Slashdot Mirror


DDoS for Fun and Profit

First there's the Microsoft worm, reported earlier, which in addition to all the other damage has apparently knocked Microsoft's Windows XP activation servers (and Bank of America ATMs) off the net. Then we've got a report about the ongoing demise of DALnet, perhaps not the way we expected it to go. And Canada discovers a risk of online voting.

20 of 424 comments (clear)

  1. Re:Dalnet Article is a JOKE. by Wizzu · · Score: 4, Informative

    It's dated January 24. Nothing about April.

    DALnet has had practically no public servers available since sometime early December, this thing is no joke.

  2. Re:For Fun and Profit? by Anonymous Coward · · Score: 5, Informative

    I believe the news clipping was labeld in such a way to make a play off Aleph1's famous phrack magazine article describing buffer overflows, which was titled "Smashing the Stack for Fun and Profit".

    za

  3. Re:Dalnet Article is a JOKE. by EchoMirage · · Score: 4, Informative

    Does anyone ever check the dates on articles? Or the content?

    Uhh...the Slashdot article on the sale of DALnet was a joke, but the DDoS attack on DALnet is very real. Actually, several IRC networks have been getting DDoSed in recent months.

  4. Re:Activation servers off the net? by handsomepete · · Score: 5, Informative

    I've been given the 'routine maintenance' runaround on non-mssql bombing days twice. About 8 months ago they told me I wouldn't be able to activate for at least 24 hours because of 'routine maintenance and a database upgrade'. Activated two days after. 2 months later I called about 3am CST and was told that during that time is when they do their 'routine maintenance'. When I got them during a good time after that, the operator (poor guy) hassled me about my re-activating. Even after I told him that I just changed out some hardware on the same computer, he insisted on telling me that I couldn't install XP on a second computer (as in he didn't believe me). After a 10 minute conversation he finally gave up and gave me activation, but with a stern warning ("Well, just remember that this is the third time you've activated this copy in 6 months").

    2 months after that I left Windows for good and latched on to Linux. So far I haven't had to call my distros for product activation, so I'm happy.

    (Disclaimer: Linux isn't for everyone, not preaching, just my experience, yadda yadda yadda...)

  5. 1.2 Megabits / s by bstadil · · Score: 2, Informative
    Seriously. It is MUCH faster today than normal. At least here in Dallas. Here is Result from Speedtest

    1.2 megabits per second

    Your raw speed was 1156090.51 bits per second which is the same as:

    Communications

    1.2 megabits per second How communication devices are rated. Kilo means 1,000 and mega means 1,000,000. Examples include 56k modem and 10Mbit Ethernet

    Storage

    141.1 kilobytes per second The way data is measured on your hard drive and how file sharing and FTP programs measure transfer speeds. Kilo is 1,024 and mega is 1,048,576. 1MB file download 7.3 seconds The time it would take you to download a 1 megabyte file at this speed.

    Rating

    Compared to all connection types worldwide, yours is fantastic

    --
    Help fight continental drift.
  6. Re:DDoSing and Script Kiddies in general by JohnFluxx · · Score: 2, Informative

    Even the script kiddies are, for the most part, pretty pissed off. I spent quite a fair amount of my childhood in script-kiddie chat rooms, and going out and meeting up.
    The majority (as in everyone that I've met) has always tried to be non-destructive. There was one kid who hacked a server and panicked when he didn't know how to fix up the logs and instead wipped the machine. He got shunned and banned from the chat rooms.
    One reason, from a cold and practicle point of view, is that nobodies wants to piss off anyone important for fear of retribution, and plus the idea is to have servers that you can use to download stuff on, and use for private irc servers etc.

    Doesn't answer your question sorry, but I just wanted to point out that even in the 'hacking' world people are pissed off and annoyed by this.

  7. Re:EFNET and ident by zcat_NZ · · Score: 2, Informative

    ident is -almost- useless; it proves that at least someone has a reasonable degree of control over the box.

    Two cases where requiring ident is actually helpful; there's thousands of open proxies which can be used to connect to IRC servers, but most of them aren't running ident. Also it's not too hard to get a non-priviledged shell on an awful lot of webservers, most of which aren't running ident. It's a lot harder to get root and enable ident in both these cases, so by requiring ident you cut down the size of Joe Random Skriptkiddie's botnet rather sharply.

