Multi-vendor Game Server (GameSpy) DDoS Attack

w4rl5ck writes "PivX has this security advisory about DDoS attacks using a single modem line and some game servers (i.e. Counter Strike, QuakeX, Battlefield 1942 - in short, those supporting GameSpy). Works via spoofed udp packages querying the server stats, and because udp is connectionless, the server simply answers - to the spoofed address, of course. Funny thing, isn't it? (originally found on heise.de)"

Comments

hehehe

[SuperDuG]

Kill your enemies. Kill those not on your team. Kill a server.

All in a days work.

*SNIFF* "God I love the smell of napalm^H^H^H^H^H^H severs burning in the morning"

That Explains It

[Sayten241]

I always knew that the 'D' in D-Day stood for DDoS.

Another good reason to stick to the oldies...

[saskboy]

I haven't left playing Doom II. I guess I'm safe.

This is old.

[utdpenguin]

This is jsut an adaptation of an old exploit I used to used back in the good old days. Me and some friends had hacked together an intranet version of pong back in hte early 70's. It didnt take us long to discover that if you sent multiple balls to the same court it was soon too muhc to handle and the players would all drop out, come over to your cube and beat the crap out of you.

This is the same technology they are talking about ehre.

Re:Well You Have To Give Them Credit

[goatasaur]

"Mind you I wonder how many gamers on those servers were complaining about ping times when that was happening."

Since when are people on Gamespy not complaining about ping times?