Massive DDOS Attacks Are Now Targeting Google, Amazon, and the NRA (pcmag.com) 121
PC Magazine reports:
A new way to amplify DDoS attacks has been spotted harassing Google, Amazon, Pornhub and even the National Rifle Association's main website after striking Github last week. The attacks, which exploit vulnerable "memcached servers," have been trying to hose down scores of new targets with a flood of internet traffic, according to Chinese security firm Qihoo 360... Github was the first high-profile victim and suffered a 1.35 Tbps assault -- or what was then the biggest DDoS attack on record. But days later, an unnamed U.S. service provider fended off a separate assault, which measured at 1.7 Tbps. Unfortunately, the amplified DDoS attacks haven't stopped. They've gone on to strike over 7,000 unique IP addresses in the last seven days, Qihoo 360 said in a blog post... Gaming sites including Rockstargames.com, Minecraft.net, and Playstation.net have been among those hit...
The security community is also steadily addressing the linchpin to all the assaults: the vulnerable memcached servers. About 100,000 of these online storage systems were publicly exposed over a week ago. But the server owners have since patched or firewalled about 60,000 of them, Radware security researcher Daniel Smith said. That leaves 40,000 servers open to exploitation. Smith points to how the coding behind the attack technique has started to circulate online through free tools and scripts.
Meanwhile, Slashdot reader darthcamaro shares an article about "the so-call 'kill switch'" that some vendors have been debating: "The 'kill switch' was immediately obvious to everyone who worked on mitigating this DDoS attack," John Graham-Cumming, CTO of CloudFlare said. "We chose not to use or test this method because it would be unethical and likely illegal since it alters the state of a remote machine without authorization."
The security community is also steadily addressing the linchpin to all the assaults: the vulnerable memcached servers. About 100,000 of these online storage systems were publicly exposed over a week ago. But the server owners have since patched or firewalled about 60,000 of them, Radware security researcher Daniel Smith said. That leaves 40,000 servers open to exploitation. Smith points to how the coding behind the attack technique has started to circulate online through free tools and scripts.
Meanwhile, Slashdot reader darthcamaro shares an article about "the so-call 'kill switch'" that some vendors have been debating: "The 'kill switch' was immediately obvious to everyone who worked on mitigating this DDoS attack," John Graham-Cumming, CTO of CloudFlare said. "We chose not to use or test this method because it would be unethical and likely illegal since it alters the state of a remote machine without authorization."
So is Windows 10 to blame? (Score:1)
Or just malware being served as ads?
I'm thinking google, amazon and pornhub have measures in place to prevent massive DDOSattacks.
The NRA? probably not.
Wide-open memcached servers (Score:2, Interesting)
There are enough moron administrators on the planet to make memcached ddos possible.
Jesus wept.
Re: (Score:2)
If admin's are too lazy to configure their servers correctly after it's been all over the news for weeks that their servers are being used to DDOS other servers then they really deserve to have those servers kicked off of the internet. 1 white hat hacker could stop all of them within an hour in this particular instance because they can all be stopped from ddos'ing with the 'flush command'.
Google, Amazon, and the NRA (Score:5, Funny)
The three pillars of society.
Re: (Score:2, Troll)
You Russkie bots need to update your sarcasm algorithm.
Re: (Score:2)
Well try not to use words like "cuck" (especially as a verb) and "leftist". Nobody in the U.S. uses them.
I already have an AR-15, thanks.
Re: (Score:3)
And Pornhub... the... fourth leg.. of society.
Re: (Score:1)
Well, that might actually be the "third" leg while one of the other services is the fourth leg.
Part of the Problem? (Score:5, Insightful)
You then deserve what you get.
"Meanwhile, Slashdot reader darthcamaro shares an article about "the so-call 'kill switch'" that some vendors have been debating:
"The 'kill switch' was immediately obvious to everyone who worked on mitigating this DDoS attack," John Graham-Cumming, CTO of CloudFlare said. "We chose not to use or test this method because it would be unethical and likely illegal since it alters the state of a remote machine without authorization.""
Unethical my ass. Turn those suckers off.
Re: (Score:1)
Not vigilante justice; self defense. if your being hit by someone you don't ask them why. You defend yourself. if a out of control car is bering down on you; do you let it or do you stop it?
