Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Global Internet slows after 'biggest attack in history'

bbc.co.uk

Post reply on HN
Print view View original

111–120 of 159 posts

Re: Global Internet slows after 'biggest attack in history'

#111

Post by ck2 »

http://www.nytimes.com/2013/03/27/technology/internet/online...

Cyberbunker brags on its Web site that it has been a frequent target of law enforcement because of its “many controversial customers.”

“Dutch authorities and the police have made several attempts to enter the bunker by force,” the site said. “None of these attempts were successful.”

If this happened in the USA - the police would never leave - they'd call in tanks or bunker busters from the military.

Did the Dutch just turn around and go away and say "oh well" ?

Re: Global Internet slows after 'biggest attack in history'

#112

Post by jepper »

xSwag wrote: post #2

Funny story from the Hosting company[1]: "Before the break of dawn on a morning in April, a full SWAT team was sent to execute a search warrant on CyberBunker's property." "It must not have occurred to the officers that the blast doors were designed to withstand a 20 megaton nuclear explosion from close range. When the SWAT team realized that the door was not being opened for them, they throw flashbangs and take othe…

Its most certainly fake. That is dutch riot police. We don't have SWAT teams but "arrest teams". They definitely don't wear white helmets. They definitely don't just trow around flash bangs. And the kicker, knowing dutch police bureaucracy, they did not get a refund this quick.

Re: Global Internet slows after 'biggest attack in history'

#113

Post by knowaveragejoe »

ohwp wrote: post #37
peterwwillis wrote: post #16

Earlier quoted context omitted.

I looked up a video with an actual Dutch SWAT team and their uniform looks different. The one in the picture is pretty derpy, and they're carrying what looks like tiny medieval shields. I'm not convinced.

The picture is clearly Photoshopped. Light in the background is coming from the right, while light on the team is coming from the left. Edit: talking about this picture: http://cyberbunker.com/web/images/swat-bunker.jpg Edit2: I think it's more difficult to determine if it's real than I thought.

It's definitely photoshopped, look at the ground they're standing on, where it fades into the wooded area.

Re: Global Internet slows after 'biggest attack in history'

#114

Post by knowaveragejoe »

flopunctro wrote: post #83
leethax0r wrote: post #41

Earlier quoted context omitted.

Wouldn't it just be easier to, I dunno, unplug something? Or turn something off? Why would you fuck up the lines...

You can't "turn off" that bunker, it has multiple diesel generators and lots of fuel reserves. It also has clean water reserves and air filtering capabilities, so you can't gas the people inside. Physically cutting its uplink lines would be IMHO the most efficient way to neutralize that datacenter.

There is, of course, the other end of the cable connecting to the rest of the world... no need to actually cut the cable. You could do it with software alone really.

Re: Global Internet slows after 'biggest attack in history'

#115

Post by spangborn »

curveship wrote: post #108

Here is a (claimed) account of the dispute from the attackers: http://stophaus.com/entry.php?5-The-Real-story-on-the-New-Yo... . I got there from the comments on the CloudFlare blog posts, where a user named "STOPhaus" posted taunting CloudFlare, with a link to the stophaus.com website. Apparently it's a meeting place for anti-Spamhaus sentiment and includes such classy stuff as personal information on Spamhaus emplo…

I wonder if they realize how unreadable those posts are - they look like mindless ramblings. It took me a few minutes to realize it was an interview/chat.

Re: Global Internet slows after 'biggest attack in history'

#116

Post by lmm »

driverdan wrote: post #81
jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

Has this been affecting other CloudFlare clients? Some of my sites have had short periods of slow response times for the past few days but I assumed it's the crappy host their on. One of my clients on CF hasn't had any issues.

I and some friends noticed 4chan being inaccessible (DNS failure) for parts of yesterday evening. Don't know who else is a CloudFlare client. (I'm in the UK like the sibling comment).

Re: Global Internet slows after 'biggest attack in history'

#117

Post by jiggy2011 »

np422 wrote: post #73
entropy_ wrote: post #46

Earlier quoted context omitted.

Could you elaborate on what happened in your case that you'd be so vehemently opposed to spamhaus(to the point of being willing to commit crime(s) to hurt them)? I'm truly curious on why the reaction to spamhaus being DDoS is so polarised.

A long time ago in a galaxy far away I was a sysadmin at a local university. Trying to keep mail-servers running and keeping up with the different spam clearing houses different policies that kept changing without notice was a lot of work back then. Once you got black-listed getting removed wasn't always an easy process no matter how quickly you tried fix whatever caused it. Methods of communicating were not always a…

I'd wager that there's more pr0n and w4r3z on the internet right now than at any point in history. And I don't see that changing soon/

Re: Global Internet slows after 'biggest attack in history'

#118

Post by hhw »

fnordfnordfnord wrote: post #105
jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

"But we're up - they haven't been able to knock us down. Our engineers are doing an immense job in keeping it up - this sort of attack would take down pretty much anything else." --Steve Linford from the BBC article. If Spamhaus' Linford is quoted accurately, he's kind of full of it. The NYT article gives more detail about CloudFlare's involvement.

CloudFlare protects the website, which has no bearing on Spamhaus' actual service which are run on their DNSBL servers in various networks around the world.

Re: Global Internet slows after 'biggest attack in history'

#119

Post by potatolicious »

ck2 wrote: post #111

http://www.nytimes.com/2013/03/27/technology/internet/online... Cyberbunker brags on its Web site that it has been a frequent target of law enforcement because of its “many controversial customers.” “Dutch authorities and the police have made several attempts to enter the bunker by force,” the site said. “None of these attempts were successful.” If this happened in the USA - the police would never leave - they'd call…

They don't really need to get into the bunker. I'm assuming said bunker has limited supplies of food, and that it is reliant on the outside world for water, electricity, and network connectivity.

Just yank the network and turn off the water, it'll either be pointless to stay inside, or untenable. Either way gets the door open.

Re: Global Internet slows after 'biggest attack in history'

#120

Post by hhw »

TranceMan wrote: post #44
jgrahamc wrote: post #33

This story doesn't mention that Spamhaus is protected by CloudFlare and we took a beating from this attack. At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. Also, http://openresolverproject.org PS Technical details: http://blog.cloudflare.com/the-ddos-that-almost-broke-the-in...

At some point I'm hoping the full technical story about how the attack morphed from our infrastructure to Internet infrastructure can be told. See poorly configured DNS servers and ISP's failing to configure their networks properly - so traffic with a source address which is not part of your allocated IP block is not allowed to leave your network. It is not that hard! The Internet Infrastructure is working as designe…

Ingress Filtering is a rather vague concept. The actual application of blocking spoofed traffic is known as unicast reverse path forwarding.

http://en.wikipedia.org/wiki/Reverse_path_forwarding

http://tools.ietf.org/html/rfc3704

Post reply on HN