Go Daddy: Network Issues, Not Hacks Or DDoS, Caused Downtime

Had to Take the Network Down... by CanHasDIY · 2012-09-11 06:35 · Score: 3, Funny

... so the NSA could install their backdoors.

--
An enigma, wrapped in a riddle, shrouded in bacon and cheese

Re:Had to Take the Network Down... by Anonymous Coward · 2012-09-11 06:48 · Score: 0

Nah, the TLAs don't need downtime to install their backdoors.

anonymous U So haxor!!! by DeTech · 2012-09-11 06:36 · Score: 4, Funny

Wow, anonymous was so good they were undetectable... And they almost got away with it too. To bad anonymous caught them.

Re:anonymous U So haxor!!! by Anonymous Coward · 2012-09-11 18:16 · Score: 0

Everyone just blindly believes these "anonymous" cats (which how can they be "anonymous" if they are famous now?). Just like when they stole the data from the FBI. Sure lets believe the professional thieves and lairs.
Re:anonymous U So haxor!!! by cod3r_ · 2012-09-12 02:49 · Score: 0

Anything that happens ever was caused by anonymous.

Doesn't Really Help by Anonymous Coward · 2012-09-11 06:37 · Score: 5, Insightful

This just makes them look even less competent as a service provider, if the problem was purely internal then.

Re:Doesn't Really Help by dyingtolive · 2012-09-11 06:42 · Score: 5, Funny

Yup.

"Good news everyone, we weren't compromised. We're just incompetent!"

--
Support the EFF and Creative Commons. The war is coming, and they're supporting you...
Re:Doesn't Really Help by AlienSexist · 2012-09-11 06:44 · Score: 3, Interesting

One way to be sure... hit em' again!
Re:Doesn't Really Help by MrEricSir · 2012-09-11 06:50 · Score: 1

This just makes them look even less competent as a service provider, if the problem was purely internal then.
Or if it turns out it was a hacker, that won't inspire confidence in GoDaddy either.

--
There's no -1 for "I don't get it."
Re:Doesn't Really Help by pspahn · 2012-09-11 06:52 · Score: 2

Or possibly a way for them to market their own Premium DNS offerings. I understand that users on Premium DNS were hardly affected (according to a co-worker who was monitoring the whole thing yesterday and had a number of Premium DNS users).

--
Someone flopped a steamer in the gene pool.
Re:Doesn't Really Help by whoever57 · 2012-09-11 06:58 · Score: 2

Or possibly a way for them to market their own Premium DNS offerings. I understand that users on Premium DNS were hardly affected (according to a co-worker who was monitoring the whole thing yesterday and had a number of Premium DNS users).

Odd. I saw the reverse: our company's domain which is on GoDaddy's Premium DNS servers was affected, while a colleage's personal domain on the standard DNS servers was unaffected.

--
The real "Libtards" are the Libertarians!
Re:Doesn't Really Help by fermion · 2012-09-11 07:01 · Score: 2

I commend them for being hones with their mistake. As an alleged premier top level domain name reseller, though, we would expect that they had the facilities to prevent both internal errors and external attacks. If I were superstitious, I would say something in the Juju right now. Lots of computer stuff going down.

--
"She's a scientist and a lesbian. She's not going to let it slide." Orphan Black
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 07:03 · Score: 0

This was a DNS problem and DNS is a woodoo, I bet nobody at GoDaddy know exacly how it works and what is wrong with it due to unmanageable config files and unpredictable behaviour of BIND.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 07:06 · Score: 0

As much as I am a BIND basher (tinydns for the win), even BIND can't help if there is a routing issue.
Re:Doesn't Really Help by caknuckle · 2012-09-11 07:06 · Score: 4, Insightful

This just makes them look even less competent as a service provider, if the problem was purely internal then.
It might make them look less competent, but on the flip side suggests an "isolated" incident, and that it won't likely happen again, whereas if it's hackers you as a customer may wonder when the next hack will happen and what effect it will have on your websites, DNS etc. I.e. we better move off before it gets targeted again.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 07:07 · Score: 0

Am I the only one who always imagine Professor Hubert J. Farnsworth when a sentence begins with "Good news everyone"?
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 07:12 · Score: 0

This just makes them look even less competent as a service provider, if the problem was purely internal then.
The VP of Marketing made a highly technical and calculated decision as to how to spin this.
It went something like this...
(flips coin)
Re:Doesn't Really Help by osu-neko · 2012-09-11 07:17 · Score: 1

"Good news everyone, we weren't compromised. We're just incompetent!"
To be fair, everyone who uses their hosting is already well aware of that, so this doesn't really hurt them to say...