Re: (Score:2)
If a quarry nearby is storing large amount of dynamite without proper security, would we be worrying about the "possible impact on the legitimate activities of the quarry" or "punishing the quarry for the actions of the miscreants and the thieves"?
Your server is being used by vandals. Sucks to be you. Say bye to you buffers, we are flushing them all.
Go a step further. All public, open , unpatched servers should be given "flush all" command every six hour.
Re: (Score:2)
We need more Security by Design (Score:5, Insightful)
Put it to some good use? (Score:2)
Just saying. Better than ddoses
Re: (Score:1)
Dude, Computers don't DDoS. People DDoS. We have got to ban people from using computers.
I can see ignoring option before, but after time? (Score:5, Interesting)
That's great they managed to patch 60k out of 100k vulnerable systems...
But as the rest of the systems continue to degrade the internet - at some point don't you have to say, for the public good these servers have to be shut down externally?
It's fine and dandy to say it's not justified to disable someone else's system that is unknowingly taking part in an attack. But that ignores that all companies and people that put systems on the internet have a responsibility to monitor and keep them up to date, and if they abuse that responsibility they lose the right to complain about external kill switches being activated.
It seems like after some time if you cannot get people to be responsible, you do what you have to and maybe next time they will be more proactive about fixes.
I can see ignoring option before, but after DNS. (Score:1)
Well I remember when I had misconfigured my DNS server. The one's I were connected to didn't "kill me", they just sent a message telling me to fix it.
Kill switch (Score:2)
I haven’t seen it described but I assume the kill switch would be to point the servers at themselves or other open servers?
Re:Kill switch (Score:5, Informative)
Re: Kill switch (Score:2)
Great explanation, thank you!
Re: (Score:2)
Well to be fair if you have an memcached server that is in need of patching and you are getting your cache flushed on a regular basis as a result of your server participating in a DDOS then frankly fix your server and STFU in the meantime.
Re:Kill switch (Score:5, Informative)
Memcached implements a key-value store. The DDOS first put a large value with a known key into the server to be exploited, then sends spoofed UDP packets to it requesting the key.
Once you clear the cache, the server cannot be exploited again until a new key-value is stored. The exploit cannot use other data that might be on the server because it does not know what the keys are.
A possibly safer kill-switch would simply upload a new small value for the key to any server sending you data. It will continue to send you that value instead of the much larger one loaded for the exploit. A very small (under 50 bytes?) UDP packet is better than the very large amount of data currently being sent (I think 700kbytes?) Reduces the amplification factor to close to zero.
Re: (Score:3)
Re:Kill switch ... mod parent up! (Score:1)
Just ran out of mod points. Mod parent up!
Re:Kill switch ... make them attack each other? (Score:1)
Why not use the same technique to make these servers attack each other?
That would get the attention of the admins responsible for configuring and firewalling these servers.
(Same for spoofed origin BGP and other amplification attacks too)
I wonder if admins get paid to leave these servers misconfigured / accessible for these attacks. Plausible deniability and all that. Maybe you could slow certain fiber links enough to profit when doing High Frequency Trading on the worldwide stock exchanges? That would be wo
Why won't someone think of the... (Score:1)
What? They're harassing PornHub? ... uh... nevermind...
Why won't someone think of the
ALL (Score:3, Insightful)
Well that's because the NRA is OBVIOUSLY responsible for EVERY SINGLE shooting that happens. Just like every Cloud Flair is responsible for every act of piracy that happens, Ford is responsible for every car crash, pharmaceutical manufacturers are responsible for every single OD, every single Mullah is responsible for every act of Islamist terror, and every single white male is reasonable for pretty much everything.
It's the [Current Year] and no one has any time for reasonable discussion. Just ban everyth
Re: (Score:2, Insightful)
Re: ALL (Score:2)
Re: (Score:2)
Re: (Score:3, Insightful)
The reason the NRA is targeted is not because they are responsible for the massive slaughters we've seen lately, but unlike the other groups you mention they actively oppose ANY EFFORT TO FIX THE PROBLEM. As a matter of fact, they think the answer to the problem is more guns. This is basically like pharmaceutical companies telling you that the answer to opioid abuse is to try to get more opioids on the market to bring the prices down. If you're STILL having some cognitive dissonance here, you should try watching this. [youtube.com]
Here's a slight but very significant correction: The NRA actively opposes ineffective and counter-productive efforts to fix the problem. The talking heads either can't or won't offer any rational justification for gun control, so they resort to name-calling.
