5 ms·
DNS reflected attacks need to be addressed NOW. The problem is getting worse every day. You can rent botnets that exploit this for as low as $5 on places like
by codexon 14y ago
DNS reflected attacks need to be addressed NOW.
The problem is getting worse every day. You can rent botnets that exploit this for as low as $5 on places like hackforums.
Authorities won't deal with your problem unless you are as big as Mastercard.
Your host will likely ask you for protection money (ddos protection is incredibly expensive) or just kick you out to protect their other customers.
The sad thing is that when people talk about it on a hosting forum, the number one response is "who did you piss off"?
- rdl 14y agoThis is why I plan to be off-world by the time the average 14 year old kid is able to create a serious bioweapon in 15 minutes by following instructions from online.
- mr_spothawk 14y agoHells Yes. I'm right there with you.
- eksith 14y agoWe're already there, but it's not 15 minutes. You can buy bio-hacking equipment fairly cheap (maybe not allowance cheap, but "Hey, mom, dad, can you buy me a chemistry set?" cheap) including those used for DNA replication. I don't know how well they've tightened specimens for scientific study, but there was a scandal not too long ago where anyone who bothers to fill out paperwork could order anthrax and smallpox for research purposes from a lab.
- jrkelly 14y ago> but there was a scandal not too long ago where anyone who bothers to fill out paperwork could order anthrax and smallpox for research purposes from a lab. There's lots of problems in this post. But the idea that anyone could "order smallpox" is totally false. A journalist synthesized 1 gene from smallpox which is the scandal you were referring to. 1 gene != smallpox.
- dasil003 14y agoAre you planning on joining the die-on-Mars mission?
- rdl 14y agoI believe with reasonably advancing medical care, I could live 1979-2100 fairly plausibly. At some point in the mid-21st century, I could see "downloading of consciousness" as a likely option. The question would be whether moving to Mars in 2030-2060 would reduce one's access to downloading (seems unlikely) or if it is higher risk and/or lower access to life extension to make it less likely you would live to either downloading point or substantial life extension through biological means. With downloading, I think either earth orbit or deep space would be more interesting than Mars, though. Mars level latency, assuming Earth retained most intelligences, would be a horrible compromise.
- dublinben 14y agoHow will DNS resolvers be changed to prevent this? Doesn't removing this feature undo an important function of the DNS system?
- mdpye 14y agoYou don't change the resolver. ISPs need to drop UDP packets leaving their networks where the (spoofed) headers declare that they did not originate there. That way an attacker can't spoof the originator to have the responses directed at someone else. Edit: clarity on actual vs declared origin
- dasil003 14y agoIt also seems like a tractable problem in that upstream providers can test for the vulnerability and shut down uplinks for non-compliant customers.
- jiggy2011 14y agoThat would cost some amount of money for an ISP to implement, and you need to get the major ISPs (most of them are not in the USA, many are in places like China) to all apply it.
- 16s 14y agoLinux or BSD based DNS servers can rate limit with iptables, pf, etc. to mitigate this a great deal.