--
"Convictions are more dangerous enemies of truth than lies."
Re:Doesn't Really Help by Kaptain+Kruton · 2012-09-11 07:31 · Score: 5, Insightful

It makes GoDaddy appear incompetent to geeks and computer-savvy users. However, to the average person that does not know much about computers, they will accept it as a computer problem that 'just happens'.... just like all of the errors that they have on their home computers that supposedly have no cause. As long as GoDaddy makes the problem sound really technical while saying they know exactly what caused it and know how to quickly implement a solution that prevents future instances, they will appear competent to the average computer user. After all, to an average user, an admin's ability to solve a problem that sounds complex will make the admin's skill sound really impressive.
Remember many of GoDaddy's customers are individuals and small businesses that have mediocre computer skills that rely on a simplified WYSIWYG tool. To them, evil hackers that steal information are much worse than an annoying problem that just happens because computers all have problems (in their experience). As long as the customer doesn't realize that it was a problem that should not have occurred and it was only caused by incompetence, then they are less likely to lose those customers.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 08:03 · Score: 0

Bring down the websites of thousands of high profile customers? Sounds like the very definition of an RGE. http://etherealmind.com/network-dictionary-resume-generating-events/
Re:Doesn't Really Help by dyingtolive · 2012-09-11 08:40 · Score: 1

Nope. I phrased my comment intended for it to be read with his voice.

--
Support the EFF and Creative Commons. The war is coming, and they're supporting you...
Re:Doesn't Really Help by hazah · 2012-09-11 08:41 · Score: 1

Nope :).
Re:Doesn't Really Help by hazah · 2012-09-11 08:44 · Score: 1

I don't think you did.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 08:47 · Score: 0

Heh... It'll be less inspiring considering the amount of chaos they caused. A cracker/script kiddie means they got PWNED. Could be incompetence or not there.
If it was an INTERNAL problem...heh...that's really bad, image-wise, for them. That means they're just utterly incompetent and bodged up the Internet because of it.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 08:57 · Score: 0

We had a few dozen domains on their Premium DNS, all down.
Re:Doesn't Really Help by EdIII · 2012-09-11 09:07 · Score: 1

Routing issues aside, the problem could have been largely mitigated with reasonable TTLs IHMO.
I refuse to use GoDaddy because they are lying fucking sociopaths, but from time to time, I do need to help people out with services hosted there. Last time I saw a DNS control panel it had TTLs of 30 minutes as the default for most DNS records.
The outage lasted 6 hours. If you had a TTL of 12-24 hours you would have been just fine, unless I am completely off base on how caching DNS servers operate.
Such short TTLs don't make sense anyways for most use cases. DDNS, and some setups I can understand having it, but webservers and mailservers?
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 09:20 · Score: 0

This just makes them look even less competent as a service provider, if the problem was purely internal then.
So how about Google then when they lost a datacenter (network-wise) and their backups caused internal DoS?
I'm not exactly a fanboy of GoDaddy and would move from them if possible, but there does not exist viable alternatives. Which domain registrar provides,
1. CND (canadian dolar payment)
2. DNSSEC
3. IPv6 glue
4. bonus - Canadian based
I've looked at Tucows. No DNSSSEC. Not even CND option!!
Joker.com is even worse than godaddy - they wanted me to send them high-res scanned CC details and photo ID to make a payment worth about $60 despite paying with same CC year before. And the domains were years old too!
So yes, you may say Godaddy sucks, but there really aren't many other competent registrars anyway.
As for hosting providers, a lot more choices. No, I would not host my domains with GoDaddy. I don't even host DNS with them, just use them as registrar.
Re:Doesn't Really Help by babywhiz · 2012-09-11 09:54 · Score: 1

Actually, the voice in my head is from Icecrown Citadel's Professor Putricide...."Good news, everyone! I've fixed the poison slime pipes!" (during the Rotface encounter)
Re:Doesn't Really Help by fak3r · 2012-09-11 09:56 · Score: 1

Wha?

--
fak3r.com
Re:Doesn't Really Help by Kalriath · 2012-09-11 10:20 · Score: 1

Which almost 100% certainly is based on Professor Farnsworth.

--
For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
Re:Doesn't Really Help by bill_mcgonigle · 2012-09-11 10:29 · Score: 4, Insightful

"Good news everyone, we weren't compromised. We're just incompetent!"
And we already knew they were evil , so ....
GoDaddy for Congress!
(corporations are people, my friend)

--
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 11:11 · Score: 0

Short TTLs are handy when an IP change is looming.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 11:24 · Score: 0

Sorry bub. Welcome to a world where the USD and EUR still dominate. If you want your silly monopoly money to be accepted widely, you will just have to wait a few years for the two big guys to fail.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 11:50 · Score: 0

It's not their fault, they were just stupid enough to rely on Cisco.
Re:Doesn't Really Help by geminidomino · 2012-09-11 16:02 · Score: 1

It's not that their premium DNS server is all that robust.
You just can't have secondary slave DNS servers without it...
Re:Doesn't Really Help by geminidomino · 2012-09-11 16:05 · Score: 1

then they deserve to have there fucking identities stolen, specially since there using a fucking wysiwyg tool to build a fucking webpage. go anonymous, obliterate godaddy and there fucktarded customers that are to fucking stupid to even exist let alone use a computer.

