Patrick Gray from the Risky Business podcast appears to have the inside scoop on what actually happened. Here's his latest sequence of tweets (link references

Patrick Gray from the Risky Business podcast appears to have the inside scoop on what actually happened. Here's his latest sequence of tweets (link references below): "The things I'm hearing about #CensusFail are absolutely mind boggling. I'll be on @theprojecttv tonight talking about it. Geez, ya'know, rebooting your firewall when you haven't sync'd your ruleset to your secondary is kinda dumb, ABS. Also, relying exclusively on geoblocking from your ISP instead of actual, you know, REAL DDoS mitigations is also pretty fail. As is declining your upstream provider's offer to help with said mitigations to save money. The funniest part? They detected exfil, thought the DDoS was a distraction. That's when they pulled the pin. Was a false positive. This also explains why ASD are involved -- they're running incident response on a fucking false positive! This can't get any more hilarious! .@OaaSvc There was no exfil. It was their own reporting traffic to offshore that tripped the alerts. You can't make it up. There's more: that "router" that went down for a few minutes? That was likely the firewall reboot. Secondary didn't kick in b/c no rules. They didn't need to fix it.They needed to clear the state table because they had a whopping 2gbps of ICMP and DNS reflection traffic inbound Please, oh please, read this sequence of Tweets all at once. Then sit back and let your mind BOGGLE." https://twitter.com/riskybusiness/status/763581261487091712 https://twitter.com/riskybusiness/status/763581261487091712 http://risky.biz/censusfail http://risky.biz/censusfail // https://twitter.com/riskybusiness/status/763605906047107073 https://twitter.com/riskybusiness/status/763605906047107073