Slashdot Mirror


Taking on an Online Extortionist

An anonymous reader writes "When an online exortionist comes a knocking, threatining a DDoS, do you pay or fight? For many, paying may seem like a sensible option when compared to going out of buisness. CSO Magazine has a riveting article about how an online gambling site and a DDoS specialist teamed up to take on such an extortionist. When everybody else was rolling over and paying, this company risked its very existence to fight back. From the article: '"The attack went to 1.5Gb, with bursts up to 3Gb. It wasn't targeted at one thing. It was going to routers, DNS servers, mail servers, websites. It was like a battlefield, where there's an explosion over here, then over there, then it's quiet, then another explosion somewhere else," says Lyon. "They threw everything they had at us. I was just in shock."'"

64 of 784 comments (clear)

  1. oblig Churchill by isecore · · Score: 5, Funny

    "We will fight them in the CAT5, on the routers, in the packets. We will never surrender"

    Or however he said it :)

    --
    I enjoy large posteriors and I cannot prevaricate.
    1. Re:oblig Churchill by ShaniaTwain · · Score: 3, Funny

      "I may be drunk, Miss, but in the morning I will be sober and you will still be ugly."

    2. Re:oblig Churchill by Knara · · Score: 4, Funny

      The sad thing is that I remember that speech entirely because its used as an intro to the Iron Maiden song "Aces High"

    3. Re:oblig Churchill by kfg · · Score: 2, Funny

      We really need to put a stop to damned terrorists and insurgents like this.

      KFG

    4. Re:oblig Churchill by 3770 · · Score: 4, Funny


      Would you have been happier if you remembered it because you were there in person?

      God knows your /. ID is low enough that it might be true. ;)

      --
      The Internet is full. Go Away!!!
    5. Re:oblig Churchill by RichardX · · Score: 3, Funny

      Churchill definitely had some of the best quotes in history.
      He also looked like every baby ever born.
      It's true! all babies look like Winston Churchill.
      Quite scary, really...

      --
      Curiosity was framed. Ignorance killed the cat.
    6. Re:oblig Churchill by mcmonkey · · Score: 3, Funny
      "we shall fight on beaches, landing grounds, in fields, in streets and on the hills"

      Hay Winston, why not try fighting them in Germany?

    7. Re:oblig Churchill by Pig+Hogger · · Score: 3, Funny

      Lady Astor, first woman elected to the House of Commons, to Winston Churchill:

      -- If you were my husband, I would poison your coffee.

      -- If you were my wife, I would drink it.

    8. Re:oblig Churchill by sphealey · · Score: 2, Funny
      Me? I'm just this guy, ya know?
      I hear ya.

      sPh

    9. Re:oblig Churchill by PatMouser · · Score: 5, Funny

      Bah.

    10. Re:oblig Churchill by donutello · · Score: 5, Funny

      We shall fight in France and on the seas and oceans; we shall fight on beaches, landing grounds, in fields, in streets and on the hills.

      Hey, sounds like our last family vacation!

      --
      Mmmm.. Donuts
    11. Re:oblig Churchill by rizzo420 · · Score: 1, Funny

      The news had come out in the First World War
      The bloody Red Baron was flying once more
      The Allied command ignored all of its men
      And called on Snoopy to do it again.

      Twas the night before Christmas, 40 below
      When Snoopy went up in search of his foe
      He spied the Red Baron, fiercely they fought
      With ice on his wings Snoopy knew he was caught.

      Christmas bells those Christmas bells
      Ring out from the land
      Asking peace of all the world
      And good will to man

      The Baron had Snoopy dead in his sights
      He reached for the trigger to pull it up tight
      Why he didn't shoot, well, we'll never know
      Or was it the bells from the village below.

      Christmas bells those Christmas bells
      Ringing through the land
      Bringing peace to all the world
      And good will to man

      The Baron made Snoopy fly to the Rhine
      And forced him to land behind the enemy lines
      Snoopy was certain that this was the end
      When the Baron cried out, "Merry Christmas, my friend"

      The Baron then offered a holiday toast
      And Snoopy, our hero, saluted his host
      And then with a roar they were both on their way
      Each knowing they'd meet on some other day.

      Christmas bells those Christmas bells
      Ringing through the land
      Bringing peace to all the world
      And good will to man

      Christmas bells those Christmas bells
      Ringing through the land
      Bringing peace to all the world
      And good will to man

      --
      please me, have no regrets.
    12. Re:oblig Churchill by mikael · · Score: 4, Funny

      Humbug.

