Slashdot Mirror

He said that it was interesting to read about the DDoS attack in the press, when it was he that was managing and re-directing the traffic from the DDoS attack.

So yes, according to my sources, which I deem to be reliable, the DDoS attack did happen. For the record though, every single other claim SCO has made I believe to be complete BS.

I work in the Canopy Group office buildings at another (non-evil) company. We're all serviced by Center7 and the last time there was the confirmed/acknowledged DDOS attack we felt it hard. Getting to hosts outside of the building was very difficult all day.

No hiccups today. Center7 did promise last time that they could and would isolate everyone else from SCO, so there is another explanation, but...

...the privaty equity firm that is the controlling shareholder of SCO (I forget its name) managed to persuade another investor of the likelihood of a multimillior dollar settlement from big names.

The name you're looking for is the Canopy Group.

The /. crowd is generally unable to affect stock prices, but if we (a) start a campaign to hurt SCO sales and, even better (b) isolate the leading shareholders of SCO, figure out what other business interests they have, and boycott the whole lot of them, we're likely to have justice prevail.

Here's a list of the Canopy Group's portfolio companies, including some that should know better and might be encouraged put some pressure on their investors to stop this nonsense. Do you do business with these companies or recommend their products? If suing their partners and customers is just part of "the Canopy Way" should you or your company worry about litigation from them next? If you're an investor or employee and Canopy loses, should you worry about your stocks or your job? Maybe it's time to start the "reverse slashdot effect."

Altiris
Axiom Press
Center7/Inc.
Cerberian
Cogitoinc
Communitect
Data Crystal
Devicelogics
DirectPointe
Fat Pipe
Geolux
helius
homepipeline
iArchives
Industrial Training Zone
LearningOptics
Linux Network
luxul
MaxStream
Mi-Co
mti
MyFamily.com
Perimeter Labs
PlanetEarthTools
Power Innovations
SCO/Caldera
Trolltech
Tuglet
viawest
Wrenchhead

The hosting company is Center 7, which is partially or fully owned by Canopy Group. Canopy Group is the largest shareholder in SCO.

BTW, Center 7 and Canopy sued Computer Associates recently. They settled for $40 million. Those Canopy Group fuckers are sue-happy pricks. "Contracts are what you use against people you do business with", indeed.

CA says settles Canopy Group, Center 7 litigation

Well, sort of anyway. Center 7 is actually their hosting company, but Center 7 is one of Canopy's main companies, in fact it may be one of the only ones that really makes money which Canopy then uses to fund all the other ones.

So while Centershift may want to change ISPs, Canopy will probably sue them if they do. Hell, they may even sue them if they don't. That's what seems to happen to anyone that has a contract with a Canopy company.

T3? That's sad.. (hehe)

Most of the bigger lines I've delt with, it's a fixed rate for connection itself, a dedicated bandwidth amount, and a burstable amount.

Like, we're dedicated to several Gb between our various facilities. That's what we pay for every month, if we use it or not. If we exceed that amount, we pay a higher amount for the overage. If we use less, well that's our tough luck.

If they're in a colocation facility (like most good companies are these days), they probably have multiple lines coming in from different providers, and have at least a 100Mb/s uplink. That's the prefered method these days. It saves a whole lot of money in actually keeping a physical room going at your facility, and having copper or fiber run to you.

A little research can give you a hint of where they live.

sco.com :

216.250.140.112

nameservers:
ns.calderasystems.com 216.250.130.1
ns2.calderasystems.com 216.250.130.5
c7ns1.center7.com 216.250.142.20
nsca.sco.com 132.147.210.253

MX:
mail.ut.caldera.com 216.250.130.2

calderasystems.com is 216.250.140.125

216.250.128.0/20 (everything but nsca.sco.com) is owned by 'NFS", which has nameservers of:
ns1.canopy.com 216.250.129.1
c7cs1.center7.com 216.250.142.20
c7ns2.center7.com 166.70.45.162
c7ns3.center7.com 216.250.142.14

166.70.0.0/16 is owned by XMission, which has the nameservers of:

ns.xmission.com 198.60.22.2
ns1.xmission.com 198.60.22.22
ns2.xmission.com 207.78.169.150

The 198.60.22.0/24 block is owned by Xmission, who only has the /24 from WestNet, who has the two /16's containing that block.

The 207.78.169.0/24 is one of two /24's owned by ShreveNet in Louisana, which is part of 4 /16's owned by UUNet.

