history'

#58

Post by eli »

entropy_ wrote: post #46
np422 wrote: post #40

Spamhaus can be a real PITA to deal with, all in attitude "squeal like a pig, or you'll end up on the blocked list - bitch!" Been there, done that, got the t-shirt. What can I do to provide extra firepower in the ongoing ddos against them?

Could you elaborate on what happened in your case that you'd be so vehemently opposed to spamhaus(to the point of being willing to commit crime(s) to hurt them)? I'm truly curious on why the reaction to spamhaus being DDoS is so polarised.

I can't speak for np422, but a few years ago Spamhaus blocked one of my IPs and insisted I had sent messages to one of their "spam trap" addresses. I think they were wrong or (less likely) someone was maliciously messing with us.

But since the spam trap addresses are secret, it was an impossible charge to defend against or investigate. Not fun.

Re: Global Internet slows after 'biggest attack in history'

#59

Post by TeMPOraL »

leephillips wrote: post #24
OGinparadise wrote: post #6

The main problem is that some people decide what's good and what's not online and paint with the broadest brush possible. Spamhaus, sadly I say, is used by a lot of providers as gospel and a lot of innocent sites are hurt.

You seem to be taking the line of the attackers' spokesman, who accused, rather hysterically, Spamhaus of deciding what goes on the internet. Of course, all Spamhaus does is supply a list of hosts who are sending email spam, and other things like lists of dynamic IPs. Sounds like this hosting outfit was making money hosting spammers and their business is threatened by legitimate countermeasures.

He's not the only one to do so. Spamhaus has engaged in some shady behaviour; even pg wrote about it once:

http://paulgraham.com/spamhausblacklist.html (2005)

I wanted to believe him. But before I could reply to his mail, I got first-hand evidence that the SBL has in fact gone bad.

As of this writing, any filter relying on the SBL is now marking email with the url "paulgraham.com" as spam. Why? Because the guys at the SBL want to pressure Yahoo, where paulgraham.com is hosted, to delete the site of a company they believe is spamming.

EDIT

Wait, there's more!

http://paulgraham.com/sblbad.html

http://paulgraham.com/spamhaussbl.html

Re: Global Internet slows after 'biggest attack in history'

#60

Post by hga »

mikeash wrote: post #21
arethuza wrote: post #10

Earlier quoted context omitted.

Note that "close range" in this case is a 20Mt explosion 5km away: http://cyberbunker.com/web/bunker-specs.php Having said that, in the case of 20Mt nukes I suspect 5km does count as "close range".

According to a convenient nuclear effects calculator I found[1], 20MT at 5km and an optimal burst height will generate over 40psi of overpressure. The fireball itself will reach about 4km in radius. According to another site[2], 20psi is enough to severely damage or destroy heavily built concrete buildings, and the maximum wind speed at 40psi will be greater than the speed of sound. For comparison, 3psi is enough to…

Indeed; if you really want to survive such effects, you need to do what they did in Cheyenne Mountain: build a tunnel through a mountain and install your blast doors etc. perpendicular to it some distance from the entrances; Wikipedia says it'll handle 600 psi. One of the reasons we deemphasized it and went to Boeing E-4s (747 command posts) in the early '70s was that we judged the Soviets had a good chance of landing serious warheads at both ends of the tunnel at the same time, which would exceed its design limits.
Post reply on HN