12 ms·
Relevant (or at least a-propos) post by Bruce Schneier, from a month ago: "Someone Is Learning How to Take Down the Internet" https://www.schneier.com/blog/arc
by scrollaway 10y ago
Relevant (or at least a-propos) post by Bruce Schneier, from a month ago: "Someone Is Learning How to Take Down the Internet"
https://www.schneier.com/blog/archives/2016/09/someone_is_lear.html https://www.schneier.com/blog/archives/2016/09/someone_is_le...
Edit: And to be clear: I don't mean to imply there's any connection :)
- jgrahamc 10y agoReally? It's unclear there's any connection between that vague article and Dyn's problems today.
- FartyBumMcPoops 10y agohttp://dyn.com/blog/post-mortem-attack-to-dyn-standard-dns-nameservers/ http://dyn.com/blog/post-mortem-attack-to-dyn-standard-dns-n...
- ljosa 10y agoLet's hope they update that page after today's incident.
- curiousgal 10y ago>We don't know who is doing this, but it feels like a large nation state. China or Russia would be my first guesses. Why not the USA?
- manojlds 10y agoWith the elections coming, USA would be on the top of my list.
- guccifer42 10y agoGood afternoon, Colonel Ivanoff.
- tbarbugli 10y agowhy?
- toxican 10y agoBecause America is an Orwellian hellhole, gawd, haven't you read animal house 84?!
- che_shirecat 10y agothe number of people missing the sarcasm in your post is worrying
- grzm 10y agoBecause it's being down voted? I think any down votes are more likely because the comment doesn't add substantively to the conversation and is distracting given other recent threads.
- masukomi 10y agoum. if you are basing your logic on orwelianness then the England should be your your top candidate. massive monitoring of the populace, severe restrictions on the ability to carry anything that is vaguely pointy or goes bang, poor freedom of speech rules (relative to the US).... I love England but as far as orwellian societies go, you can do notably worse than the US.
- oneeyedpigeon 10y agoAs someone living in England, I can confirm that a) we are an extreme surveillance society, which the general population neither really understands, nor cares about b) the vast majority of us are very grateful we don't have (legalised) guns on the streets, and we suffer from a much lower homicide rate as a result
- tbarbugli 10y agoI did, as far as I remember these book are all about USSR ;)
- amalcon 10y agoIt doesn't make a whole lot of sense for the USA to take down the internet, as they benefit the most from it. A significant fraction of that economy is based on it, much larger than in the cases of China and Russia. It would be like the owner of a coal mine campaigning for a carbon emissions tax: maybe there's something we don't know, but from the information we have it seems unlikely. Note that this wouldn't rule out the USA as such. First, it could be a longshot preparedness thing, with no expectation that it would ever be used. Second, they could be red-teaming the thing (looking for weaknesses so that they can arrange for them to be shored up). In either of these scenarios, it's no less likely that the USA would be doing it than anyone else. If you assume that whoever is doing this is planning to use their knowledge, however, the economic argument makes the USA less likely to be involved.
- falcolas 10y agoFor either of your cases, I can't imagine the value of having it last this long, or even be this severe. The impact on the economy and trust in a infrastructure company is too high. I'd be more willing to put my money on someone attacking an entity downstream who is normally immune to DDOS attacks of this size.
- barkingcat 10y agoThere are many types of actors even within the USA nation-state / government. For example, if a particular part of the government got wind of a data dump about to be released by another nation-state or independent actor (for example, a leak of some kind) - I think some parts of the USA government that possesses the ability to do so wouldn't hesitate to take down dns to the entire internet to avoid another similar data leak to the Snowden dump. Be really wary of attributing intent: you do not know who will benefit the most from taking down certain services. To claim that the US benefits from the internet so much that it wouldn't do certain actions to protect itself from certain types of harm is shortsighted. Even my example could be really wrong, but the idea is that nobody really can say - "oh the internet is too important to xyz, they'll never do anything!"
- omni 10y ago
- AsyncAwait 10y agoThe usual thinking goes something like; well, the US created the internet so why would they want to take it down? Yes, NSA spies and all that, but they need the internet up to do that and also as bad as NSA is, it's nowhere near as bad as China or Russia where they ... (ranges from censorship to eating babies alive)
- rdtsc 10y ago> The usual thinking goes something like; well, the US created the internet so why would they want to take it down? To pin it on someone else? "17 Intelligence agencies told me Russia hacked our DNC thing" (Clinton). So maybe it is now "Oh look they took down the whole internet as well".
- AsyncAwait 10y agoOf course, I just tried to explain how the thinking behind the sentiment that it obviously isn't the U.S., not saying I agree with it.