You tell 'em, Scrappy.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 16:18 · Score: 0

Then you cant say they are dishonest.
As a matter of fact, you might say that they are committed to the customer for coming clean on the reason for the outage instead of blaming some 'mystery hacker'.
Acknowledging that there is a problem is positive progress.
Re:Doesn't Really Help by zaphod777 · 2012-09-11 16:22 · Score: 1

Sure, like Amazon or Microsoft hasn't had internal infrastructure issues either. Mistakes happen, things get overlocked, and then fixed. I am more interested in what their lessons learned were and what they have done to prevent a similar incident in the future.

--
"Don't Panic!"
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 21:21 · Score: 0

You would be wrong.
Re:Doesn't Really Help by Anonymous Coward · 2012-09-11 21:23 · Score: 0

Wrong...most defaults are around 12 hours.

If you believe that... by Rix · 2012-09-11 06:37 · Score: 2, Insightful

Then I've got a fully alive not dead elephant to sell you.

Re:If you believe that... by Anonymous Coward · 2012-09-11 06:42 · Score: 2, Insightful

How does it help GoDaddy to tell everyone that they are incompetent instead of admitting they were attacked?
Re:If you believe that... by Rix · 2012-09-11 07:04 · Score: 0

If they were successfully attacked then their both incompetent and insecure.
Re:If you believe that... by Anonymous Coward · 2012-09-11 07:17 · Score: 0

If they admit the downtime of millions of sites was the work of a lone hacker their customers would lose all confidence.
Re:If you believe that... by Anonymous Coward · 2012-09-11 07:36 · Score: 0

they're not their. bad habit, I used to do the same thing.
Re:If you believe that... by Anonymous Coward · 2012-09-11 09:25 · Score: 0

Sorry, I'm not into that.
Re:If you believe that... by fafaforza · 2012-09-11 13:24 · Score: 1

And what if that hacker does it again and GoDaddy has to admit they were hacked? They'll lose customer from a second downtime, and they'll likely lose a lot more from being exposed as liars. I don't see a reason for them to lie, really, especially by admitting it was internal.
Re:If you believe that... by rs79 · 2012-09-12 01:01 · Score: 1

http://rs79.vrx.net/works/photoessays/2011/godaddy/
Bob makes his own dead pachyderms.

--
Need Mercedes parts ?

Wow by MyLongNickName · 2012-09-11 06:38 · Score: 1

Talk about having a bad day at the office... can you imagine being a Sys Admin at GoDaddy?

We have a few odd DNS entries still hosted at GoDaddy. We'll be yanking those last ones away. Any advice on how to set it up so I'm not depending on one registrar?

--
See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year

Re:Wow by cnastase · 2012-09-11 06:43 · Score: 1

Any advice on how to set it up so I'm not depending on one registrar?
Yes. You can depend on more hosting services which use different upstream providers and are located in different datacenters. And pray they don't go offline in the same time :)

--
Born to raise hell.
Re:Wow by kwalker · 2012-09-11 06:49 · Score: 1

That doesn't get around your registrar going down, just your hosting.

--
... And so it comes to this.
Re:Wow by MyLongNickName · 2012-09-11 06:53 · Score: 1

Thanks. I was trying to figure out how cnastase's solution was helping.

--
See my journal for slashdot ID's by year. Mine created in 2005. http://slashdot.org/journal/289875/slashdot-ids-by-year
Re:Wow by Anonymous Coward · 2012-09-11 06:54 · Score: 0

Unless your hosting your DNS or actual website at your registrar - once you register your domain and they push your NS to roots. They could could go down for months even years and it would not matter. Unless you needed to change your NS for your domain, or register a new domain registrar has nothing to do with actual access to sites or dns.
Re:Wow by kwalker · 2012-09-11 07:04 · Score: 5, Interesting

You would think so, but the company I work for uses GoDaddy (At least up until today we did, we may be going elsewhere now) for our registrar, but nothing else. We run our own DNS servers, our own web servers and load balancers, our own mail servers, etc. but we got scads of complaints about "the website is down" yesterday during the event. We traced it back to external DNS failures, but I have full-time monitoring on all of our systems and nothing on our end even hiccuped. It worked for some locations but not others.
It makes no sense to me either.