      --
      Vintage computer adverts: http://www.vintageadbrowser.com/computers-and-software-ads
    13. Re:oblig Churchill by dokkeri · · Score: 5, Funny

      Oh great... The one time something I have is large and the people want it to be small.

      --
      This sig is funny.
    14. Re:oblig Churchill by davidu · · Score: 5, Funny

      *yawn* ;-)

      -davidu

      --

      # Hack the planet, it's important.
  2. Here's a tip by dtfinch · · Score: 3, Funny

    Don't respond. They'll think you didn't see their email.

    1. Re:Here's a tip by imuffin · · Score: 2, Funny

      When I threaten to extort someone by email and they don't answer, I usually just deface their homepage with a big blinking red message that screams

      READ YOUR EMAIL, DUMBASS!

      ---
      watch funny commercials

  3. Even Slashdot? by troc · · Score: 5, Funny

    "They threw everything they had at us. I was just in shock."

    I guess that includes getting a mention on Slashdot?

    Troc

    --
    Troc's dubious podcast and blog: http://www.trocnet.net
    1. Re:Even Slashdot? by caluml · · Score: 2, Funny

      Is "gambel" in those "bad words" lists?

    2. Re:Even Slashdot? by RexDart · · Score: 2, Funny

      5. Determine the hacker's RL name, location, etc. 6. Contact an independent bounty hunter (Mad Dog, anyone?) to launch a "Denial of Freedom" attack 7. Tape the whole thing as a reality show so that G4/TechTV could have at least one interesting program.

      --
      "Yes, Jayne, she's a witch. She's had congress with the beast..."
      "She's in Congress?" - Firefly, "Objects in Space
    3. Re:Even Slashdot? by jonadab · · Score: 3, Funny

      > Very true, this post could have much worse consequences than they
      > could ever throw at you.

      I doubt it. As near as I can figure, a solid slashdotting comes to at most a two-digit MBPS figure, and that can only be kept up for a day or so. If you RTFA, it was talking about attacks of over 1GBPS sustained for weeks. That's something like fifty slashdottings at a time, more than once a day. The article didn't say what kinds of packets these were (forged-source SYN, reflected ACK, or what), but you get the idea that it was different kinds at different points.

      In any event, the attack was apparently more bandwidth-consumptive brute-force than any particular cleverness. In practice, that's probably the most effective type of attack, because a clever attack (such as a traditional SYN flood) is subject to being thwarted by greater cleverness on the defensive end (e.g., SYN cookies). But a bandwidth-consumptive distributed attack is hard to defend against without having a bigger pipe than the aggregate bandwidth of the zombies.

      (In the short term, that is; in the long term, given adequate resources and expertise, you eventually track the whole thing down and set the authorities on the perp, or failing that (e.g., if the whole operation is being run from the Federated People's Democratic Republic of Bob's Two-Acre One-Inch-Above-Sea-Level South-Pacific Coral Atol In International Waters (FPDRBTAOIASLSPCAIIW)) get his ISP to shut him down, but that all takes time, and meanwhile you want to keep your network online as much as possible.)

      --
      Cut that out, or I will ship you to Norilsk in a box.
  4. So now we're gonna slashdot 'em? by LordByronStyrofoam · · Score: 5, Funny

    Seems kinda brutal to hit them with another DDOS.

    --
    Slashdot's name? When my compiler sees /. it generates a warning about a badly formed comment.
    1. Re:So now we're gonna slashdot 'em? by Manfre · · Score: 2, Funny

      The casino site was hit for money. CSO was throw in for free!

  5. The DDoS worked apparently. by Anonymous Coward · · Score: 3, Funny

    Or maybe it was planned this way. Nothing says offline like a link from slashdot.

  6. Re:That's frightening by KiloByte · · Score: 3, Funny

    Uhm, to take away the bots, you would have to cut them at the root. And the root is a certain mega-corporation that's a bit difficult to be rooted out.

    --
    The creatures outside looked from Alt-Right to Antifa; but already it was impossible to say which was which.
  7. gambling and extortion? by superwiz · · Score: 3, Funny

    First time those 2 go hand in hand....