- mzw_mzw 10y ago>To pin it on someone else? That's... kind of conspiratorial thinking? Would you cut off your own hand so you could blame it on someone else?
- plasticchris 10y agoIt's called a false flag operation, and does happen.
- mzw_mzw 10y agoAnd the ratio of false flag operations to false accusations of false flag operations is about 1:99. Lots of unlikely things "do happen," but if that's the immediate explanation you reach for you're going to be wrong most of the time.
- ckozlowski 10y agoBecause we are not indiscriminate like that.
- deleted 10y ago[deleted]
- macawfish 10y agoWho is "we"? The u.s. government is a conglomerate of interests, organizations, individuals... Many of whom are quite indiscriminate. I'm not at all proposing that the U.S. was involved here. I'm questioning the simple identification of the U.S. government with the word "we", and the corresponding assumption that this institution is integrated in a carefully discriminating way...
- mzw_mzw 10y agoWhy the USA?
- balls187 10y agoRussia retaliating for the US taking out the ESA Mars Drone.
- komali2 10y agoI thought, "first actual space battle! Neat!" Then I felt horrible.
- firstworldman 10y agoWhat's this about? Confusing premise. Got any links?
- funkyy 10y agoI assume it was just a joke...
- balls187 10y agoNot a joke, just conjecture. Some NPR story about US Cybercommand responding to Russian cyber attacks, 'at place and time of our choosing.' 'Some you might hear about. Some you might not.' FFWD to a couple days ago, NPR story about a botched European and Russian lander. Today, US Eastern Seaboard is seeing connectivity disruption due to DDoS attacks. * Unwinding the stack, the latest news is these DDoS attacks are not likely state sponsored. Russia pulling off a coordinated attack that soon after and in response to my theorized US retaliation seems unlikely. US attacking a joint partnership between Russia and Europe civilian space program seems unlikely.
- briandear 10y agoWhy would they attack themselves?
- WorldMaker 10y agoFrom the context of the paper, because the USA could just send a three-letter-agency agent of some sort to Dyn, a US-based company, and ask what their infrastructure looks like? (Presuming of course some weird scenario where they weren't already tracking it, which seems unlikely.)
- nickbauman 10y agoPrediction: A massive, sustained attack will occur on key US Internet infra on election night in an attempt to debase the US election results.
- mtgx 10y agoIt's okay. James Comey, the FBI chief, said the US electoral system is such a mess, it would be too hard for an attacker to hack it or damage its integrity in any way. It's all good. https://www.techdirt.com/articles/20160912/16553435504/fbi-director-our-electronic-voting-system-is-such-complete-mess-it-would-be-difficult-to-hack.shtml https://www.techdirt.com/articles/20160912/16553435504/fbi-d... Of course, he said nothing about internal rigging: https://twitter.com/TweetBrettMac/status/789372518436052992 https://twitter.com/TweetBrettMac/status/789372518436052992
- MaxfordAndSons 10y agoThis is terrifying. Thankfully I don't think much actual voting infra is network reliant. But it could probably delay the results from being finalized for days, and allow Trump to spew further allegations of rigging. Though if they targeted electric grid, water, and public transport, starting early in the day and choosing the regions by their populations political leaning, it could easily have an effect on the result itself.
- nickbauman 10y agoHahahaha. For sure it's not supposed to be network reliant. But from my experience working on critical infra, even things like power grids and rail systems, this is almost never the case.
- lxknvlk 10y agoprediction: in some time they will probe Google. That will be fascinating.
- jbyers 10y agoI think it's safe to assume they've been probing Google for 15+ years. One documented example: https://en.wikipedia.org/wiki/Operation_Aurora https://en.wikipedia.org/wiki/Operation_Aurora
- corvus_sapiens 10y ago> The Department of Homeland Security told CNBC that it is "looking into all potential causes" of the attack. http://www.cnbc.com/2016/10/21/major-websites-across-east-coast-knocked-out-in-apparent-ddos-attack.html http://www.cnbc.com/2016/10/21/major-websites-across-east-co... Is this par for course for all large DDOS attacks or did something tip them off?
- krinchan 10y agoMore like for the first time in a long time, serious negative economic impact is occurring. I sincerely wish this was a wake up call, but it won't be.
- 464192002d7fe1c 10y agoFrom what I know of the situation (don't trust me, I'm not going to offer citations or sources), this attack wasn't particularly large in terms of gigabits/second. It was, however, very large in terms of economic impact. I would assume that when a large number of big enterprise-y things go down, HSI takes notice. When other providers get attacks that are 20x larger (gbit/sec), but have much less widespread impact and impact on less enterprise-y things, they don't care so much.