    --
    455fe10422ca29c4933f95052b792ab2
  8. Re:Activation servers off the net? by davidstrauss · · Score: 2, Informative

    First, this repair/upgrade sounds more like a different computer. Second, XP allows three changes every 120 days. Finally, SP1 gives you a grace period if you deactivate your product with changes to your system. You either didn't update your computer to the latest service pack (which came out a while ago) or you waited until the last minute. No sympathy from me.

  9. Re:DDoSing and Script Kiddies in general by Anonymous Coward · · Score: 1, Informative
    Unlike music/video sharing there is no way to justify allowing those channels.

    And yet some try

  10. Re:BIG FUCKING DEAL by MillionthMonkey · · Score: 4, Informative
    This Jim Blair guy is full of shit. You have 30 days to activate the software. It's not "crippled" in any way until that 30 day timer is over.
    Unless, of course, he did the install 30 days ago, and waited to install NOW. Point is, this really doesn't matter, and this guy can kiss my ass -- "I gotta stop my project for some unknown length of time" sounds like the lamest excuse I've ever heard. Maybe he's gotta make a run to Krispy Kreme. Regardless, XP allows you 30 days grace (beta versions 14 days).


    Well, I can see why Bruce Perens added you to his foes list.

    The 30-day grace is for an initial install. For hardware changes the rules are different:
    Users will have up to 3 days to re-activate Windows XP after making a hardware change that triggers the need to re-activate. Previously, users were required to re-activate immediately upon the next boot after the hardware changes were made.

    Source: Service Pack 1 Changes to Product Activation. So apparently the guy had the nerve to install new hardware on an XP system that didn't have this service pack applied.

    The take home lesson here: until the activation servers come back up, you should not install any new hardware on an XP system or your machine will be rendered inoperable. Unless you've installed SP1 first. In that case you can install your new hardware and cross your fingers that the MS activation servers are back up within 72 hours.
  11. DALnet by lvdrproject · · Score: 5, Informative
    This is the first i've heard about the other two stories-within-the-story here, but DALnet has been the constant bane of people wanting to get things done (and/or chat) for quite some time now. The DDoS attacks have been going on for a long time, but they really came to a peak a few months ago, where it became extremely difficult to stay connected to DALnet for more than a few hours at a time (at which point you would have to reconnect, usually to a different server, since the servers seemed to just take turns dying).

    There have been at least two, possibly three or four, occasions where DALnet just shut down completely for a period of at least a few days (this latest one being in the range of like a week). After the first "big" DALnet shut-down, it seems a lot of channels moved to other networks; most of these channels have even gained numbers. Seems even if DALnet does return, a lot of the channels that left it will stay on their new-found networks. The few anime channels that came back to DALnet are very slowly gaining back their numbers, but they're nowhere near the levels they used to be. As of right now, the highest count is 51 users, which is really low for a DALnet anime channel. Highest warez channel count is 68, which is also really low for a DALnet warez channel. And even the MP3 channels, which probably were some of the biggest channels on DALnet, have lost major numbers. I seem to remember them being in the area of like 600+; current count is 166. So yeah, DALnet has really been taking it in the ass.

    General consensus around the parts i hang out seems to be that losing DALnet wouldn't be such a bad thing. We'd all move our channels to other networks, and be done with it. Chat channels would really love EsperNet or IRCnet, and warez/MP3/ISO/PlayStation/etc. channels have a half-dozen networks to choose from, most notably EFnet (though i despise it). Anime channels would thrive on Aniverse. DALnet was great, but, unless things see a really dramatic improvement, i think there are many that would agree that it needs to be put out of its misery as soon as possible.

    What has made this all really lame has been the fact that DALnet hasn't really said anything about this. Their eZine (the DALnetizen) has truly been the opposite of helpful throughout this whole ordeal. It seemed as though DAL was almost oblivious to what was happening. There would be a paragraph about Christmas, a paragraph about the benefits of PHP, a paragraph about poems, a paragraph about some new op or something, and then tucked away in a little corner would be a little sentence or two along the lines of "ps dalnet si getitng ddosed pls bare w/ us thx". After this most recent attack, however, they've started to get their act together a bit, and have posted a lot more information regarding the situation. Information can really be helpful to their users, if they want to keep them.

