Slashdot Mirror


MasterCard Hit By WikiLeaks Payback Attacks

An anonymous reader writes "MasterCard's website has been hit by a distributed denial of service attack. Netcraft describes how the attack uses a voluntary botnet of LOIC (low orbit ion cannon) users to swamp sites with traffic. PostFinance, the PayPal blog and Swedish prosecutors have been targeted previously."

49 of 715 comments (clear)

  1. Idiots! by santax · · Score: 5, Insightful

    Don't target the website, target the servers that do the money-traffic!!!!

    1. Re:Idiots! by kevinNCSU · · Score: 4, Insightful

      Why would it benefit me personally to have to deal with wads of cash, write checks or directly expose my bank account via debit cards rather then making credit card transactions? And since when did it be OK for someone else to illicitly make that decision for me? How the fuck do you get off talking about limiting freedom and then turn around and do the exact same thing. Talk about hypocritical.

  2. Mastercard: Thanks Slashdot by cdrudge · · Score: 5, Insightful

    And now because of Slashdot linking to MasterCard, their denial of service attack increased even more.

  3. Poor Mastercard by Cornwallis · · Score: 4, Insightful

    I wonder how they feel being denied due process...

    1. Re:Poor Mastercard by Python · · Score: 4, Insightful

      It doesn't matter, the mob has spoken and we all know the mob is always right. Otherwise the mob will turn on us. See, who needs courts and laws, theres no such thing as mob justice that isn't always right.

      --

      Python

  4. Wikileaks Vs Sites of Ill Repute by eldavojohn · · Score: 5, Interesting

    Reminds me of an article I saw on Techdirt the other day pointing out that Visa and Mastercard were getting all high and mighty about morality in regards to Wikileaks but happily fielding transactions for sites like the KKK.

    --
    My work here is dung.
    1. Re:Wikileaks Vs Sites of Ill Repute by girlintraining · · Score: 5, Insightful

      Visa and Mastercard contribute loads of cash to political candidates -- you may recall recently the whole credit reform stuff making headlines? Well, Congress reached back and asked them to kill wikileaks as a return favor. Good old boys network... has nothing to do with ethics, since they have none: They're a business.

      --
      #fuckbeta #iamslashdot #dicemustdie
    2. Re:Wikileaks Vs Sites of Ill Repute by Legion303 · · Score: 4, Interesting

      since Wikileaks next target seems to be a major bank

      That's the one I'm waiting for. I don't give two shits about the majority of these gossipy cables.

  5. Re:"voluntary botnet" by Applekid · · Score: 5, Informative

    Just like people volunteer for Folding@Home. If one believes in a cause strongly enough they could be convinced to lend CPU cycles (well, network packets) to help DDoS a site.

    --
    More Twoson than Cupertino
  6. Re:why mastercard? by savanik · · Score: 4, Informative

    According to the Washington Post, it's all due Mastercard no longer permitting donations via their services to Wikileaks.

    However, I doubt the DDOS is going to change their mind.

  7. Re:Stupid action by truthsearch · · Score: 4, Informative

    Just an FYI: you can't take your money elsewhere unless you go completely cash and are picky with ATMs. MC owns a few of the biggest consumer money transfer networks, so even if you pick Visa you'll still often be using MC services.

  8. Re:Stupid action by hansraj · · Score: 5, Informative
  9. Re:Stupid action by linhares · · Score: 5, Informative

    Freedom of speech, priceless. For everything else, there's Mastercard.

  10. Forgive me if I'm off topic here... by Anonymous Coward · · Score: 5, Funny

    I keep trying to read the story at http://www.mastercard.com/ but nothings happening.

    1. Re:Forgive me if I'm off topic here... by jjeffries · · Score: 5, Informative

      The site's just slow, keep hitting reload!

  11. Re:why mastercard? by epiphani · · Score: 5, Insightful

    You actually make a very interesting point.

    For the purposes of elections and raising funds for a political party, monetary donation is considered an exercise of free speech. That is the premise that allowed billions of extra funds from private individuals to go towards the election without any tracking.

    Yet, financially supporting an organization deemed "terrorist" by the government is not a function of free speech. Now the lines are becoming even more blurred, given Wikileaks isn't even termed a terrorist organization. They are, however, denying the public the ability to support them financially.

    By the same logic of the courts, this should be an issue of free speech. Mastercard et al are impeding free speech.

