Spamhaus DDoS grows to Internet-threatening size

Status
Not open for further replies.
Post content hidden for low score. Show…
zeb600":1irydygz said:
It amazes me that these guys think they can get away with this. Seriously, wtf.
Then again I am amazed that nobody seems to be able to stop them. Why not cut the line(s)?

Since they are in a country with laws, the legal system probably has to become involved before any sort of action is taken.
 
Upvote
40 (42 / -2)

jdale

Ars Legatus Legionis
16,969
Subscriptor
"Dutch authorities and the police have made several attempts to enter the bunker by force, none of these attempts were successful." Even a Dutch SWAT team failed to get in.

The link goes to the Cyberbunker site (which actually timed out on me...). Is this true or just PR nonsense?

If it's true, one wonders whether they are adding interference with police and destruction of evidence to the things they could be charged with.


Overall... this is an annoyance, but things on the internet often don't get fixed unless they break pretty bad. Maybe this is bad enough to close some of the loopholes the DDoS is using.
 
Upvote
27 (27 / 0)

Drakkenmensch

Ars Tribunus Angusticlavius
7,765
LoneBagel":8hhwubu6 said:
"If a Tier 1 provider fails, that risks breaking the entire Internet."

Sounds almost as bad as typing 'Google' into Google or letting Jen take it to a presentation.

Quick! Get the Internet back to the elders before Douglas and April break into a fistfight and destroy civilization!
 
Upvote
8 (9 / -1)
Post content hidden for low score. Show…

Dilbert

Ars Legatus Legionis
34,009
null_interface":1tndnffs said:
Find out just how hardened that nuclear bunker really is?

I kid, I kid...

Simple. Keep it simple. Why blow things up when you don't need to? Bunkers keep water out pretty well. Implies they'd keep it in too. Servers and network gear do not like water. Oh no. There's likely a fire hydrant nearby somewhere. Well?

Found it: http://maps.google.com/maps?ll=51.50216 ... 3,3.907181
 
Upvote
38 (42 / -4)
Asinar":mmq2uvzx said:
zeb600":mmq2uvzx said:
It amazes me that these guys think they can get away with this. Seriously, wtf.
Then again I am amazed that nobody seems to be able to stop them. Why not cut the line(s)?

Since they are in a country with laws, the legal system probably has to become involved before any sort of action is taken.

That's probably part of it. Although I have to say if "Dutch authorities and the police have made several attempts to enter the bunker by force, none of these attempts were successful." it seems to me the legal system is pretty much rolling. It isn't entirely clear to me if that raid is connected to the DDoS though.
 
Upvote
16 (17 / -1)

kwajkid

Seniorius Lurkius
9
If there's a list of open DNS resolvers, why can't the Tier 1s just use that list as a RBL for all DNS traffic outbound from those IPs? There's bound to be some collateral damage (as there is from all RBLs) but it's hard to imagine many DNS queries legitimately traversing a Tier 1 network anyway. If it is a problem, the owners will lock down their server pretty quickly to get off the RBL.
 
Upvote
27 (27 / 0)
TheGame":36rto2et said:
zeb600":36rto2et said:
Why not cut the line(s)?

This was my initial reaction as well. I have to think they have some kind of wireline access.

diesel generators they claim of an unknown capacity
its a bunker meant to be self a contained unit.

*edit. ooh lines to the internet. thats better.
 
Upvote
4 (8 / -4)

antiwraith

Ars Tribunus Militum
2,147
Subscriptor
kwajkid":2u6v2o0y said:
If there's a list of open DNS resolvers, why can't the Tier 1s just use that list as a RBL for all DNS traffic outbound from those IPs? There's bound to be some collateral damage (as there is from all RBLs) but it's hard to imagine many DNS queries legitimately traversing a Tier 1 network anyway. If it is a problem, the owners will lock down their server pretty quickly to get off the RBL.

That would work, as far as I know. However it seems like the poster above who suggested flooding the bunker has the best idea yet. Just enough water to short out the hardware without drowning anyone. You want them alive for the trial....
 
Upvote
12 (15 / -3)
This type of DDOS wouldn't be possible if ISPs would just filter their sodding egress traffic.

If a packet coming from inside your network has a source IP that's not in your address ranges, it's obviously bloody forged, so just drop the damned thing.

/pardon my language, but believe me, i'm struggling not to be ruder
 
Upvote
164 (165 / -1)

Jacob640

Smack-Fu Master, in training
52
Subscriptor++
jdale":fa0qxsvs said:
"Dutch authorities and the police have made several attempts to enter the bunker by force, none of these attempts were successful." Even a Dutch SWAT team failed to get in.

The link goes to the Cyberbunker site (which actually timed out on me...). Is this true or just PR nonsense?

If it's true, one wonders whether they are adding interference with police and destruction of evidence to the things they could be charged with.


Overall... this is an annoyance, but things on the internet often don't get fixed unless they break pretty bad. Maybe this is bad enough to close some of the loopholes the DDoS is using.

I think that their site may be being DDoS'D too.
 
Upvote
6 (6 / 0)

skyywise

Ars Tribunus Militum
1,541
Asinar":6ngawlo1 said:
zeb600":6ngawlo1 said:
It amazes me that these guys think they can get away with this. Seriously, wtf.
Then again I am amazed that nobody seems to be able to stop them. Why not cut the line(s)?

Since they are in a country with laws, the legal system probably has to become involved before any sort of action is taken.
If it were the U.S., getting an emergency injunction order of some sort wouldn't be too difficult.

Going after their bank accounts would be a better long-term tactic, I think. Government orders an immediate freeze of the financial accounts of the company and any principals, then files suit against the alleged perpetrators for the damages caused to the Dutch economy.
 
Upvote
15 (15 / 0)

xryancat

Wise, Aged Ars Veteran
195
So much for "DDoS is just like a diner sit-in, a form of civil disobedience. It disrupts normal business, but has no lasting harm once evacuated." (For example when Paypal and Mastercard were DDoS'd for blocking payments to Wikileaks and the FBI arrested a number of young DDoS'ers)

Guess it's different when a single entity has enough "civil disobedience" to fill up a country sized "diner"..
 
Upvote
24 (27 / -3)

vnicolici

Ars Scholae Palatinae
754
Jabrwock":vcgkgls2 said:
Couldn't they just disrupt the fibre-optic cables or knock over the satellite dishes coming out of the bunker? Cyberbunker has to be connected to SOMETHING else for this to work...

Yes, but you assume that the botnet C&Cs they use to execute this attack are hosted there. Most likely they are not.

And if that is the case, they can just buy a prepaid SIM card with a data plan, and use that to control the botnet from a laptop.
 
Upvote
20 (20 / 0)
Status
Not open for further replies.