--
... And so it comes to this.
Re:Wow by Anonymous Coward · 2012-09-11 07:25 · Score: 2, Insightful

You sure it was not say a SSL issue with certs issues by them - they now are a CA as well. The crl is a crl.godaddy url -- depending on browser, if crl is not available then ssl can be flagged as invalid.
A registrar of a domain has NOTHING to do with the resolving of your domain, once it has been sent to roots.
Do a simple dig +trace query for your domains, where in that line would your registrar be talked too? You hit roots, you hit servers for your tld (org.com,etc), you hit your NS = done. A registrar does not come into play for the resolution of a fqdn - unless they are hosting your dns, or they host the site.
Now if godaddy was in line for resolution of your the domain your NS reside in, then ok that could cause some problems if they are down.
What are you hosting on your site? If say ADs or images from other domains dns or site was hosted by godaddy - that could cause some issues if site loading if parts of your page could not be resolved.
Re:Wow by Alien+Being · 2012-09-11 08:04 · Score: 1

Bogus glue records pointing to godaddy name servers instead of your own?
Re:Wow by Anonymous Coward · 2012-09-11 09:17 · Score: 0

Bought my domain through godaddy and since all I use them for is a registrar (self-hosted everything), I don't care enough to bother switching registrars.
At no point during the outage did I find my domain not working. Perhaps you have a case of things breaking at the same time.
Re:Wow by kwalker · 2012-09-11 09:45 · Score: 2

Yes, I'm sure it wasn't an SSL issue. It was a straight DNS "Domain not found" problem.
However, thank you for the idea of looking up the secondary NS records. Turns out our .com's nameservers reside in our .net domain, which is handled by GoDaddy. I'm off to change those to our static IP addresses.

--
... And so it comes to this.
Re:Wow by Anonymous Coward · 2012-09-11 16:15 · Score: 0

This is a good explanation.

So ... why are you at -1 again?

Lies by Anonymous Coward · 2012-09-11 06:38 · Score: 0

I don't believe them. Why would a company employing many "networking experts" admit to being seriously disrupted by script kiddies?

Of course they would deny it.

Re:Lies by dgatwood · 2012-09-11 06:44 · Score: 4, Funny

Never attribute to malice what can be attributed to GoDaddy's incompetence just as easily.

--
Check out my sci-fi/humor trilogy at PatriotsBooks.
Re:Lies by maxwell+demon · 2012-09-11 06:59 · Score: 3, Insightful

What's worse: Not being able to keep your network running when someone actively tries to disrupt it, or not being able to keep your network running under otherwise perfectly normal conditions?

--
The Tao of math: The numbers you can count are not the real numbers.
Re:Lies by causality · 2012-09-11 13:30 · Score: 1

Never attribute to malice what can be attributed to GoDaddy's incompetence just as easily.
Insecurity and exploitability are forms of incompetence. So this doesn't actually make much of a difference.

--
It is a miracle that curiosity survives formal education. - Einstein
Re:Lies by Anonymous Coward · 2012-09-11 16:25 · Score: 0

Interpretation: Dont hire dgatwood.

Perhaps... by ackthpt · 2012-09-11 06:39 · Score: 4, Interesting

if they'd pay some of that massive advertising budget to competent employees, quality software and proper maintenance. ... naw, bring on the chick ads.

So that's, what, two big hits for Go Daddy this year?

--

A feeling of having made the same mistake before: Deja Foobar

Re:Perhaps... by Anonymous Coward · 2012-09-11 06:42 · Score: 0

So that's, what, two big hits for Go Daddy this year?
According to their ad, it's two big tits...

No vulerabilities! by Anonymous Coward · 2012-09-11 06:40 · Score: 0

"Our PR department told us to say we have NO vulnerabilities. It was just an internal glitch. Nothing to see here. Continue buying our (insecure) products please!"

We weren't attacked by Anonymous Coward · 2012-09-11 06:41 · Score: 0

we're just incompetent.

Re:We weren't attacked by DickBreath · 2012-09-11 06:59 · Score: 0

Does "network issues" just an obscure way to refer to something about using Microsoft Windows for servers?

--

I'll see your senator, and I'll raise you two judges.

Go away GoDaddy by skaag · 2012-09-11 06:41 · Score: 1

I don't buy this for a nickel, and I doubt they are even capable of detecting that a problem was caused by "external influences".
Laughably feeble attempt to save face in front of countless customers who should have known better than to use GoDaddy services.

--

All those moments will be lost in time, like tears in rain... time... to... die...

Re:Go away GoDaddy by fuzzyfuzzyfungus · 2012-09-11 06:46 · Score: 3, Insightful

Hey, cut them some slack. Lying in public is one of the few pleasures of having a customer base that consists of people who don't know better...
Re:Go away GoDaddy by Anonymous Coward · 2012-09-11 07:33 · Score: 0

Hey, cut them some slack. Lying in public is one of the few pleasures of having a customer base that consists of people who don't know better...
You have a future in politics, my man.
Today's competing Big Lies:
1. We can spend our way to prosperity!
2. We can balance the budget without tax increases!
Re:Go away GoDaddy by ColdWetDog · 2012-09-11 08:05 · Score: 1

That certainly explains why politicians smile so much...

--
Faster! Faster! Faster would be better!
Re:Go away GoDaddy by Anonymous Coward · 2012-09-11 21:28 · Score: 0

As if you have a clue.
Re:Go away GoDaddy by skaag · 2012-09-12 05:12 · Score: 1

I actually do happen to have a clue, Anonymous Coward.
And as I suspected might happen following GoDaddy's cowardly (and patently false) statement, today the "hacker" (who obviously also has no clue?) released some more data he obtained during his attack, to prove that it wasn't a GoDaddy "Glitch". I suspect with their level of incompetence, he probably still has access!