    --
    .
  12. Re:Stupid action by Pojut · · Score: 5, Informative
  13. You scratch my back... by slim · · Score: 5, Informative

    Note that the latest leaks show that the US Govt put pressure on Russia, to avoid legislation that would level the field for Visa/Mastercard competitors:

    http://www.guardian.co.uk/world/2010/dec/08/wikileaks-us-russia-visa-mastercard

  14. High fees? ...Millions of dollars by digitaldc · · Score: 4, Funny

    Anon DDOS attack? ... Priceless

    --
    He who knows best knows how little he knows. - Thomas Jefferson
  15. Re:why mastercard? by dkleinsc · · Score: 5, Insightful

    Well, you see, the text of the First Amendment states "Congress shall make no law abridging the freedom of speech". In this case, instead of making a law, they're just suppressing speech by strongly suggesting to the corporations that it would be in their best interest to comply.

    With the Wikileaks case, the powers that be have demonstrated quite clearly that they don't give a damn what's legal and what's not legal. They're going to do what they're going to do, and screw the Constitution if it gets in the way.

    --
    I am officially gone from /. Long live http://www.soylentnews.com/
  16. Re:Whatever... by linhares · · Score: 4, Interesting
    well this "operation payback" has struck gold before, against the blackmailing towards alleged filesharers:

    Operation Payback hit ACS Law a second time, knocking out the site. In the process of bringing it back up, someone exposed the server's directory structure through the Web instead of showing the website itself. Those conducting Operation Payback immediately moved in and grabbed a 350MB archive of ACS Law e-mails, then threw the entire mass up on sites like The Pirate Bay. This is more than a matter of mere embarrassment. The UK has tougher data protection laws than the US, and the country's Information Commissioner has already made it clear that ACS Law could be on the hook for hundreds of thousands of pounds. That's because, in addition to his iTunes receipts ("Hooray for iPads. I love mine," Crossley says at one point) and Amazon purchase orders, the e-mails include numerous attachments filled with all manner of private information: names, addresses, payment details, passwords, revenue splits, business deals.

  17. Re:Stupid action by Moryath · · Score: 5, Interesting

    "Act like fucking adolescents?"

    This is the modern equivalent of a lunch counter sit-in. No user has had their computer hijacked, they are all participating of their free will. Are they "disrupting business"? Perhaps, but no worse than the lunch counter sit-ins did.

  18. Visa and MC have no problem being associated.... by Ismellpoop · · Score: 5, Informative

    with websites selling fake viagra.
    Last year I got a complaint from a Danish ISP that i was spamming their customers. I requested and got forwarded one of my supposed emails. A little bit of poking around I found that the viagra company was based in Hong Kong. Whois told me the address, names, telephone numbers etc. (you'd thing scum like that would hide their info better).
    I phoned and emailed Visa, MC, the spam company, even their service provider. The only response was from that Danish ISP their tech guy if you can call him that was complaining about my continual spamming even after I gave him the proof that the email originated from China not Canada. You would think traceroute and whois are kind of basic tools and any dumbass should be able to use them but this guy didn't even know how to look at email header info.
    As for visa MC they would not be bothered even though I gave them all the info (btw they were shipping their product from Texas) Visa and MC told be to get bent.

  19. Re:why mastercard? by Anonymous Coward · · Score: 5, Informative

    In America, distributing classified documents is illegal.

    Not true. It's illegal to initially leak them if you have clearance. Republishing them is not... note that the New York Times has republished most of the leak; has Mastercard stopped doing business with them?

  20. Re:Stupid action by somersault · · Score: 4, Funny

    I don't think they count as zombies when the botnet is voluntary. This is more like a coordinated attack by ninjas and pirates.

    --
    which is totally what she said
  21. Re:why mastercard? by Python · · Score: 4, Insightful

    Its probably going to reenforce their decision, and give anyone else pause if they choose to do business with Wikileaks. This is a really dumb thing to do, look at it this way, why would any payment process ever want to work with wikileaks again if they know their fanboys will attack them if they don't continue to do business with them? Its a no win situation for the payment processor, its better to never do business with wikileaks.

    --

    Python

  22. Re:why mastercard? by compro01 · · Score: 4, Informative

    In America, distributing classified documents is illegal. They stopped allowing people to send money to a criminal (in their jurisdiction) company. Case closed. This has nothing to do with 'free speech' and the First Amendment doesn't have anything to do with this.

    Your statement is incorrect. Please read the decision of New York Times Co. v. United States.

