Slashdot Mirror


DoS Attacks on Estonia Were Launched by Student

As_I_Please alerts us to the fact that a 20-year-old Estonian student has been fined for participating in DoS attacks against various Estonian political and governmental websites last May. The situation was notable because it escalated tensions between Estonia and Russia when the latter was accused of initiating the 'cyber-attack'. Quoting: "The fact that a single student was able to trigger such events is particularly ominous when you consider just how many potential flashpoints exist between various countries all over the world. The DoS attack against Estonia is an excellent example of how a cyberattack carried out by a 20-year-old student in response to real-life events further exacerbated an existing problem between two nations."

13 of 184 comments (clear)

  1. An exellent example... of what? by gnud · · Score: 4, Insightful

    The DoS attack against Estonia is an excellent example of how a cyberattack carried out by a 20-year-old student in response to real-life events further exacerbated an existing problem between two nations.

    Eh. How about the _only_ example?

  2. Russia accused... by unbug · · Score: 5, Insightful

    So on what basis did Estonia accuse Russia of staging those attacks? This story was picked up all over the world and nobody bothered to check if they actually had anything resembling a proof?

  3. Not Acting Alone by mandelbr0t · · Score: 4, Insightful

    While they may not have found evidence of any other people involved, it's unlikely that a single person could establish a botnet large enough to overwhelm anything on his own. The only answer I can think of is education - botnets exist because the owners of the zombie PCs simply don't recognize that it's a zombie. There is certainly an overall lack of regulation, too. As a domain owner, I see lots of abusive traffic and have absolutely no legal recourse to punish a perpetrator. Responsible network owners often help, but there's so few networks that are responsible that I usually assume they're not, forcing me to do what little I can at my own site to prevent further abuse.

    For the student's part, he was only fined (I couldn't find how much in TFA). Not much deterrent to prevent him from doing it again. No leverage to find out who he was working with. The lack of clear laws in any country makes prosecution of such actions impossible. As a domain owner, I'd like to see civilized countries show some direction toward making prosecution of such activities a reality. Until then, it's "you hack me, I hack you" which is completely counterproductive.

    --
    "Please describe the scientific nature of the 'whammy'" - Agent Scully
    1. Re:Not Acting Alone by Anonymous Coward · · Score: 4, Insightful

      While they may not have found evidence of any other people involved, it's unlikely that a single person could establish a botnet large enough to overwhelm anything on his own.

      I disagree. He wouldn't necessarily have to do anything to build a botnet himself, just have access to a C&C network built by someone else. He could gain access by renting the network, or even stumbling on an unprotected C&C server. There's a few out there, believe it or not. So yeah, other people may have created the botnet, but he still could have been acting alone when launching his attack.

  4. Not the first time by r_jensen11 · · Score: 4, Insightful

    How was it that the United States got involved in Iraq, exactly?

    1. Re:Not the first time by ScentCone · · Score: 3, Insightful

      By Saddam Hussein invading Kuwait.

      Say what you want. Thats where it all started.


      I'm sorry, this is slashdot. Please keep the facts out it, would you? Next you're going to cite the fact that it was Bill Clinton's stated policy to see Saddam removed from power, too.

      --
      Don't disappoint your bird dog. Go to the range.
    2. Re:Not the first time by Anonymous Coward · · Score: 3, Insightful

      If you're going to go that far back, just go back a little further when we got involved with entangling alliances in the region and meddling in the affairs of foreign governments. Had we not armed Saddam Hussein, for example, he might not have been strong enough to invade Kuwait. But we had to arm him, because the Shah of Iran, whom we propped up, got toppled by the Ayatollah who came to power by exploiting the dissatisfaction with the corruption of the US backed Shah, and we feared him spreading his power and influence.

      People seldom dig deeper into events than is necessary to support their programmed partisan viewpoints.

  5. I'm curious about all these racist/Ron Paul posts by Anonymous Coward · · Score: 1, Insightful

    http://www.cnn.com/2008/POLITICS/01/10/paul.newsletters/
    Are racists all illiterate?? I thought that was just a myth...

  6. Headline *very* misleading! by minimum · · Score: 3, Insightful

    Only one kid DDOS'ed goverment and news sites and created that mayhem? Right. So nobody bothers to mention that the student who was arrested had a Russian name - Dmitri Galushkevich ? Sure he may have the citizenship but he's not really Estonian. Just offspring of an immigrant. And he wasn't the only kid around here who helped to DDOS.

    1. Re:Headline *very* misleading! by Max_W · · Score: 5, Insightful

      Ah yes. National-socialism. A son of an immigrant is not a true citizen. Only particular ethnicity is honored in the National State.

  7. Just as I said by saikou · · Score: 2, Insightful

    Just as I said when original discussion happened, Russian government was not responsible. Now, is Pentagon still ready to bomb cyberattackers? If yes, then next student with a grudge will finish off a country or two before we have a chance of intelligent machines or human-made bacteria to kill us all.

  8. What A Crock by Jane+Q.+Public · · Score: 3, Insightful

    Quote: "The fact that a single student was able to trigger such events is particularly ominous when you consider just how many potential flashpoints exist between various countries..."

    What nonsense. If governments put important messages on such "secure" places as roadside billboards, for example, then they should expect "hacks" like moustaches drawn on them, etc.

    Others are not to blame if the government is clueless. The fact that it was so easy to do is a great indication that the government was in fact clueless. If they want to put something important somewhere and keep it "secure", then they are responsible for taking at least minimal measures to make sure that it is, in fact, secure.

    They are just looking for someone to blame for their own incompetence.

  9. Re:Speaking of Soviet Estonia by emilper · · Score: 4, Insightful

    doesn't seem to have ever moved beyond plotting and assassinations have any proof ? I mean proof, not allegations.