Slashdot Mirror


Could the Internet Be Taken Down In 30 Minutes?

GhostX9 writes "Tom's Hardware recently interviewed Dino A. Dai Zovi, a former member of Sandia National Labs' IDART (the guys who test the security of national agencies). Although most of the interview is focused on personal computer security, they asked him about L0pht's claim in 1998 if the Internet could still be taken down in 30 minutes given the advances on both the security and threat sides. He said that the risk was still true."

22 of 289 comments (clear)

  1. Yes by 2.7182 · · Score: 5, Insightful

    By a nuclear war for example.

    1. Re:Yes by rpmayhem · · Score: 5, Funny

      root@internet# shutdown -c "I'm still reading slashdot you insensitive clod!"

  2. All it needs is a giant Slashdotting by Anonymous Coward · · Score: 5, Funny

    Just visit url://internet

    1. Re:All it needs is a giant Slashdotting by Chris+Mattern · · Score: 5, Funny

      Firefox tells me it doesn't understand URLs. I'd better just stick to HTTPs.

  3. Internet Backbone DDOS in 2002 by eldavojohn · · Score: 5, Insightful

    In 2002 4 or 5 of the 13 root servers were big news ... although we've come a long way since then, I think the integrity of the internet still depends on these things.

    Every so often we get reports that the internet is a rickety old jalopy on it's last leg.

    Given this impression and add to it the fact that the botnets seem to grow in tandem with the internet, I wouldn't be surprised to see an attack take her down in 30 minutes although I'm no expert. I think 30 minutes is a generous amount of time if one of the larger botnets turned its attention on the root servers for a DDOS attack. You'd have some fail overs and some courageous engineer might save the day but I'd put my money on the bad guys.

    I would be surprised if it was down for more than 24 hours following that though.

    --
    My work here is dung.
    1. Re:Internet Backbone DDOS in 2002 by Shakrai · · Score: 5, Interesting

      I think 30 minutes is a generous amount of time if one of the larger botnets turned its attention on the root servers for a DDOS attack

      I think you are overlooking a two things:

      1) There's a lot more than 13 root servers nowadays. Many of the servers are mirrored using anycast. Wikipedia had a total of 123 in 2006 so it's a safe assumption that there are even more today.

      2) Even if you could render the root servers inaccessible, this doesn't "take down" the internet. Many sites would still be accessible until their DNS cache entires timed out in the nameserver that you use (likely your ISP). A lot of sites set short timeouts on the www 'A' record (for load balancing purposes) but long timeouts on the 'NS' records for the domain. In this scenario your nameserver would still know where to go to get the 'A' record and wouldn't need to consult with the root servers.

      Those caches wouldn't last forever but it would seem to offer enough time to deal with the DDOS. The internet would have limited functionality for awhile but it wouldn't "go down". Many operations (site to site VPNs for example) might not even notice.

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
  4. It can be taken down much faster now. by Anonymous Coward · · Score: 5, Informative

    http://www.networkworld.com/news/2009/040209-obama-cybersecurity-bill.html

    A federally enabled Internet kill switch will place an Internet Off Button in the White House which can be used to instantly deactivate the Internet in case of an emergency, such as the plebes getting riled up. This bill, introduced to the Senate on April Fools, is expected to pass.

  5. Re:true by Anonymous Coward · · Score: 5, Funny

    In 30 minutes?

    You're doing it wrong.

  6. Re:nah. by canajin56 · · Score: 5, Informative

    Not true! ARPANET was designed as it was because there were only a few super computing sites at the time, and they were separated by quite a bit. The redundancy comes in to play only because they didn't want to lose important access if a router broke somewhere, as they are wont to do. All it was designed for was to survive a single point of failure. But even that is distorted. Just because ARPANET was designed that way decades ago, doesn't mean that large corporations decided to keep with that philosophy when they took over!

    --
    ASCII stupid question, get a stupid ANSI
  7. (Job) security by Anonymous Coward · · Score: 5, Interesting

    Guy who works in security testing wants people to believe that the state of internet security is OMGcritical? Shouldn't this be tagged "jobsecurity" rather than "security"?

  8. 30 mins might be optimistic by Minupla · · Score: 5, Interesting

    Assuming a vulnerability is exploited in BGP, the internet would go bibi in a hurry. That's all our eggs in one basket, and it's a fairly rickety basket. There's still a lot of trust inherent in the BGP fabric and trust is a 4 letter word to anyone who deals with infrastructure security.