    --
    upon the advice of my lawyer, i have no sig at this time
  23. Re:Stupid action by scubamage · · Score: 5, Interesting

    I would expect that to never come to light honestly. If they admitted how much the DDoS cost them, it would essentially give a 'quantifiable' damage scores (not sure how else to describe it) to anyone who pursued similar attacks in the future. It'd be fascinating to see though; the amount of lost revenue, divided by the number of unique IP's in the DDoS should give you dollars lost on a per-node basis. Then it'd give you cost metrics, and where there's readily available cost metrics, there's business opportunities. Just think - "we'll pay you $.01 to run this program for an hour!" while in the background you're causing 250$ in damage to a target. Sorry, mind is wandering in the dark side now :)

  24. Re:Stupid action by linhares · · Score: 5, Interesting

    it seems that donations to wikileaks are still being processed by this startup: http://eu.techcrunch.com/2010/12/08/wikileaks-continues-to-fund-itself-via-tech-startup-flattr/

  25. Re:why mastercard? by BarryJacobsen · · Score: 5, Informative

    Maybe I'm old fashioned, but I thought you had to actually be convicted to be a criminal - not just accused.

  26. Re:why mastercard? by DavidTC · · Score: 4, Insightful

    Really? The government can just threaten companies to get them to stop providing services to people whose speech the government doesn't like? And that's not a free speech issue?

    I love how so many people are so unknowledgeable about this issue that they think Visa, Mastercard, and Paypal all suddenly decided to stop provides services for no reason, when both Mastercard and Paypal stated quite bluntly that the government made them do it, and it's probably the same story for Visa.

    Remember, folks, the government can't punish you for free speech, but it can threaten everyone who interacts with you so you quickly die homeless and staving in the gutter.

    --
    If corporations are people, aren't stockholders guilty of slavery?
  27. Re:why mastercard? by Digital+Vomit · · Score: 4, Insightful

    Too bad. They're essentially a "common carrier" for funds and should have to act that way.

    Also, I don't associate MasterCard with, say, a big box store that royally pisses me off by jerking me around (which is similar to the situation with MC and Wikileaks). The excuse that MC doesn't want to be associated with Wikileaks is B.S.

    --
    Modern copyright is theft of culture from everyone and it retards the progress of the useful arts and sciences.
  28. Re:Stupid action by scubamage · · Score: 4, Interesting

    Honestly people refer to anon as adolescents, but I don't think its true. If you look at humans in general, in large groups all of us act like spoiled children. They all want to suck in as much resources as possible, fight to place themselves as high as they can on the social ladder, pee on the beta through omega dogs, and be able to do as they please. Examples: British colonialism treated colonies like second class citizens, extending idiotic laws like the local lord could sleep with peoples wives on their wedding nights, etc. The US constantly interferes with other governments, and after destabilizing them, whines that results aren't in our favor. There's lots of examples. I think Agent Kay put it best, "A person is intelligent. People are dumb, panicky, dangerous animals." Hell, in social psychology there are extensive studies of mob behavior, and they all point towards humans being pretty damn wretched cruel creatures when in groups. Anon is about as principled as any other mob. At least they're predictable insomuch as they always support the first amendment and open information; even if they cast a broad net on who they target.

  29. Re:Stupid action by Yvanhoe · · Score: 4, Insightful

    Well, it hurts their business doesn't it ? It is a payback operation. Turning down a legitimate client without any judgement for political reason was a stupid action. Apparently it is fair to do so. Therefore except more stupid actions, that is what you need to get a political voice nowadays. Politicians don't react to legitimate and rational arguments. They react to fear, to things they don't understand, and mostly to the most stupidly statements made in the most stupid way.

    Anonymous will get more media coverage for that than outraged reactions of various moderate group. Do they desserve it ? No, sure. Do they have it ? Hell yes.

    This may be a stupid action, but it is the most likely to have an impact.

    --
    The Wise adapts himself to the world. The Fool adapts the world to himself. Therefore, all progress depends on the Fool.
  30. Re:Stupid action by pitchpipe · · Score: 5, Insightful

    Such stupid actions will only serve to discredit Wikileaks further.

    Undoing some moderation here but I must say: BULLSHIT! The only reason the government and these companies are going after Wikileaks is because Wikileaks has dirt on them, and Wikileaks has credibility. Your statement notwithstanding.