Re:ALL Bullshit (Score:2)
Re: ALL (Score:4, Informative)
Ahh, yes, of course, it's the MEDIA'S fault for mass shootings in America, not the proliferation of guns!
Well, let's see. Guns have never been more difficult to buy. Despite that, millions and millions more people have gone through the hoops to buy them over the last couple of decades, even as the rate of murder by people who USE guns is down to almost half what it was before the big spike in gun buying over the last ten years. In other words, what you're implying is actually the bunch of bullshit. Millions more guns are legally owned, and gun violence is dramatically down. If you remove four or five specific urban areas in the US (all run for decades by liberal legislatures/councils and executives, and with the tightest gun restrictions and yet very high, very localized crime problems in those spots), the US is one of the lowest murder rate countries in the developed world. But sure, it's the guns.
Re: ALL (Score:4, Insightful)
Shouldn't the rest of the nation be the same?
No. Because all of the places that most tighten down such laws see increases in murder and other crime. But nationally, such crime has been in a steady decline for thirty years, even as gun ownership has jumped by millions. Your narrative is exactly, precisely backwards.
Re: (Score:2)
Re: (Score:2)
Re: (Score:2)
Never been more difficult? I can go onto craigslist and find one tonight if I wanted.
Oh, you mean ILLEGALLY obtain. Right. That's the whole point. For years, we've been making it ever more difficult for law abiding citizens to purchase, transfer, possess, carry, or use firearms. This has absolutely no impact on people willing to break the law by transferring guns outside of the legal framework in place. Or did you mean ... using an online ad to begin a legal transaction, which is subject to current state and federal laws?
Re: (Score:2)
If you remove four or five specific urban areas ... the US is one of the lowest murder rate countries in the developed world. But sure, it's the guns.
That is way overstating your case. Removing poor black urban areas with high homicide rates will help, but even New Hampshire, the state with the lowest homicide rate, is around 1 per 100,000, comparable to big cities with visible crime problems in Australia or Europe, and far from "the lowest murder rate countries".
Yes, fear of guns in the US is greatly exaggerated. I've tried to persuade people that the US is quite safe to visit. But twisting the truth like that to say there is no gun problem ... its
Re: (Score:2)
Yes, fear of guns in the US is greatly exaggerated. I've tried to persuade people that the US is quite safe to visit. But twisting the truth like that to say there is no gun problem ... its just incomprehensible to us outsiders.
Well, it's incomprehensible to "outsiders" only if those outsiders are deliberately trying to confuse criminal acts with the existence of guns. The problems ARE concentrated in specific places. Not in "poor black urban areas" but in specific urban areas. There are plenty of places that are relatively poor, mostly black, have high gun ownership rates, and low murder rates. That's the norm, and specific murder-heavy neighborhoods in parts of Chicago, Baltimore, etc., are the exception. But the gang-bangers t
Re: (Score:2)
The problems ARE concentrated in specific places. ... that they throw the entire nation's stats way off.
The "If you remove four or five specific urban areas ... the US is one of the lowest murder rate countries" is a total fabrication.
Don't pat yourself on the back for being better than Mexico. Given that not a single state has a low homicide rate, you'd have to be removing an awful lot of "specific" areas.
And the mass-shootings are almost always in the US. Given this problem, it is crazy that a lone nutter can so easily obtain multiple semi-automatic weapons.
What is so wrong with background checks and wait
Re: (Score:2)
What is so wrong with background checks
Nothing. Which is why we have a national instant background check system. Groups like the NRA have been pleading with state governments and other agencies to participate more fully in providing information to that system. Murderers like the man in Florida a couple weeks back would have been prevented from making that purchase if authorities weren't so paralyzed by political correctness and afraid of SJWs that they won't allow the system to actually work.
Re: (Score:2)
paralyzed by political correctness and afraid of SJWs
I loathe those as much as the average NRA member, but what is the connection?
Re: (Score:2)
Re: (Score:2)
They'd already fail the background check and would be undeterred by ANY law that would limit their access to guns (because they've already made the decision to criminally acquire and carry and use them)
Sorry, you'll have to explain this. Are you trying to say that it is impossible to implement gun-control in Baltimore?
