> DDoS often uses DNS Reflection to amplify the bandwidth of the attack. The source of the attack will be a) distributed b) not the actual attackers. This is t

> DDoS often uses DNS Reflection to amplify the bandwidth of the attack. The source of the attack will be a) distributed b) not the actual attackers. This is true, but DNS reflection is dependent on aloof admins running open DNS resolvers. To say they're "not the actual attackers" when they're enabling the attack is not entirely accurate. At the very least the target of the attacks, which is obviously not obscured, is meaningful information. EDIT, disclosure: Arbor Networks (one of the partners here) is my employer. I am not a PR guy, my opinions are my own, yadda yadda etc.