My guess would be that SCO lives with Center7. If you go to http://center7.com/, you'll see a whole lot of PR crap, that sounds like every other colo provider's crap. They are nice enough to say that their connectivity is an OC-48 from XO Communications, and an OC-12 with Qwest (which is what I see on my traceroute to sco.com), and two T3's that aren't active. They also say something to the effect that their customers are attached "at 10-100", which I'd take to mean ethernet (like, duh).

I'd have to say that xmission.com is just someone being nice enough to provide a home for a nameserver.

I wouldn't expect that too many people can flood their OC-12 off the net, unless it's already fairly utilized. Since I've never heard of Center7, I wouldn't suspect that they are.

The best, and most likely to hurt them is if there was 100Mb/s of traffic filling up their ethernet connection to Center7's switch.. So, don't try to push 600Mbs in, it only takes 100Mb/s.. :)

I know, I know, there are possibilities that they are rather reinforced. What if they have some spiffy hardware in front of their server? They could be doing all kinds of wild load balancing. But if I remember right, this was the company that was hurting for money and this is their last-ditch effort to make get IBM to buy them. Honestly, it looks like an old Linux box that no one ever bothered to update Apache on. :)

user@home (/home/user) telnet sco.com 80
Trying 216.250.140.112...
Connected to sco.com.
Escape character is '^]'.
GET ? HTTP/1.1

HTTP/1.1 400 Bad Request
Date: Thu, 12 Jun 2003 06:06:47 GMT
Server: Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 PHP/4.0.3pl1

It would seem to me that any of a few thousand script kiddies out there with a few exploits could get in, or anyone in control of a few dozen DDoS slaves could make their site rather quiet.

Now my disclaimer.. I don't suggest doing it.. It's no fun to have your pager go off at 4am because som

Hmm... You are correct. I did a header request to http://www.sco.com/ and I got:

HTTP/1.1 200 OK
Date: Sat, 31 May 2003 22:13:30 GMT
Server: Apache/1.3.14 (Unix) mod_ssl/2.7.1 OpenSSL/0.9.6 PHP/4.0.3pl1
X-Powered-By: PHP/4.0.3pl1
Connection: close
Content-Type: text/html

This does not report an OS, only says Apache version is Unix. Since this does not provide an OS, Netcraft must use other means such as nmap to determine that. So, it is possible that there could be a Linux firewall which Netcraft is reporting.

Further research shows that their site is hosted at center7.com. center7 website itself is hosted on RedHat. Both companies are based in Lindon, UT, and have some kind of joint venture deal since last year. This also explains their move from PacBell/SBC/PBI hosting to center7 in or around August last year.

Anyway, both www.caldera.com and www.sco.com seem to be resolving to the same subnet (different IP addresses) and both routing through 216.250.136.74 which is also likely running a firewall. A netcraft www.caldera.com query shows the exact same server setup as the one for www.sco.com.

Judging from above, it is possible that they have some weird network setup to hide their SCO servers as much behind Linux firewalls and routers as possible but I see it as very unlikely. I think it's more than likely that center7 just put all SCO's websites on Linux boxes.

Ah, so friend Google, who are the the Canopy Group? Aha. Ray Noorda. http://www.canopy.com

Ok, so here is some "blah" from their web site....

Canopy Group Overview :: Canopy Group has been categorized as a technology accelerator and a dynamic operating company. Funding and influencing emerging technologies and then providing shareable management resources across its portfolio of companies is what Canopy Group does best. Originally founded in 1995, Canopy Group continues to operate by founder Ray Noorda's vision of "co-opetition," where synergies across the portfolio are optimized at the same time that each company develops independent market success.

ie. Hit any in the Canopy Group and you hit'em all. ie. If SCO makes a sucess of this, the rest will share the "management resource".

So who is in the Canopy Group?