    --
    Look where all this talking got us, baby.
  31. Re:Stupid action by serviscope_minor · · Score: 5, Insightful

    quite rightly distancing itself from Wikileaks because of some very illegal activities.

    What is wikileaks doing that is illegal? And are they distancing themselves from the newspapers that are republishing the leaks? It's not quite right. It is a couple of very large corporations colluding to remove freedom of speech, when the speech in question reflects badly on them.

    --
    SJW n. One who posts facts.
  32. Re:Stupid action by geminidomino · · Score: 5, Insightful

    Whoever is doing it, such attacks are just plain wrong. Attacking infrastructure may be harmful and amounts to terrorism

    Oh for fucks sake, NO, it doesn't!

    Terrorism is coercion through FEAR (or, dare I say it, "terror?"). It is NOT embarrassing hypocritical governments. It is NOT interfering with our corporate overlords. It is NOT inconveniencing an ignorant and apathetic populace in their yearly December feeding frenzy.

  33. Masterrace? Reactions from Europe by formfeed · · Score: 5, Informative
    As Newspapers allover Europe start pointing out: Mastercard doesn't have any problems collecting donations for the Klan.
  34. Re:why mastercard? by Kirijini · · Score: 5, Informative

    Shameless karma whoring:

    New York Times Co. v. United States, 403 U.S. 713 (1971)

    The unanimous opinion itself is very short; essentially, designating documents as secret and punishing anyone who publishes them is a 'prior restraint' and presumed unconstitutional.

    We granted certiorari in these cases in which the United States seeks to enjoin the New York Times and the Washington Post from publishing the contents of a classified study entitled "History of U. S. Decision-Making Process on Viet Nam Policy." Post, pp. 942, 943.

    "Any system of prior restraints of expression comes to this Court bearing a heavy presumption against its constitutional validity." Bantam Books, Inc. v. Sullivan, 372 U. S. 58, 70 (1963); see also Near v. Minnesota, 283 U. S. 697 (1931). The Government "thus carries a heavy burden of showing justification for the imposition of such a restraint." Organization for a Better Austin v. Keefe, 402 U. S. 415, 419 (1971). The District Court for the Southern District of New York in the New York Times case and the District Court for the District of Columbia and the Court of Appeals for the District of Columbia Circuit in the Washington Post case held that the Government had not met that burden. We agree.

  35. Re:Stupid action by mseeger · · Score: 4, Insightful

    Please dfferentiate by action:

    Wikileaks releases documents with insight into the Iceland bank scandal: + Credibility
    Wikileaks releases documents/videos with Insight to Iraq: + Credibility
    Wikileaks founder shows unmitigated ego and drives off supporters: - Credibility
    Wikileaks releases diplomatic small talk: +/- Credibility
    Wikileaks founders handling of dubious rape accusations: - Credibility
    Wikileaks hangarounds launch DDOS attacks: -- Credibility

    I think there is a strong need for Wikileaks (or something similar). While Julian Assange has done some great services, he is probably not the person to head such an organisation. I am highly critical of the release of the cables. It contained very little information for the damage done. I think the decision to release those cables was because they could release them and not due to the insight they provided. My impression is that ego and publicity had a lot to do with it.

    CU, Martin

  36. Re:why mastercard? by Sloppy · · Score: 4, Insightful

    Except the first amendment only applies to the government. If a company wants to impend your speech they can.

    Many people believe feel this denial of service was caused by government. Paypal has admitted it. I don't know if Mastercard and VISA have admitted it yet, but it's not hard to guess. We're not talking about private action.

    If I own the printing press which you rent to print things I consider obnoxious, and then I decide I don't want to be associated with your bullshit anymore and stop letting you use my printing press, then you're right, there's nothing to suggest the government has overstepped its constitutional limits.

    If I own the printing press which you rent to print things the government considers obnoxious, so they send goons over to point a gun at my head and explain that I will not let you use my printing press anymore, then the government has overstepped its constitutional limits. And that's what happened here, assuming money==speech.

    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  37. Re:Stupid action by slim · · Score: 5, Interesting

    Consumer action is another tactic. Here's the letter I sent my bank:

    Dear Smile.co.uk,

    One of the reasons I am a customer of Smile Banking is your commitment to ethical banking.

    I do not believe that Visa's recent decision to block payments to Wikileaks is consistent with that ethical stance.