- 0xmohit 10y agoMaybe they are also using deep learning.
- superzadeh 10y agoMaybe some Deep Learning experiment actually created Skynet and it is probing us.
- AmrEldib 10y agoLet's try to put this DDoS attack in some context aside from the technical part. As @scrollaway mentioned, 6 weeks ago, Bruce Schneier posted that several companies told him that they're detecting attempts to probe their networks and find ways to bring it down https://www.schneier.com/blog/archives/2016/09/someone_is_lear.html https://www.schneier.com/blog/archives/2016/09/someone_is_le... Now let's look at the progress of events: - Hillary Clinton's personal email server was hacked a while ago. - A lone hacker published a document obtained by hacking the DNC servers. The document includes opposition research on Donald Trump and how Hillary can attack him in the election. - Wikileaks published emails obtained by hacking the DNC - US intelligence agencies confirmed that Russia was behind the DNC hack - It was reported that the CIA is starting a cyber attack against Russian targets. http://www.nbcnews.com/news/us-news/cia-prepping-possible-cyber-strike-against-russia-n666636 http://www.nbcnews.com/news/us-news/cia-prepping-possible-cy... - This is happening while the war in Syria and Iraq is growing. The Russians are there to "fight ISIS" but they have deployed an air defense system even though ISIS doesn't have any air force. - Russia's only air craft carrier is trespassing through UK waters to get to Syria in a show of force that doesn't really add anything to their military capabilities there. https://www.theguardian.com/world/2016/oct/20/russian-fleet-aircraft-carrier-admiral-kuznetsov-syria https://www.theguardian.com/world/2016/oct/20/russian-fleet-... https://www.theguardian.com/world/2016/oct/19/convoy-of-russian-warships-on-route-past-british-isles https://www.theguardian.com/world/2016/oct/19/convoy-of-russ... - Finland (yes, Finland) is increasingly worried about Russia. They violated their air space, and they're questioning Finland's independence. Finland shares a long boarder with Russia. http://www.businessinsider.com/r-finland-sees-propaganda-attack-from-former-master-russia-2016-10?op=1 http://www.businessinsider.com/r-finland-sees-propaganda-att... - US ships were attacked near Yemen after they're bombed some targets the belong to the rebels. https://www.theguardian.com/us-news/2016/oct/13/us-enters-yemen-war-bombing-houthis-who-launched-missiles-at-navy-ship https://www.theguardian.com/us-news/2016/oct/13/us-enters-ye... - US election is in 3 weeks and Donald Trump is openly in love with Putin. Trump questioned the benefit of NATO which is the basis for Europe stability after the 2nd world war. Say Hello to World War III, everybody!
- heurist 10y agoI just want to sell my software, why does everyone have to fight?! Thank you for these links. I'm trying not to get wrapped up in conspiracies but am increasingly worried by the mounting conflict. I'd love to hear a calm, reasoned response from someone more knowledgable than me on these topics.
- asclepi 10y agoIf this is supposed to be "taking down the internet", then I'm not impressed. Using cached DNS still gives access to any service. I'm even typing here on HackerNews. If this is another practice run, then I'm still not impressed. Taking down one provider is not that hard. Good luck finding the resources to do this DDoS to ALL large DNS providers out there. Maybe it's not really fair to link to that post every time a DDoS with more than average payload happens. Especially since the post doesn't mention any specifics, because well, "protect my sources". It's like the "buy gold now" guy starring in the 2 AM infomercial predicting an economic recession within the next 5 years, without adding what the exact cause is going to be. He is probably going to be right, but that doesn't make him a visionary.
- drinchev 10y agoI work as a freelancer and today I didn't get paid and that's just me. Companies probably lost millions today. By just one DDoS to one DNS provider. Yeah it's not the whole Internet, but how do you define "taking down the Internet" anyway. Is it every connected computer or just a huge amount of interconnected big websites? Because the latter is happening right now.
- almostimplement 10y agoSchneier: "I have received a gazillion press requests, but I am traveling in Australia and Asia and have had to decline most of them. That's okay, really, because we don't know anything much of anything about the attacks. If I had to guess, though, I don't think it's China. I think it's more likely related to the DDoS attacks against Brian Krebs than the probing attacks against the Internet infrastructure, despite how prescient that essay seems right now. And, no, I don't think China is going to launch a preemptive attack on the Internet." [1] https://www.schneier.com/blog/archives/2016/10/ddos_attacks_ag.html https://www.schneier.com/blog/archives/2016/10/ddos_attacks_...