    Also not helping the situation are rumours(?) to the effect that the DALnet administration has resorted to childish finger-pointing, and have pretty much detached themselves from each other. DALnet isn't really doing a very good job of assuring its user base that it'll be alright. :/ Hopefully, if DALnet is to survive, this will be remedied.

    And, finally, the biggest blow to DALnet has been the de-linking of several of its (best) servers. Almost all of the "good" servers, the ones that everyone had as their first picks, have disappeared. Even the "fall-back" servers seem to be gone. Evidently DALnet is picking up a few new (or renamed, maybe, i can't be sure myself) servers, even in light of the attacks, however.

    So DALnet's fate is really unknown. No one can be sure, but for now it's functioning, at least in the sense that it has the ability to carry users. Who knows, though, it could be down again tomorrow.

  12. Re:Why should one person have to own 2 computers? by lvdrproject · · Score: 2, Informative
    I could be wrong about this, but...

    He already activated it, guy. Read again, he said he upgraded his hardware. When you upgrade your hardware, Windows makes you activate it again, because there's a possibility that maybe you just took the hard drive out and stuck it in another computer, i.e. getting two copies of XP out of one disc. XP makes you RE-activate the operating system when you make drastic changes to your hardware.

  13. Re:i don't get it by aoteoroa · · Score: 2, Informative

    I am no fan of Microsoft but will defend them for a moment. The article never said that Windows XP activation servers were infected by the worm just that the servers were "offline". In other words the servers are not compromised but are currently unreachable due to a denial of service attack.

  14. Re:The DALnet attacks are the real deal by jonathan_ingram · · Score: 3, Informative

    Someone should setup a website or something saying who went where, unless of course this has been setup already.

    You could try searching for them here. That site maintains statistics on *all* the major IRC networks. It also has some very pretty graphs -- this one, for example, very graphically illustrates DALnet falling off the edge of the world.

  15. Re:DALnet by Anonymous Coward · · Score: 2, Informative
    Wake up and smell the burning RJ45. First, DALnet has posted two issues of the zine completely dedicated to the DDOS issue. Second, the staff of DALnet are not in-fighting. We're working our asses off trying to get this back up for the users. Yes, that has ment some staff changes, most notably a new CEO - but not infighting.

    Your lack of understanding of the dozens of people that make the entire DALnet experience possible is amazing. You seem to think that DALnet just materialized out of thin air, and if it doesnt serve your purpose properly that it should be 'put out of its misery'. Well, guess what, DALnet will never just die off - because for some of us, its played more of a role in our lives than somewhere to trade porn. I can easily say that I would not be where I am emotionally, career-wise, and romatically if it wasnt for the role DALnet placed for me. And I'll continue to fight tooth and nail to make sure that medium exists to change someone elses' life.

  16. Worm took our lots of cash registers in Canada by Geek+Boy · · Score: 2, Informative

    Many stores, including Holt Renfrew, were unable to process credit card, credit, debit, or any other forms of electronic transactions today due to their central database being down. When will they learn?

  17. Canadian Voting by RobinH · · Score: 2, Informative

    For those who don't know, in Canada we still use a pen and paper voting system -- not even punch cards. This vote was specifically for the leader of a political party, so I believe it was run by the party, not by Elections Canada. For me, these problems are evidence that we should stick with our proven voting methods until we're much more confident in electronic voting systems (if ever).

    --
    "I have never let my schooling interfere with my education." - Mark Twain
  18. So is DALnet by Xformer · · Score: 2, Informative

    Or has no one checked things out there lately?

    From the DALnet server I'm on at the moment:
    There are 625 users and 17700 invisible on 22 servers

    --
    All I want is a kind word, a warm bed and unlimited power.
  19. national news reporting -- misses the point by rawdirt · · Score: 2, Informative

    ABC didn't even mention microsoft in their report.
    CBS only mentioned the specifics at the very last of their report.

  20. Re:Why should one person have to own 2 computers? by Reziac · · Score: 4, Informative

    You get ten "points" before XP is supposed to demand re-activation. Trouble is, some stuff counts weirdly. IIRC, reformatting your HD counts as 3 points (it's a "hardware change" because the *volume serial number* changes when you reformat the drive). Some other devices (I forget which) also count as 3 points. Some people have had merely adding a new NIC or SCSI card count as all 10 points. Not to mention the bugs that sometimes make it decide it needs reactivation out of the blue (discussed to death in various XP forums).

    --
    ~REZ~ #43301. Who'd fake being me anyway?