3 ms·

Having not committed a 620 GBps DDos attack on a blogger I don't like lately, how on earth do you generate that much traffic without reflection or amplificatio

Having not committed a 620 GBps DDos attack on a blogger I don't like lately, how on earth do you generate that much traffic without reflection or amplification? Asking for a friend. /s

nisa 10y ago
Pure speculation but you can get and click a VPS/dedicated server with a 1Gbit/s pipe almost everywhere. Most of these machines are not regularly patched and run often vulnerable PHP software. I guess if you have a few 0-days for common stuff that is often hosted you can easily!? collect a few thousand servers that blast out traffic. Additionally more machines have faster access to the internet as fiber gets more popular, if you have a decent sized botnet that can pump out traffic on average with 50mbit or so you can also get some serious traffic, not sure about getting 620GBps, through. I guess if you mix all of these and put some amplification attacks on top it's possible.
tim333 10y ago
> There are some indications that this attack was launched with the help of a botnet that has enslaved a large number of hacked so-called “Internet of Things,” (IoT) devices — routers, IP cameras and digital video recorders (DVRs) that are exposed to the Internet and protected with weak or hard-coded passwords. http://webcache.googleusercontent.com/search?q=cache:http://krebsonsecurity.com/2016/09/krebsonsecurity-hit-with-record-ddos/&num=1&strip=1&vwsrc=0 http://webcache.googleusercontent.com/search?q=cache:http://...
imaginenore 10y ago
You hack into a bunch of servers, PCs and smartphones. You don't even need that many with modern connections.
- lightedman 10y ago
  Yup. Cable subscribers in the USA alone have enough aggregate bandwidth to knock Akamai totally offline if 620 G-bit is something they can't handle. My own uplink is 10 M-bit. 100,000 compromised connections that speed is enough for T-bit scale attacks, and compromising 100,000 machines in the new world of "Idiots of Things" is a no-brainer given almost nobody working in the IoT space even gives a nod towards security.
mrb 10y ago
620 Gbps, not GBps. Don't create more confusing between (B)ytes and (b)its. You and I know its bits, but other readers might not.
- escapologybb 10y ago
  Oh. My. God. This is in text so it is going to come across as sarcastic but I 100% guarantee you it is not, I am 100% serious. I have been making that mistake for over a decade and yes I do know the difference but I've still been writing it down wrong every single time it's come up. Why did nobody tell me before now?! I am genuinely grateful you pointed out my error, it's these little things that people judge us on when we write emails and technical documents. Please excuse me now though, the Englishman in me demands that I hide under the bed out of shame for the next 26 hours.
  - mrb 10y ago
    I certainly did not expect a response like yours. (Yes I would have totally taken this sarcastically!) I am glad I helped you learn something :)

Having not committed a 620 GBps DDos attack on a blogger I don't like lately, how on earth do you generate that much traffic without reflection or amplification? Asking for a friend. /s

nisa 10y ago

Pure speculation but you can get and click a VPS/dedicated server with a 1Gbit/s pipe almost everywhere. Most of these machines are not regularly patched and run often vulnerable PHP software. I guess if you have a few 0-days for common stuff that is often hosted you can easily!? collect a few thousand servers that blast out traffic. Additionally more machines have faster access to the internet as fiber gets more popular, if you have a decent sized botnet that can pump out traffic on average with 50mbit or so you can also get some serious traffic, not sure about getting 620GBps, through. I guess if you mix all of these and put some amplification attacks on top it's possible.

tim333 10y ago

> There are some indications that this attack was launched with the help of a botnet that has enslaved a large number of hacked so-called “Internet of Things,” (IoT) devices — routers, IP cameras and digital video recorders (DVRs) that are exposed to the Internet and protected with weak or hard-coded passwords. http://webcache.googleusercontent.com/search?q=cache:http://krebsonsecurity.com/2016/09/krebsonsecurity-hit-with-record-ddos/&num=1&strip=1&vwsrc=0 http://webcache.googleusercontent.com/search?q=cache:http://...

imaginenore 10y ago

You hack into a bunch of servers, PCs and smartphones. You don't even need that many with modern connections.

lightedman 10y ago
Yup. Cable subscribers in the USA alone have enough aggregate bandwidth to knock Akamai totally offline if 620 G-bit is something they can't handle. My own uplink is 10 M-bit. 100,000 compromised connections that speed is enough for T-bit scale attacks, and compromising 100,000 machines in the new world of "Idiots of Things" is a no-brainer given almost nobody working in the IoT space even gives a nod towards security.

mrb 10y ago

620 Gbps, not GBps. Don't create more confusing between (B)ytes and (b)its. You and I know its bits, but other readers might not.

escapologybb 10y ago
Oh. My. God. This is in text so it is going to come across as sarcastic but I 100% guarantee you it is not, I am 100% serious. I have been making that mistake for over a decade and yes I do know the difference but I've still been writing it down wrong every single time it's come up. Why did nobody tell me before now?! I am genuinely grateful you pointed out my error, it's these little things that people judge us on when we write emails and technical documents. Please excuse me now though, the Englishman in me demands that I hide under the bed out of shame for the next 26 hours.
- mrb 10y ago
  I certainly did not expect a response like yours. (Yes I would have totally taken this sarcastically!) I am glad I helped you learn something :)