    Min

    --
    On the whole, I find that I prefer Slashdot posts to twitter ones because I don't get limited to 140 chars before
    1. Re:30 mins might be optimistic by spacerog · · Score: 5, Interesting
      Actually if I remember correctly the specific flaw that we discovered waaay back in the olden days of 1999 (or was it 98?) was with the Border Gateway Protocol which would cause a cascade router failure. We estimated best case scenario that large chunks of the Internet could be unreachable for up to 12 hours and worst case could be down for several days.

      The really funny thing about all this is that after Senator Thompson and the Government Affairs committee was finished pimpimg us out as media whores several unrelated people approached us and said "Hey, where you thinking of taking the net down this way..." And we would say "No, that's not what we thought of but your idea would probably work just as well."

      The thing is many of those ideas are still valid. The global Internet network is a rickety piece of technology held together with bubble gum and bailing wire. If it wasn't for the fact that people are actively trying to keep it operational I fear it would fall apart under its own weight in a very short amount of time not to mention if someone actually wanted to take it down.

      - Space Rogue
      http://www.lopht.com
      http://www.spacerog.net

  9. Re:nah. by interkin3tic · · Score: 5, Funny

    Actually, this is exactly what it's supposed to survive.

    Well, I'm reasonably certain my computer can't withstand a nuclear attack, and I don't think most porn stars are radiation-resistant, so it's really trivial to me whether or not there is still an internet after a nuclear war.

  10. Depends on who you ask... by imajinarie · · Score: 5, Funny

    According to my parents and people in my office, the Internet is occasionally down for several hours at a time. Fortunately, they have the ability to reboot it when necessary.

  11. Re:Is this news?? by myVarNamesAreTooLon · · Score: 5, Funny

    All it would take is the right cables to be cut for the internet to go down. Perhaps with a rented backhoe even.

    A single backhoe might have some trouble getting the entire internet in 30 minutes. What's the top speed on those things?

  12. Re:nah. by ParanoiaBOTS · · Score: 5, Funny

    OK, then what about by a Cylon invasion? (Which of course, would begin with a nuclear strike.) I doubt that our toaster children would have any trouble with Mccafree or Norton products.

    In my experience if we did have a Cylon invasion McAfee and Norton may be our ONLY defense. Upload it and watch as they can no longer function

  13. I am ready for the DNS takedown! by belloc1 · · Score: 5, Funny

    I have all my most important sites IP addresses written on Post It notes all over my wall.

    Bring it!

  14. Re:YES!! by vlm · · Score: 5, Interesting

    Take BGP for example. Very little security in it.

    Sounds like somebody not involved in actual BGP work and/or just scaremongering (worship me because I say scary things).

    Nobody configures their peers using dns addresses. Doesn't everyone use md5 hashes? Doesn't everyone filter their customers routes?

    I did "most of" the customer side BGP at an ISP for "years" with quite a few customers... if every time someone redistributed 0/0 or 10/8 to us we took down the internet, frankly, it would have been down most of the time. Not to mention people whom thought their old providers IP space was their own (as opposed to actual ARIN space)

    Then there's the guys who prepend like a hundred times, always good for a laugh or two.

    Folks whom think they can take down global BGP by flapping their routes a couple times and don't even know what route dampening is... well...

    Now, yeah, one bad dude could take over one router and maybe temporarily down one ISP that is run by fools who don't follow the "rules", but one badly run ISP out of bazillions is not "the internet".

    Overall, I'd say out of 30K AS, of which at least 50% don't really know what they're doing, yet they still can't take the sucker down, god knows I've seen everything tried at least once, so a couple black hats don't even have a chance.

    --
    "Science flies us to the moon. Religion flies us into buildings." - Victor Stenger
  15. Ask my girlfriend . . . by PolygamousRanchKid+ · · Score: 5, Funny

    . . . she accuses me of "turning off" or "breaking the Internet" at least once a day.

    That's the power that you get with 57 levels of Slashdot Achievements. A big switch labeled "Internet On/Off."

    --
    Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
  16. Re:nah. by freyyr890 · · Score: 5, Funny

    OK, then what about by a Cylon invasion? (Which of course, would begin with a nuclear strike.) I doubt that our toaster children would have any trouble with Mccafree or Norton products.

    In my experience if we did have a Cylon invasion McAfee and Norton may be our ONLY defense. Upload it and watch as they can no longer function

    You're horrible. Not even the Cylons deserve Norton and McAfee.

  17. Re:NAH by BarryJacobsen · · Score: 5, Funny

    If Family Guy has taught me anything, it's that everyone should go to the nearest Twinkie factory in the event of a nuclear holocaust.

    If Family Guy has taught you anything, then may god have mercy on us all.

  18. Re:nah. by peragrin · · Score: 5, Funny

    I'm saving my copy of windows ME just for the cylon revolt.

    --
    i thought once I was found, but it was only a dream.