    --
    Any guest worker system is indistinguishable from indentured servitude.
    1. Re:gambling and extortion? by pdbogen · · Score: 2, Funny

      +5 ironic

  8. DDoS? by Tim5309 · · Score: 1, Funny

    Is anyone else revelling in the hilarious irony that the site about surviving a DDoS attack has been Slashdotted? Or is that just me?

  9. I fell for one of these by Anonymous Coward · · Score: 2, Funny

    An online wallet inspector demanded I send him my billfold posthaste. I never got it back. Be forewarned.

  10. Just do what we do on IRC by Anonymous Coward · · Score: 5, Funny

    Find out where they live and call their mom.

  11. Extorting a gambling site? by wowbagger · · Score: 5, Funny

    Extorting a gambling site? That strikes me as a LLM (life limiting move, c.f. career limiting move).

    Many gambling sites still have connections to, shall we say, respectible businessmen of the Italian or Asian pursuasion, who are used to handling such matters extra-legally.

    You might just wake up one day with your computer's monitor (cables severed with an ax) in bed with you.

    Or Guido and Nunzio standing over you, giving you tips on the finer points of extortion while they wait for the concrete to set.

    1. Re:Extorting a gambling site? by daniel_mcl · · Score: 4, Funny

      I was just suggesting this as a solution to spamming awhile back; if it's really that expensive to businesses, wouldn't it be more economical for them to arrange to have spammers assasinated? I'm serious about this -- if people are cool with paying Mafia kickbacks to their sanitation company, wouldn't they be willing to pay for something which will save them quite a lot more money?

      If such a job were available I'd personally be going through sharpshooter training right now.

      --
      I used to read Caltizzle. I was a lot cooler than you.
  12. Re:Curious by Secrity · · Score: 5, Funny

    Wormholes.

  13. Re:Good, some balls. by Anonymous Coward · · Score: 3, Funny
    Oh, did I mentioned that me, and everyone else at the company carry Glock 19's?


    What about the interns?
  14. Next News Story... by kniLnamiJ-neB · · Score: 3, Funny

    "How CSO Online took on Slashdot... and LOST."

    I'm glad that somebody's standing up to the jerk though... people who do stuff like that are wasting perfectly good matter.

    --
    Windows isn't the answer... it's the question. NO is the answer!
  15. Re:Curious by Gzip+Christ · · Score: 5, Funny
    I've always wondered...when a site is slashdotted, it implies that the site has been hit by high referrals from slashdot, causing it to become slow or go down totally. But how does slashdot itself cope with the high traffic?
    It's quite simple, really - Slashdot just doesn't link to itself.
  16. Re:Good, some balls. by Anonymous Coward · · Score: 1, Funny

    Wow, you all carry Glock 19's? Damn.. you are all badasses! ISP admins must be a tough crowd.

    How many times have you pointed them at a human?

  17. Blockbuster? by pakog · · Score: 2, Funny

    Am i the only one who was sitting on the edge of my seat while reading the battlefield analogy? This is unexplored movie territory with some great potentiol. "Behind CAT5 Lines"

  18. Re:Curious by Chmarr · · Score: 1, Funny

    Oh! That would explain all the dupe articles we see!

  19. Re:Curious by MyLongNickName · · Score: 5, Funny

    That's the trick. Most people would say "bigger servers" and "bigger bandwidth". But I know the real reason. Notice how you get 'Service Unavailable'? Every so often? I found that if more than 50 people are accessing Slashdot at the same time, that their database cannot handle it. In reality, this site is hosted on an Amiga. Only 50 users you say? That can't be.... just look at my User ID!

    All the 813,621 users before you don't really exist. These messages are randomly generated geek buzzwords. "Users" are given personalities, ranging from "Linux lover" to "Windows loser", from "I'm just a troll" to "IAARS", from "Funny" to "I take myself serious, but no one else does".

    Those "personalities" alter the pre-populated phrase list according to topic (actually, I am not even sure the topic matters). Think of it as an advanced Turing simulation.

    I was fooled for my first three months. Then, I saw the predictable responses, and realized that there was no actual intellegence here. Just the occassional real life person who wanders in and is fooled for a while. The auto-misspell feature was a nice addition, I have to admit.

    Want proof? Pick a user id. Peruse messge list. Notice the lack of variety? Notice the lack of real meaning behind each message? And when there is real content, try browsing earlier messages. You will find phrases ripped verbatim from an earlier post.

    Of course, you may also be a bot. CommanderTaco is always making tweaks to the message generation algorithm (though his posts, too, are mostly generated by code). I will have to peruse your message history when I am done posting here.

