Live data from Hacker News

Global Internet slows after 'biggest attack in history'

bbc.co.uk

61–70 of 159 posts

Re: Global Internet slows after 'biggest attack in history'

#61
post #2

Funny story from the Hosting company[1]: "Before the break of dawn on a morning in April, a full SWAT team was sent to execute a search warrant on CyberBunker's property." "It must not have occurred to the officers that the blast doors were designed to withstand a 20 megaton nuclear explosion from close range. When the SWAT team realized that the door was not being opened for them, they throw flashbangs and take othe…

I tried to tweet that link. But I guess SpamHaus's blacklist really works. Twitter gave me this error:

Oops! A URL in your Tweet appears to link to a page that has spammy or unsafe content. Learn more

Re: Global Internet slows after 'biggest attack in history'

#62
post #17

Exactly why is this affecting non-spamhaus services? Is it just shared dns servers or actual IP traffic being throttled ?

CloudFlare, Google, and others are lending their infrastructure to absorb the attack and increase reliability of Spamhaus blacklist propagation.

Re: Global Internet slows after 'biggest attack in history'

#63
post #31

The main problem is that some people decide what's good and what's not online and paint with the broadest brush possible. Spamhaus, sadly I say, is used by a lot of providers as gospel and a lot of innocent sites are hurt.

If you ever tried to handle any mail server at all, you would recognize that you have choice in using spamhaus (or any other DNSBL). These people have put in place a high quality method to discriminate spammers. I've been around since their beginnings, and their list has been incredibly successful (very high quality) for me, compared to njabl and other "dynamic" lists based on honeypots, or backlash entirely (say hi…

I do not have any choice at all about what spam filters the recipients of my email may be using. I have never had this problem personally, but there are many, many accounts on webhostingtalk.com of IP ranges being banned Spamhaus without any evidence of spam; of IP addresses that remained banned after ownership changes hands and other problems. There are always two sides in every story. On balance I think Spamhaus is doing a very good and necessary thing. I don't know about this particular case, but I've read accounts of what sound like very reasonable grievances.

Re: Global Internet slows after 'biggest attack in history'

#64
post #30

Earlier quoted context omitted.

Maybe I should say, spikes in outgoing traffic. The internet is not safe for banking, and I don't see any way it can be made safe.

It is safe for banking. Have you heard of encryption?

Oh, encryption. Why didn't anyone else think of that!

Have you noticed the spate of attacks against SSL lately? BEAST, CRIME, Lucky 13, RC4 in general? https://en.wikipedia.org/wiki/BEAST_%28computer_security%29#... Not profitable for some things, maybe, but definitely worth mounting such an attack for banking info.

Have you noticed that the certificate authority system is totally broken? http://www.theregister.co.uk/2011/04/11/state_of_ssl_analysi... Heard of DigiNotar? Comodo? http://arstechnica.com/security/2011/09/comodo-hacker-i-hack... These aren't hypothetical attacks! Google got MITM'd by Iran https://blog.mozilla.org/security/2011/08/29/fraudulent-goog...

Re: Global Internet slows after 'biggest attack in history'

#65
post #2

Funny story from the Hosting company[1]: "Before the break of dawn on a morning in April, a full SWAT team was sent to execute a search warrant on CyberBunker's property." "It must not have occurred to the officers that the blast doors were designed to withstand a 20 megaton nuclear explosion from close range. When the SWAT team realized that the door was not being opened for them, they throw flashbangs and take othe…

I looked up a video with an actual Dutch SWAT team and their uniform looks different. The one in the picture is pretty derpy, and they're carrying what looks like tiny medieval shields. I'm not convinced.

To HN user "stiller" who commented on my comment: it looks like you were hellbanned so none of your comments show up. You should probably get that fixed.

Re: Global Internet slows after 'biggest attack in history'

#66
Wikipedia seems to suggest that Spamhaus blocked a large chunck of Cyberbunkers IP allocation, when the problem originated with a subset. I suppose given the conditions, Wikipedia is perhaps not to be trusted, but it does make me think less of Spamhaus.

In October, 2011, Spamhaus identified CyberBunker as providing hosting for spammers and contacted their upstream provider, A2B, demanding service be cancelled. A2B initially refused, blocking only a single IP address linked to spamming. Spamhaus retaliated by blacklisting all of A2B address space. A2B capitulated, dropping CyberBunker, but then filed complaints with the Dutch police against Spamhaus for extortion.

https://en.wikipedia.org/wiki/CyberBunker

Re: Global Internet slows after 'biggest attack in history'

#67
post #2

Funny story from the Hosting company[1]: "Before the break of dawn on a morning in April, a full SWAT team was sent to execute a search warrant on CyberBunker's property." "It must not have occurred to the officers that the blast doors were designed to withstand a 20 megaton nuclear explosion from close range. When the SWAT team realized that the door was not being opened for them, they throw flashbangs and take othe…

I looked up a video with an actual Dutch SWAT team and their uniform looks different. The one in the picture is pretty derpy, and they're carrying what looks like tiny medieval shields. I'm not convinced.

I think the uniforms in the picture are old, and the SWAT raid was supposedly many years ago, so it might be not be fake based on that.

Re: Global Internet slows after 'biggest attack in history'

#69
post #66

Wikipedia seems to suggest that Spamhaus blocked a large chunck of Cyberbunkers IP allocation, when the problem originated with a subset. I suppose given the conditions, Wikipedia is perhaps not to be trusted, but it does make me think less of Spamhaus. In October, 2011, Spamhaus identified CyberBunker as providing hosting for spammers and contacted their upstream provider, A2B, demanding service be cancelled. A2B in…

Spamhous has a history of blocking much more than the offending IP's, sometimes whole ISPs. It effectively makes the issue a high priority one for the ISP, some call it blackmail.

example: http://edpnetissues.blogspot.be/2012/10/22-october-2012.html

Post reply on HN