• Altiris--Intuitive Manageability. A complete line of web-enabled IT solutions used in managing the corporate IT resource lifecycle.
• AvenueMe--Personal Desktop Shopping. Select and deliver special offers and gift ideas tailored to your interests and gift-giving needs with Desktop Personal Shopper.
• Axiom Press--CultureGrams and More. CultureGrams and other publications focused on serving the needs of elementary, secondary, and collegiate educators and their students.
• Center 7--Host, Manage, Succeed. Managed hosting solutions and painless enterprise management with rapid-deployment solutions.
• Cerberian--Powering Internet-Enabled Products and Services. Internet management solutions that help businesses improve productivity, free up bandwidth, and control Internet access.
• ClearstoneHealth--Improving Healthcare. Technologies to improve healthcare through e-training.
• Cogito--Harness the Power of Your Knowledge. Making knowledge management the essential productivity tool in organizations with complex information systems.
• Communitect--Intelligent Mobile Messaging. Meeting the needs of an increasingly mobile population with simple-yet-powerful mobile management that delivers personal enterprise data to any mobile device
• DataCyrstal--Rapid Indexing of Video Content. Providing flexible solutions for advanced video analysis.
• DeviceLogics--Providing DOS-based solutions.
• Digital Harbor--Correlate, Collaborate, Cross Boundaries. Business front office integration that puts the focus on people, not infrastructure.
• DirectPointe--Managing Your Technology. Enabling businesses to leverage technology by making it simple, manageable, and affordable and allowing you to focus on managing your business.
• EBIZ--We're About Solutions. Providing multi-faceted computing solutions to customers nationwide.
• FatPipe--Low Cost, Highly Redundant Internet Access. Leading-edge technology that provides highly redundant, reliable, and high-speed Internet access for deploying mission critical applications over wide area networks.
• Geolux Communications-Enlightening The World. Geolux provides both enriching content and the learning platform to deliver it.
• Global Mechanical Monitoring
• Helius--Satellite Powered IP Networks.Efficient, secure, and reliable delivery of broadband IP over satellites and local area networks.
• HomePipeline
• iArchives--A New Page in Information Retrieval. The software application that makes finding the valuable details in your data almost effortless.
• Industrial Training Zone--Interactive Industrial Training. Content designed specifically for apprentices and technicians who lack the specialized training required to troubleshoot complex systems utilizing motion control devices.
• JanusLogix--Elevate, Integrate, Generate. Generating a new game by building a web services nanosystem that allows any application service to integrate, elevate, or generate application functionality.
• Linux Networx--Powerful Cluster Technology. Simplied cluster computing, with an end-to-end approach that makes cluster technology more powerful and easy to use for commercial and scientific high performance computing
• Luxul--The Wireless Wave. Patented solutions for indoor, outdoor, fixed, and mobile wireless computing.
• MaxStream--Smart, Wireless Connections. Wireless OEM modules and stand-alone radio modems that provide long range, low power, and advanced networking capabilities
• Mixerz, First Thursday is a national network of member entreprenuers, executives and investors. The organization provides a regular forum for the exchange of ideas, the formation of strategic partnerships, and the fostering of business relationships.
• Mi-Co--Handwritten forms for Mobile Professionals. Innovative end-to-end solutions enabling the wireless capture, storage, communication, and use of forms-based and free-form handwritten data.
• MTI--Innovations in Enterprise Storage. Reliable, integrated, enterprise-wide online storage and backup solutions for customers requiring mission-critical, high-performance storage.
• MyFamily.com--Connecting Families and Generations. The leading network and largest of its kind for connecting families and generations on the Web.
• North Face Learning--We provide students with a high aptitude for computer science a better, faster, and cheaper way to earn a degree.
• Perimeter Labs--Secure Data Solutions. Inventing and bringing to market information security technologies
• Planet Earth Tools--Compact, Versatile, and Powerful. Award-winning, patented handheld tool technologies.
• Power Innovations--The Standard for Perfect, Dependable Power. Committed to total power independence with alternative means of generation, energy storage, conversion, and management of perfect power
• SCO--Smarter. Better. Faster. Providing software solutions for small- to medium-sized businesses and replicated branch offices
• Smart Chip Technologies--Loyalty Program Management. Patent protected loyalty application for use in the smart card and wireless environment.
• SurfChina--Enabling eBusiness. Developing business solutions that help Chinese companies participate in global eBusiness.
• TrollTech--Software that Makes Sense. Enabling professional, efficient, portable and maintainable GUI applications quickly and easily.
• Tuglet--Marketing Powertools. Providing useful web-based communication tools for corporate marketing professionals and home based or small business people.
• Vultus--The Look of Web Services. Delivering web apps that are feature-rich, cost effective and platform independent
• WrenchHead--Automotive Operations Solutions. Providing innovative technology and services to the Automotive Market to further lower operating costs, enhance profitability, and accelerate growth

Oooh looky looky, Trolltech! So when are they going to be forced to sue for $1bn?