Slashdot Mirror

← Back to Domains

Domain: pastie.org

Stories and comments across the archive that link to pastie.org.

Stories · 4

  1. Github Under JS-Based "Greatfire" DDoS Attack, Allegedly From Chinese Government

    It · China · · posted by Soulskill · from the year-of-the-ddos dept. · 116 comments
    An anonymous reader writes: During the past two days, popular code hosting site GitHub has been under a DDoS attack, which has led to intermittent service interruptions. As blogger Anthr@X reports from traceroute lists, the attack originated from MITM-modified JavaScript files for the Chinese company Baidu's user tracking code, changing the unencrypted content as it passed through the great firewall of China to request the URLs github.com/greatfire/ and github.com/cn-nytimes/. The Chinese government's dislike of widespread VPN usage may have caused it to arrange the attack, where only people accessing Baidu's services from outside the firewall would contribute to the DDoS. This wouldn't have been the first time China arranged this kind of "protest."

  2. WikiLeaks Back Online After Massive DDoS Attack

    It · Security · · posted by Soulskill · from the of-barn-doors-and-horses dept. · 56 comments
    Trailrunner7 writes "Controversial document-sharing site WikiLeaks was back online Monday evening after sustaining a week-long distributed denial-of-service attack. The organization apparently received some extra capacity and assistance from Web performance and security firm Cloudfare to counter the 10 gigabits per second of bogus traffic that overwhelmed servers for numerous WikiLeaks domains and several supporters' sites. Targets included WikiLeaks' news aggregation site and its donations infrastructure, which it calls the Fund for Network Neutrality. A few days ago the organization posted a statement describing what it surmised was a DNS amplification attack. 'Broadly speaking, this attack makes use of open DNS servers where attackers send a small request to, the fast DNS servers then amplify the request, the request has now increased somewhat in size and is sent to the server of wikileaks-press.org. If an attacker then exploits hundreds of thousands of open DNS resolvers and sends millions of requests to each of them, the attack becomes quite powerful. We only have a small uplink to our server, the size of all these requests was 100,000 times the size of our uplink.'"

  3. PlayBook Jailbreak Tool Released

    Hardware · Blackberry · · posted by timothy · from the hacksaw-is-in-the-cake dept. · 60 comments
    Trailrunner7 notes that some dedicated hackers who've been working on jailbreaking RIM's PlayBook tablet have now "posted a detailed walkthrough of how users can accomplish the same task on their own. The technique requires the use of a custom tool, but otherwise is fairly straightforward. One of the researchers, known as Neuralic, posted the walkthrough to Pastie.org Tuesday morning. In order to begin the process, a PlayBook user need to first install the beta 2.0 version of the PlayBook software and then install the Dingleberry tool, which exploits a weakness in the PlayBook architecture which stems from the fact that the backups the device takes aren't signed."

  4. The Exact Cause of the Zune Meltdown

    News · Microsoft · · posted by kdawson · from the off-by-one-every-four dept. · 465 comments
    An anonymous reader writes "The Zune 30 failure became national news when it happened just three days ago. The source code for the bad driver leaked soon after, and now, someone has come up with a very detailed explanation for where the code was bad as well as a number of solutions to deal with it. From a coding/QA standpoint, one has to wonder how this bug was missed if the quality assurance team wasn't slacking off. Worse yet: this bug affects every Windows CE device carrying this driver."