    --
    See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
  20. EVIL! by jav1231 · · Score: 5, Funny

    Okay, I first read that as "Online Exorcist." I'm thinking, how does THAT work? TO: Satan@littlegirlshead.com
    From: Father Mayai (Yes, you may!)
    Subject: Notice of Eviction

    1. Re:EVIL! by Aspherical+Cow · · Score: 3, Funny
      I figured it would have been something like
      ssh root@possessed killall daemon
  21. Re:Good, some balls. by Anonymous Coward · · Score: 2, Funny

    They share one.

  22. Re:Fight! by Fishstick · · Score: 5, Funny

    If only there was some kind of online medium for news articles where answers to questions like these could be answered!

    Oh wait...

    You can send us $40K by Western Union [and] your site will be protected

    Richardson runs BetCris.com, an online wagering site, one of hundreds of sites ensconced in Costa Rica that take bets from Americans ... without concern for U.S. bookmaking laws

    Lyon says, "I could have left it alone, but I had gotten attached, and I started investigating. I came up with some interesting techniques to trace back the attacks." He turned over his work to several law enforcement agencies, but he never heard about it again.

    "Um, hello - FBI? Hi. Yes I run a website gambling business offshore in Costa Rica and I just got threated by someone who says they will shut me down unless I wire fourty thousand via Western Union to someone in Belarus who *click* Hello?"

    --

    There is much cruelty in the universe, John.
    Yeah, we seem to have the tour map.

  23. "They threw everything they had at us." by hiero · · Score: 2, Funny

    Including, apparently, a good slashdotting.

  24. Re:Question by Just+Some+Guy · · Score: 4, Funny
    Mr. Piquepalle regularly pretended to be "just some guy"

    Hey, leave me out of this! I can't even get my own articles accepted.

    --
    Dewey, what part of this looks like authorities should be involved?
  25. Re:Good, some balls. by ReverendLoki · · Score: 5, Funny
    I can't quite see the relationship between the two things...

    Because, sometimes that Windows box crashes one time to many...

    --
    09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
  26. age discrimination! by Tumbleweed · · Score: 4, Funny

    God knows your /. ID is low enough that it might be true.

    Watch it with the age slurs there, sonny. That could get ... dangerous. :)

    1. Re:age discrimination! by Xenophon+Fenderson, · · Score: 5, Funny

      *grumble* . . . get off my web site, you damn kids!

      --
      I'm proud of my Northern Tibetian Heritage
    2. Re:age discrimination! by dhall · · Score: 4, Funny

      I guess I'm feeling like a real fossil then... :)

    3. Re:age discrimination! by AgentSmith · · Score: 2, Funny

      Holy Crap! You are the lowest ID I've ever seen. It's like elder races have returned. RUN!

  27. Re:Good, some balls. by vbrookslv · · Score: 3, Funny

    Yes, that's what my Fairbairn-Applegate Covert folder is for. But my daddy always told me, never bring a knife to a gun fight. Well, I choose to improve upon his wisdom by having both.

    In actual fact, my Batman utility belt is getting kinda crowded. Ipaq 5500, Nokia 6620, Motorola HS850, Knife, and Gun. I think I need a pair of suspenders. (Does Jinx sell geek-spenders?) Fortunately for me, I have a larger circumference than the average geek, which gives me more belt real-estate. I don't know how you twiggy types carry all of your gadgets.. :)

  28. New "business idea" by 3770 · · Score: 2, Funny

    So,

    I'm trying to read the article and that is giving me another "business idea".

    "Give me $10 000 or I'll submit an article to Slashdot with a link to your web site".

    Distributed Denial of Service!

    --
    The Internet is full. Go Away!!!
  29. Re:Good, some balls. by vbrookslv · · Score: 4, Funny

    We were later tossed in jail for threatening with a weapon

    Actually, In Nevada, it's called "brandishing".

    Take a fucking joke people, jeez. Yes, the story is true. Yes, we all carry Glocks. No, we didn't point them at anyone. Just snatching the fucker out of his perceived anonymity was enough. (hint to the AC's?)

    When asked why we carried, our stock response was "We take Network Security VERY seriously." And follow it up with (in my best Monty Python) "I don't like SPAM!".

