4 ms·
Is there any research into making attacks like these less feasible? I think it's rather disconcerting that given a large enough botnet, anyone could take anyone
by jjeaff 6y ago
Is there any research into making attacks like these less feasible? I think it's rather disconcerting that given a large enough botnet, anyone could take anyone offline that doesn't have the money and resources to fight it.
- deleted 6y ago[deleted]
- Scarbutt 6y agoIf you don't have money or other valuable resources, you won't be a target of this large botnets.
- dirtnugget 6y agoWell imagine somebody trying to push back a competitor which may be a young startup which is threatening to take part of their cake.
- Scarbutt 6y agoIf the young startup is a threat, then it has real value no?
- mixedCase 6y agoWhich might be cut by annoying all their customers. And there might not be value (now) but it might be cheaper to just DDOS any potential threat rather than risk competition. Of course, that's under the belief one's above the law.
- gxon 6y agoNo? A big player might decide to preemptively squash ANY startup that could possibly become a threat while it's cheap and nobody else cares enough to notice.
- dirtnugget 6y agoPotential can be worth more than assets
- jjeaff 6y agoThat's not true. There are lots of enormous botnets that have been deployed against people like Krebs on security who are not particularly wealthy but have important information to share.
- close04 6y agoIngress filtering (source IP verification) would mitigate by orders of magnitude such an amplification attack by not allowing spoofed packets to leave the network. People doing a better job with securing their internet exposed servers would also help.
- Nextgrid 6y agoI think we need more liability here, both for the manufacturers of insecure devices as well as the equivalent of “gross negligence” for incompetent sysadmins.
- throwaway0a5e 6y ago>Is there any research into making attacks like these less feasible? Yes. Such services are developed by most, maybe all, the major CDN and CDN-like providers because they can sell DDOS protection/prevention to their customers. It's an active area of cat/mouse between the people selling the services and the people selling the DDOS attacks.