--
All those moments will be lost in time, like tears in rain... time... to... die...

Not so sure by Anonymous Coward · 2012-09-11 06:44 · Score: 1

I received emails last night from some SAAS companies claiming that there service outages were due to attacks by hackers. They did not mention GoDaddy specifically, but I know their DNS is hosted there.

Why would they be saying it was hackers?

Sounds like damage control to me.

Re:Not so sure by Anonymous Coward · 2012-09-11 06:46 · Score: 2, Informative

Because someone on twitter said that they did it and everyone believed them?

That makes more sense by Spy+Handler · 2012-09-11 06:44 · Score: 5, Insightful

There was no other indication of a DDOS than the "I did it" tweet by a lone troll. To knock out someone as big as Godaddy for as long as they did would've required an epic-scale DDOS and you'd think something like that would've been noticed by their upstream providers.

This is the second time this week an Anonymous troll lied about an attack (the other one was stealing iPad device ID from FBI)... Anonymous's sterling reputation is being tarnished!

Re:That makes more sense by Anonymous Coward · 2012-09-11 06:49 · Score: 1

I like how you so easily believe that they were both false. It makes me giggle.
Re:That makes more sense by Anonymous Coward · 2012-09-11 06:58 · Score: 1

What I think you mean is anonymous troll. Anonymous weren't trolling, as in, a person who is an active participant in the Anonymous movement.
There is a difference between an anonymous person and an Anonymous person in this case. The former is just any random person on the internet with a pseudonym trying to troll the latter, which is a group united under one pseudonym.
Re:That makes more sense by Jason+Levine · 2012-09-11 07:01 · Score: 1

We have one Anonymous member claiming that it was his attack that brought down GoDaddy.
We have GoDaddy claiming that it was network issues.
Lacking any further evidence, we're in a he said-she said scenario. While I'm not advocating blindly believing GoDaddy representatives, blindly believing an Anonymous member without any evidence to back him up seems foolish also. (A tweet the Anonymous member made during some service's downtime doesn't count as evidence.)

--
My sci-fi novel, Ghost Thief, is now available from Amazon.com.
Re:That makes more sense by Anonymous Coward · 2012-09-11 07:22 · Score: 0

"There was no other indication of a DDOS than the "I did it" tweet by a lone troll."
It really does seem like someone trying to take credit for something that didn't actually happen, especially with "official" anon related accounts distancing themselves from the supposed attack.
Has anyone seen an actual time stamp for the tweets? Does that account take credit for the "attack" three minutes after godaddy announced they were working on fixing the outage?
Re:That makes more sense by jameshofo · 2012-09-11 07:54 · Score: 1

Then again at least they're honest enough to admit it, but then again the tweet only says, #TangoDown -- godaddy.com | by @AnonymousOwn3r. it appears to be the ASSumption of the original author that it was a DDoS.

but then again taking a look at some of the tweets, you get more of a "c'mon are we actually taking this seriously?"

Surely we can take some artistic Licences with the quotes from go-daddy as well! (From the article)
Wagner also noted that the company has provided a 99.999 percent uptime in its DNS infrastructure. More importantly, he admitted that his team “let our customers down and we know it” and that “we apologize to our customers for these events and thank them for their patience.”

As we ask what year was that? Because you can count 2012 out!

--
Good leaders run toward problems, bad leaders hide from them.
Re:That makes more sense by ColdWetDog · 2012-09-11 08:07 · Score: 1

What I think you mean is anonymous troll. Anonymous weren't trolling, as in, a person who is an active participant in the Anonymous movement.
There is a difference between an anonymous person and an Anonymous person in this case. The former is just any random person on the internet with a pseudonym trying to troll the latter, which is a group united under one pseudonym.
Maybe you ought to trademark the term "Anonymous" - too many people are using it, customers get confused.

--
Faster! Faster! Faster would be better!
Re:That makes more sense by adameros · 2012-09-11 08:57 · Score: 1

Early in the outage (1st hr), I was looking at http://www.isitdownrightnow.com/godaddy.com.html and it was able to still ping godaddy.com (I'm assuming the IP was still cached), but it had, as I remember, 3000ms+ ping times. To me, this lends a little credence to the DDOS claims, but it is not definitive.
Re:That makes more sense by nmos · 2012-09-11 09:10 · Score: 1

What makes you think an attack would have to involve a DDOS? There are other ways of attacking a network you know.
Re:That makes more sense by Anonymous Coward · 2012-09-11 09:38 · Score: 0

There was no other indication of a DDOS than the "I did it" tweet by a lone troll. To knock out someone as big as Godaddy for as long as they did would've required an epic-scale DDOS and you'd think something like that would've been noticed by their upstream providers.
This is the second time this week an Anonymous troll lied about an attack (the other one was stealing iPad device ID from FBI)... Anonymous's sterling reputation is being tarnished!
Sterling reputation? More like proving they are a bunch of scrubs that can't actually hack anything. It wouldn't surprise me if most of their work they take credit for never happened.
Re:That makes more sense by Anonymous Coward · 2012-09-11 09:40 · Score: 0