    I understand that due to Visa's near-monopoly on card payments and online payments, it is not really practical for either Smile Banking or myself personally to discontinue our use of Visa debit card facilities. However I would like to send a message to Visa that this decision has weakened, not strengthened, their brand reputation to me and, I would assume, others.

    To this end:

    1. Please would you forward this message to Smile Banking's board of directors
    2. Please would Smile Banking collate any similar messages of disapproval regarding Visa's actions from other Smile customers, should they be received, and communicate the aggregate message to Visa
    3. Please, so that I can modify my behaviour where possible, would you advise me to what extent the following activities result in income to Visa
        a: A debit card payment where I the cardholder am present
        b: A cash withdrawal at a high street ATM
        c: An online/telephone debit card payment

    Many thanks,

  38. Re:Stupid action by flyingsquid · · Score: 4, Insightful
    "Exposed" as doing what, exactly? If you read the cable, what it says is this: Russia wants to enact a law that would force all credit card transactions to be processed in Russia. The American companies are forced to either (a) let the Russians process the transactions and collect all the profits, or (b) move all their operations to Russia, which requires them to invest a huge amount of money setting up shop in Russia. Either way, it becomes harder and more expensive for American companies to keep doing business in Russia. It sounds like Russia is trying to force them out of the market, and you get the distinct impression that someone in Russia stands to profit hugely from this law .

    Now, I admit that it's pretty funny to see the credit card companies getting screwed for a change. But basically, the Russians tried to f*** over a couple of American businesses, and the U.S. government decided it was necessary to step in and pressure the Russians not to do this. Part of the government's job is to look out for the economic interests of the United States, which includes private corporations. U.S. diplomats are doing their job. Truly shocking indeed.

  39. dude, get a grip by falconwolf · · Score: 5, Insightful

    you're comparing this to anti-segregation protests???

    Who needs to get a grip, one who equates one protest with another or one who ridicules such comparisons?

    Quite frankly voters can not make informed decisions when they are not informed. Wikileaks is informing voters of what their government is doing.

    Falcon

    Now as for "informed voters" that is another subject.

  40. Re:Stupid action by Biggseye · · Score: 5, Insightful

    this is ammo for those that wish to control the Internet. This can not end well.

  41. Re:Stupid action by GameboyRMH · · Score: 4, Insightful

    Instead of smashing 4chan's servers (which wouldn't stop the attacks and would just make you the next target, and give you an anti-free-speech reputation) why not call up Visa and Mastercard and complain, and ask why Wikileaks' accounts have been shut down while they still process payments for the KKK?

    And at 5 grand a day, unless you're running on razor-thin margins with just-in-time production, this shouldn't hurt you too much. Relax. You don't even have any competition AFAIK.

    --
    "When information is power, privacy is freedom" - Jah-Wren Ryel
  42. Re:Stupid action by IgnoramusMaximus · · Score: 5, Insightful

    If you read he cable, what it says is this: Russia wants to enact a law that would force all credit card transactions to be processed in Russia.

    Which of course is not the case in "the land of the free, home of the brave", the Glorious USA, where in the spirit of freedom and competition all credit card transactions are welcomed to be processed by assorted small companies in Russia, Finland and Monaco and are not nearly exclusively dominated by a pair of nasty anti-competitive global US-based cartels like Mastercard or Visa who own all the processing facilities almost everywhere and enjoy protection of bought-and-paid-for politicians!

    Oh, wait...

  43. Re:Masterrace? Reactions from Europe by JohnFluxx · · Score: 4, Informative

    Please see the case of NEW YORK TIMES CO. v. UNITED STATES which examines this section and the surrounding ones, and found that the New York Times was not guilty under it for publishing classified documents:

      http://caselaw.lp.findlaw.com/scripts/getcase.pl?court=us&vol=403&invol=713

  44. Re:Stupid action by astrosmurf · · Score: 5, Informative

    I am highly critical of the release of the cables. It contained very little information for the damage done. I think the decision to release those cables was because they could release them and not due to the insight they provided. My impression is that ego and publicity had a lot to do with it.

    CU, Martin

    On the contrary, the cables contain plenty of evidence of government wrongdoing, although not necessarily by the US government. As a Swede, it is very interesting to know that the us embassy reports that my government prefers to share information about Swedish citizens using a "strong but informal agreement" instead of having a formal agreement, as such an agreement would have to be discussed by the parliament. If the cable is correct, my government is probably violating the Swedish "grundlag", which can loosely be translated as the constitution of Sweden. See http://www.thelocal.se/30654/20101206/