The point of gun control is to make it harder for people to get guns, not just tell them they are not allowed. That would be silly.
Especially, make it hard to obtain the most deadly weapons in the heat of the moment. It is not going to stop organised gangs, but that doesn't mean we give up.
Are you thinking that this is not possible in Baltimore? Too many i
Re: (Score:2)
Sorry, you'll have to explain this. Are you trying to say that it is impossible to implement gun-control in Baltimore?
No, I'm saying that they've already implemented very stringent gun control in Baltimore. As a result, it has long since been very difficult for people to legally possess (let alone use, for self defense) guns there. Needless to say, the rampant problem they have with crime there involves life-long criminals that really don't care, at all, about legally owning or using guns. Such laws only impact the law-abiding. As a result, virtually all of the guns confiscated from criminals and collected from crime scen
Re: (Score:2)
No, I'm saying that they've already implemented very stringent gun control in Baltimore.
Isn't the problem with local control totally obvious? They just drive to the next town. Its embarrassing having to say that.
Such laws only impact the law-abiding.
Catchy slogan, but simply is empirically not true. Take a look at the world.
Or, he could have spent $50 on stuff from the kitchen and hardware stores, and easily killed dozens of people if he could read.
You really think so? And yet, that does not happen.
Re: (Score:2, Insightful)
When the media stopped mentioning suicides in the news in the 1980s, they plummeted significantly.
The media turns the shooters into celebrities, from giving biographies about Cruz, to reading his manifesto, to fawning over the Smith & Wesson M&P 15 that he used for his massacre, to mentioning him as a red-carpet celebrity constantly, above all other news for weeks on end. What does this give kids who are already coked to the gills on Prozac or an anti-depressant, who are kicked around, and normally
Re: (Score:2)
When the media stopped mentioning suicides in the news in the 1980s, they plummeted significantly.
Completely false. Even assuming you're right about reduced mention of suicides in the 80's, this chart shows a complete lack of "plummeting" [wikimedia.org]: At best it shows about 12 deaths per 100,000 in 1980, and about 10 deaths per 100,000 in 2005.
That's a drop of 16%, which could just as easily be attributed to the reduction of leaded gasoline [wikipedia.org]. Or the invention of Internet porn. Or any number of other things.
Re: (Score:1)
Well that's because the NRA is OBVIOUSLY responsible for EVERY SINGLE shooting that happens. Just like every Cloud Flair is responsible for every act of piracy that happens, Ford is responsible for every car crash, pharmaceutical manufacturers are responsible for every single OD, every single Mullah is responsible for every act of Islamist terror, and every single white male is reasonable for pretty much everything.
That's how politics is argued these days. Any sentiment in favor of X means you are in the pay of Big X.
Re: (Score:1)
Indeed. The cretinization is continuing. The one cretin here that gave this lie is just a symptom.
Re: (Score:1)
The NRA is not responsible for every single shooting. But there's a strong correlation between their existence, and shooting.
In all countries with the NRA there is 10x the number of shootings as in ones without.
You know it's a funny thing,. According to recent historical documents, the CIA was required to take action where there was a one percent chance of causing terrorist activity. You'd think the NRA would make that mark easily.
So, they are bad dudes. Fat, ugly, gun carrying, gas guzzling vehicle driving
Re: (Score:1)
Well, there is a correlation between guns and shootings. No guns, no shootings. In other, more civilized countries, their mass murderers use bombs, trucks, and knives. We need our dead killed by other weapons. You can go to a funeral of a stabbing victim and just see the joy on the faces of the relatives that at least their loved one was not shot.
I think you will find that NRA members are among the ones that follow the law the most. They don't want to agree to any gun measure, no matter how sensible, b
Re:NRA (Score:5, Interesting)
Why would anyone target The NRA? Seems really suspicious.
It stokes up conflict among the pro-Second Amendment camps and ant-Second Amendment camps internally in the USA, and generally weakens democracy there. The right will blame it on the left, and they will all get into a massive huff over it.
International shits & giggles.
Why would anyone target Amazon, Google or Pornhub . . . ?
Why not, if someone else is footing the bill to disrupt the Internet.
Now who could that someone be . . . ?
Re:NRA (Score:5, Insightful)
Why would anyone target The NRA? Seems really suspicious.
Maybe because they oppose net neutrality?
https://www.reuters.com/articl... [reuters.com]