I like how you so easily believe that they were both false. It makes me giggle.
So you would trust an anonymous group of individuals who won't show their face in public that lie, cheat and steal to be honest? All hatred aside for Godaddy but they are more trustworthy than someone who would swipe your credit card if you blinked too long.
Re:That makes more sense by Anonymous Coward · 2012-09-11 10:56 · Score: 0

Anonymous also lied about working in cooperation with Mozilla to attack TOR.
And lol @ "sterling reputation"
Re:That makes more sense by Anonymous Coward · 2012-09-11 13:34 · Score: 0

What I think you mean is anonymous troll. Anonymous weren't trolling, as in, a person who is an active participant in the Anonymous movement.
There is a difference between an anonymous person and an Anonymous person in this case. The former is just any random person on the internet with a pseudonym trying to troll the latter, which is a group united under one pseudonym.
If I were the trolling type, I definitely would never want to piss off Anonymous by falsely pretending to represent them.

Pissing off a group like Anonymous is the kind of trouble I simply don't want. I am not saying it's legal, or right, etc, but the reality is, that troll could be making some very formidable enemies. I sure hope a "tee hee I trolled them good!" was worth it. Me, I don't think it is worth it at all.
Re:That makes more sense by flex941 · 2012-09-12 05:12 · Score: 1

Just yesterday I was cleaning up a customer's hacked Joomla site heavily pounding with pings and port 80 requests some North-American IP address. A bit later the GoDaddy DDOS news appeared on Slashdot. Coincidence?
Re:That makes more sense by Anonymous Coward · 2012-09-12 07:13 · Score: 0

Exactly! If he wiped the routing tables, it would just be a DOS and not DDOS. But if the routers propogated those bad tables, then is it a DDOS?

TG Posted... by wbav · 2012-09-11 06:45 · Score: 1

This shirt by Think Geek fits.

--

=================
Unix is very user friendly, it's just picky about who its friends are.

Internal influences, eh? by Anonymous Coward · 2012-09-11 06:46 · Score: 0

I bet it has something to do with those distracting young ladies selling their wares to executives right next to the geeks trying to do their work.

Normalcy by Anonymous Coward · 2012-09-11 06:48 · Score: 0

"Don't worry, it wasn't DDoS. We're just incompetent." - GoDaddy

Not hacked... by Anonymous Coward · 2012-09-11 06:49 · Score: 0

They don't want the terrorists to win.

The real story is the media by Anonymous Coward · 2012-09-11 06:51 · Score: 0

One person sends tweets claiming to have DDOS'd all of GoDaddy and the whole media swallows this and reports it as major news. No investigation, no other source.

Re:The real story is the media by Anonymous Coward · 2012-09-11 13:21 · Score: 0

What's even more impressive is I'm the one who brought them back up.
You believe me, don't you?

Can't win here. by JustAnotherIdiot · 2012-09-11 06:53 · Score: 1

If you were hacked? It shows your defenses are weak.
If you weren't hacked? It shows you have some seriously poor management/backup equipment.
Either way, less people are going to want to use you after this.

--
What do I know, I'm just an idiot, right?

Re:Can't win here. by Anonymous Coward · 2012-09-11 16:41 · Score: 0

Someone who recognizes and admits that there is a problem is more trustworthy than someone who hasn't yet.
This incident will make GoDaddy go even better.

Another KKR debacle by Anonymous Coward · 2012-09-11 06:55 · Score: 2, Informative

Disclaimer: I work for a company that got "bought out" by KKR, just like GoDaddy.

Since KKR bought them out, GoDaddy has jacked up their prices (to make up for the billions I'm sure KKR "leveraged" out of GD for their execs and shareholders), took a pro-SOPA and PIPA stance (which garnered them a bit of a boycott), and is now having infrastructure problems. I haven't heard, but I'd bet there were layoffs and some brain-drain shortly after the KKR mafia took over.

Go figure.

If you own stock in a company that is being eyed by KKR (think: Bain Capital) dump it quick. If you're a customer, make plans to jump ship.

Re:Another KKR debacle by iplayfast · 2012-09-11 07:13 · Score: 1

according to www.stockchase.com KKR
"Would characterize dividend as not being safe because it is merely a function of income that the company generates on a quarterly basis. It goes up and down depending on whether they are capitalizing any deals. This quarter will probably have a very nice dividend because they just sold a position in Alliance Boots to Walgreens. Trades at a very reasonable price."
In other news godaddy is still having problems. They weren't relaying emails from a website I have with them, I complained and the whole godaddy went down. Maybe I caused it? Am I anonymous?
They would relay emails to my gmail address, but not to my local ISP.
Re:Another KKR debacle by ArsenneLupin · 2012-09-11 07:32 · Score: 1

If you own stock in a company that is being eyed by KKR (think: Bain Capital) dump it quick.
Why would you dump stock of a take-over target? Just keep it until the take-over at least... stocks usually rise in anticipation of take-over, because the buyer, no matter how incompetent, will usually pay premium for the stock in order to ensure a quick conclusion of take-over... and if the buyer is so incompetent that he doesn't know that he has to do that, he won't be in a position to ruin the company, because he'll never own enough shares in it.