  30. Re:Question by Greyfox · · Score: 3, Funny

    Everything that bastard submits gets accepted! You could submit "How scientists cracked the light speed barrier" and get rejected and then he comes along behind you with "Anatomy of a cheez doodle" and gets accepted! God I hate him! Hate hate hate! Yup...

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  31. Re:That's frightening by Anonymous Coward · · Score: 1, Funny
    It makes me wonder if this new anti-DDoS company can somehow establish relationships with ISPs to track back the zombies and get them shut down more quickly?

    I'm starting a company much like that myself. Nice network you've got here, hate to see anything happen to it. I can protect it for you... for a price.

  32. So... by Theatetus · · Score: 4, Funny

    ...is submitting a story to /. the last revenge of the DDOS extortioner?

    --
    All's true that is mistrusted
  33. Re:Good, some balls. by jcuervo · · Score: 2, Funny
    --
    Assume I was drunk when I posted this.
  34. Is it just me... by Bones3D_mac · · Score: 2, Funny

    ... or does this sound like an opening line for a soft-core porn flick?

    "Lyon was 23 and looked at least that young. His blond hair offset a tan, handsome face. Allec says Lyon looked like he had given up a day of surfing to swing by and help out."

    --


    8==8 Bones 8==8
  35. Re:Curious by Jtheletter · · Score: 3, Funny
    All the 813,621 users before you don't really exist. These messages are randomly generated geek buzzwords. "Users" are given personalities, ranging from "Linux lover" to "Windows loser", from "I'm just a troll" to "IAARS", from "Funny" to "I take myself serious, but no one else does".

    Oh cool, this must be one of those meta-tin-hat /.-bots I heard Taco was developing! Sowing seeds of dissent and conspiracy for its own sake.

    What a great entry-level comment to test with too! By publicly 'outing' the very system it is a part of no one will take this position as serious anymore and simply decry those who suggest it a yet another foil-hatter, while simultaneously freeing this chat-bot of being accused as one. After all if it were a bot, why would it point out all its own secrets?

    Bravo Taco, you are to be commended for this nasty little piece of deception. But of course, if 822545 is a bot, then how can I prove that I am not one? Well, quite easily, you see der lichentttttt ^H^H^H^H
    WARNING -- Unhandled parsing error at 0x0E346B22: Core meta-logic rebuttle memory dump in progress! Rebooting comment generation APU at segment data 2501 -- END

    --
    -- I'm not a pessimist, I'm a realist. It's not my fault that life sucks so much. --
  36. Careful picking on the '19 by Bob+4knee · · Score: 2, Funny
    Oh, did I mentioned that me, and everyone else at the company carry Glock 19's? Yeah, we didn't have any more problems for the rest of the con. Everyone was on their best behaviour. A bunch of fine, upstanding individuals. :)
    Ever tried real hard to disappear when your 4 year old kid admonishes a cop (bragging on his new 9mm) for carrying a "girl gun" "like my mom used to use until she learned to shoot"...
  37. Re:Rudyard Kipling's "Dane-geld" - extortion poem by howlinmonkey · · Score: 4, Funny

    It seems a good idea to sit in Eastern Europea
    And mail out missives with a threat
    "We know that you have gold, and if I may be so bold
    If you send me some I will not be a threat"

    And that is called running protection
    And the scum who demand it defend
    That you only have to pay them protection
    And your enterprise won't have to end.

    It is a real temptation to avoid a confrontation
    And pay off the bottom sucking filth
    Then the business you created won't be immolated
    By the bandwidth sucking zombies and their ilk

    And that is called paying protection
    But after you've paid up today
    They'll come calling for more protection
    There will never be an end to what you pay

    It's a shame to whimper quietly and meet with their demand
    To keep the money flowing fast and free
    So when they do demand the little money in your hand
    I would suggest that you repeat slowly after me.

    "We never pay any scum protection
    No matter how hard they may lean
    For tomorrow you'll be back threatening to hack
    Using any zombies you can glean "

    I am no Rudyard Kipling, but I think this captures the essence of it :)
  38. Re:Simple solution. by Lord+Bitman · · Score: 2, Funny

    welcome to the internet! There are many new and exciting technologies which you should look in to now that you are here!

    --
    -- 'The' Lord and Master Bitman On High, Master Of All
  39. Actually by chriso11 · · Score: 2, Funny

    In the context of this article, the correct term is slashdos'ed

    Thank you

    --
    No, I don't trust in god. He'll have to pay up front, like everybody else.