It was bad now worse by Anonymous Coward · 2012-09-11 07:08 · Score: 0

So they are saying they weren't incompetent and got hacked they were just incompetent.

Well duh ... by jest3r · 2012-09-11 07:09 · Score: 3, Funny

If one "anonymous" person could take down 5 million websites then we might as well give up on the Internets ...

Then again it could have been one GoDaddy Admin who accidentally misconfigured the routing tables that caused all of this ... I'd probably want to be anonymous if I was that person as well ...

Re:Well duh ... by Anonymous Coward · 2012-09-11 09:42 · Score: 0

If one "anonymous" person could take down 5 million websites then we might as well give up on the Internets ...
Then again it could have been one GoDaddy Admin who accidentally misconfigured the routing tables that caused all of this ... I'd probably want to be anonymous if I was that person as well ...
Better yet. This network admin is actually the person from Anonymous so he broke the routing table at his own company and praised himself on Twitter!!

Can I have my $80 back? by CubicleZombie · 2012-09-11 07:10 · Score: 1

That's what it cost me to figure out that each hosted domain has a different credit card record for autorenewal. So updating one record won't stop the rest of your domains from expiring. Bastards. They're worse than Comcast.

Good for me, though, since that caused me to switch everything to a competitor and not be affected by this outage.

--
:wq

It's the network!! by ctime · 2012-09-11 07:12 · Score: 1

This is almost certainly a result of a network change plus some really bad luck. Big player BGP peering connections are under intense scrutiny right now because of a few mistakes made at company A were introducing blackhole routes into company B (c,d,e,f's) routers.

Networking is the most often overlooked, often shit on, everyday service that everyone ab(uses) and gets pissed when it doesn't work properly. Like toilets.

Re:It's the network!! by Anonymous Coward · 2012-09-11 07:41 · Score: 0

Back in the 90's when it was much easier to get away with this stuff. I worked for a regional backbone provider and we had 4 trusted BGP peers (plus 1 untrusted, pretty sure it was UUNET). And if someone ticked me off on IRC I'd just make a new BGP entry routing their IP block off to wherever...
Re:It's the network!! by Anonymous Coward · 2012-09-11 13:25 · Score: 0

Networking is the most often overlooked, often shit on, everyday service that everyone ab(uses) and gets pissed when it doesn't work properly. Like toilets.
Maybe that's what caused the outage. GoDaddy doesn't know you're not supposed to pee on the routers, which causes instant corruption. Especially if the admin has especially acidic pee.

Something isn't right by Anonymous Coward · 2012-09-11 07:15 · Score: 0

And somebody else just happened to know about it and take credit for it?

99.999% Doesn't mean what you think it means by Anonymous Coward · 2012-09-11 07:19 · Score: 4, Informative

They were down for 6 hours but still claim 99.999% uptime. But unless they have been around for more than 57 years, I dont' see how that is possible. Wonder what funky math they use to back up that number.
https://encrypted.google.com/search?q=5+hours+%2F+(1-99.999%25)

Re:99.999% Doesn't mean what you think it means by Burning1 · 2012-09-11 08:21 · Score: 1

I suspect they declared a 'maintenance window' 5 minutes into the outage.
Re:99.999% Doesn't mean what you think it means by Anonymous Coward · 2012-09-12 08:04 · Score: 0

The machines were up the entire time...
Re:99.999% Doesn't mean what you think it means by Anonymous Coward · 2012-09-12 20:11 · Score: 0

68 years for six hours

SLA Violated??? by Anonymous Coward · 2012-09-11 07:20 · Score: 0

So now that they admit it was a internal issue does that mean everyone that has their "Premium" DNS SLA agreement of 99.999% uptime can walk away from any contractual agreement and/or get some giant credit?

Re:SLA Violated??? by trancemission · 2012-09-11 09:13 · Score: 1

I read somewhere their 'premium dns' service was unaffected - not got a link though.
Re:SLA Violated??? by Phroggy · 2012-09-11 17:11 · Score: 1

I don't buy that. It may have appeared up, but that's because everything was intermittent all day.

--
$x='S24;r)>63/* h@<5+oZ)32"5cz';$me='phroggy'x$];
$x=~y+ -xz+\0-Tx+;print$_^chop$me for split'',$x;

So what? by thePowerOfGrayskull · 2012-09-11 07:39 · Score: 2

To this I say "so what"? When you have one primary job to do - respond to DNS requests for millions of domains that are registered through you - and you fail to do so, it's over. No matter what the root cause is, you caused *millions* of web sites to be unreachable for most people, for a period of time spanning hours. This is not "oops", this is catastrophic failure from a business perspective.

I can only hope that sufficient numbers of customers will be as offended, and seek more reliable solutions.

Re:So what? by Anonymous Coward · 2012-09-11 08:15 · Score: 0

I have no doubt that huge number of customers will happily take their business.... ...oooh - Danica Patrick in the shower? Where?

Meaningless lies by Anonymous Coward · 2012-09-11 07:41 · Score: 0

"Network issues" has no real meaning. DDoS and network hacks are both types of "network issues." This is like saying someone died from "natural causes": it means nothing; there is always an actual cause.

Got all intern up in there by Anonymous Coward · 2012-09-11 08:15 · Score: 0

Some stupid intern tripped over the network connection and broke everything

Or... by Anonymous Coward · 2012-09-11 08:17 · Score: 0

Anonymous has a person that works inside of GoDaddy and they caused the problem from the inside!

Or GoDaddy is a bunch of baboons....

Not Surprised by Anonymous Coward · 2012-09-11 08:17 · Score: 0

Would you really expect them to admit it if it happened?

Who to Switch to? by Anonymous Coward · 2012-09-11 08:48 · Score: 0

I work at a firm that was setup on Godaddy before I arrived. Only for domain register and public dns. What is /. recommendation for who to switch too?

Ok, if it wasn't Anonymous then... by Anonymous Coward · 2012-09-11 09:02 · Score: 0

how did they obtain the source code and database for godaddy?

https://twitter.com/AnonymousOwn3r/status/245626172103344128

Intermittent by Spazmania · 2012-09-11 09:19 · Score: 2

"Yesterday, GoDaddy.com and many of our customers experienced intermittent service outages starting shortly after 10 a.m. PDT. Service was fully restored by 4 p.m. PDT. "
http://www.godaddy.com/newscenter/release-view.aspx?news_item_id=410

Must be that new definition of the word "intermittent." The one roughly synonymous with "total."

--
Moderating "-1, Disagree" is simple censorship. Have the guts to post your opinion.

just say no to 'roids by Anonymous Coward · 2012-09-11 10:03 · Score: 0

damn, now you've ruined those Godaddy commercials for me.

but what if the cause *was* a hack? by dutchwhizzman · 2012-09-11 10:04 · Score: 1

What if the cause was actually a hack, but they didn't notice it? Corrupted routing tables don't occur all by themselves and single routing tables taking a whole provider down doesn't happen that often either. I wouldn't rule out the possibility of *a* hack just jet.

--
I was promised a flying car. Where is my flying car?

Whois results for godaddy.com by Anonymous Coward · 2012-09-11 10:15 · Score: 0

I'm no expert and don't know the ins and outs of the whois command and various databases, but performing a whois for godaddy.com on my macbook includes some very interesting results -

GODADDY.COM.PISSEDOFFPEOPLEOFAMERICA.COM
GODADDY.COM.AND.ALEX.FUCKED.BY.WWW.DNDIALOG.COM
GODADDY.COM.THECOTTONWIFE.COM
GODADDY.COM.THEYOUNGCONS.COM
GODADDY.COM.THEVILLAGEAT63RDSTREET.COM
GODADDY.COM.THEFOREXTHIEF.COM

Moreover, all of these seem to redirect to their homepage. Seems hard to believe GoDaddy would set those up....

Re:Whois results for godaddy.com by Anonymous Coward · 2012-09-12 05:26 · Score: 0

This is pretty damning evidence right here.
I can be fairly certain that goDaddy.com isn't going to want to register a domain called GODADDY.COM.AND.ALEX.FUCKED.BY.WWW.DNDIALOG.COM.
Well, maybe they do?
I have recommended a few folks I know that use the service use something else - before this happened. I'm going to continue recommending that they go elsewhere.
99.99999% my ass.

A lie, but... by stevenfuzz · 2012-09-11 11:58 · Score: 2

Wouldn't you rather the world think that you were hacked by some unbeatable magic hacking group, then your company went down due to your own ineptitude?

What was that Shakespeare said? by Anonymous Coward · 2012-09-11 12:08 · Score: 0

He who doth protesteth too much...

anonymous? by slashmydots · 2012-09-11 13:27 · Score: 0

So anonymous took responsibility for it? Wow, I guess they were talking out their asses just like any other immature, pathetic little hacker kid. Way to downgrade their image straight down the toilet.

SSL crl site was affected... by Anonymous Coward · 2012-09-11 18:37 · Score: 0

So you cant use SSL and fall back to plain text... great...

Lie - CVE-2012-4244 by Anonymous Coward · 2012-09-13 03:55 · Score: 0

CVE-2012-4244

Yeah... Sure, whatever you say Godaddy...

Slashdot Mirror

Go Daddy: Network Issues, Not Hacks Or DDoS, Caused Downtime

143 comments