Slashdot Mirror
You're Being DDOSed — What Do You Do? Name and Shame?
badger.foo writes "When you're hit with a DDOS, what do you do? In his most recent column, Peter Hansteen narrates a recent incident that involved a DNS based DDOS against his infrastructure and that of some old friends of his. He ends up asking: should we actively publish or 'name and shame' DDOS participants (or at least their IP addresses)? How about scans that may or may not be preparations for DDOSes to come?"
DDoS the DDoSers, that'll show em!
The vast majority of DDoS participants are infected computers in botnets, and their owners are typically unaware. Will they even notice your naming sufficiently to be ashamed? Maybe if it's a corporation it'd have some effect: publishing that you were hit by a DDoS that included X computers from BigCorp might make BigCorp look bad. But not so much if the botnet is a bunch of random home PCs.
10 PRINT CHR$(205.5+RND(1)); : GOTO 10
He ends up asking: should we actively publish or 'name and shame' DDOS participants (or at least their IP addresses)?
Next up, someone broke into my house; is some stern criticism in order?
Hey, how about you give the evidence to the police?
Publish. Shame. Maim. Cripple. What ever it takes to get some measure of satisfaction.
We had this type of DDoS attack. 1 - 2 million requests per hour against a small VPS. Bind wasn't running but it didn't matter; the requests kept coming for weeks. We cloned the VPS so we'd get another IP, switched things over and abandoned the first VPS.
Backups people. Have backups of your code, configs and databases.
The only reason you can possibly have for publishing the IP addresses is to provoke vigilante justice type of actions, likely counter ddos or something.
What you should do is report him to the abuse department of his ISP. Note the responses of the ISP's and name and shame the ISP's that do not take action.
IP addresses from bad ISP's should end up on a "botnet-friendly ip list" so we can start blocking the traffic from these isp's.
Easy, you post the name of the attacker on Slashdot in an article about a new supercool anything and have him slashdotted.
Seems that 2013 is going to be the Year of Shame. Since politicians can't pass the bills they want, they're instead using data against us. *Clapping* Great job, now we can't fight back because all our base belongs to them.
contact the ISPs involved, tell them they yank the bad boys' service or you will blackhole them.
if this is supposed to be a new economy, how come they still want my old fashioned money?
Spoofing is more than trivial, and anyone but the dumbest do this to cover their tracks and keep law enforcement back-tracking from a botnet node back to the perp.
Better to track the traffic back over the 'net (using CEF-forwarding tables or ACL etc.) with the help of the relevant ISPs.
If the end ISP isn't helpful, shame them and their upstream peers.
Dom
1) It's DISTRIBUTED. You'd have to name and shame thousands.
2) Many of the DDOS nodes don't know they're being hijacked for a DDOS. Name and shame an innocent person?
You're being 'ddosed' from thousands of different IPs - list them all!
Who cares if they're compromised computers - naming them will surely shame the botnet owners into submission!
Was this question asked by an idiot?
There is a person who frequents here, famous for using hosts files as a security something or other some-such. I had gone for quite some time without having to see or hear from him but apparently has come back.
Apparently, he has been published and is therefore a celebrity or something like that. Anyway, he has a bizarre set of problems which include replying to his own posts pretending to be someone else, assertions that he had "blown away," "burned," "destroyed" or any other such juveline taunt. He apparently believes I and others are "Jorge Bastida" whoever that may be. His mental deficiencies are his reality and therefore he projects his notion of what normal healthy behavior is upon everyone else. He therefore believes multiple people are all one and has little to do than sit here and and attempt to belittle and berate them with commentary.
Of course his problems with reality extend into the realm of believing things which aren't "quite right." I attempted to point out that this sort of behavior is archived for, so far, "ever" on slashdot and that any searches for anything he might have written could be found by anyone including and especially [potential] employers. With all the stories about how government and employers use social networking (which slashdot nearly qualifies as being) I would think this would be obvious but pointing out the obvious is apparently blackmail. (please grow up... please... prove it by not responding to this!)
So with this, I lay shame and I believe I don't need to name. Will it work?
DDOS is a violation of federal law and should not be tolerated. If it is a botnet, whoever is running such a botnet is in violation of federal law.
Eventually we should have a reputation-based distributed admin function for the Internet. If a dozen high-rated NetOps guys all sign messages that say that a given IP is spewing DDoS traffic, the infrastructure should permit a block without the owning admin having to deal with it proactively.
If a network doesn't participate, that could play into trust levels. If an admin screws up, he loses reputation. If an admin tends to advertise YouTube routes into Pakistan, he never gets a good reputation in the first place.
As usual, it's all trade-offs and we don't yet have an extensible crypto-reputation system, so one thing at a time.
To the original question - it's probably not going to do much good, but it's good to cultivate such expectations.
My God, it's Full of Source!
OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
Investing in one of THESE is a big help:
http://www.google.com/search?sclient=psy-ab&hl=en&site=&source=hp&q=%22DDos+Appliance%22&btnG=Search&gbv=1&sei=KYw7UI-4FsXs6wH3uIDoDw
Because DDoS/DoS CAN be stopped (Microsoft & Amazon are setup PERFECTLY vs. it in fact, read on below on that note). IF you're running Windows, per my subject-line above? Do these registry hacks/settings:
---
Protect Against SYN Attacks
FROM -> http://msdn.microsoft.com/en-us/library/ff648853.aspx
A SYN attack exploits a vulnerability in the TCP/IP connection establishment mechanism. To mount a SYN flood attack, an attacker uses a program to send a flood of TCP SYN requests to fill the pending connection queue on the server. This prevents other users from establishing network connections.
To protect the network against SYN attacks, follow these generalized steps, explained later in this document:
Enable SYN attack protection
Set SYN protection thresholds
Set additional protections
Enable SYN Attack Protection
The named value to enable SYN attack protection is located beneath the registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters.
Value name: SynAttackProtect
Recommended value: 2
Valid values: 0, 1, 2
Description: Causes TCP to adjust retransmission of SYN-ACKS. When you configure this value the connection responses timeout more quickly in the event of a SYN attack. A SYN attack is triggered when the values of TcpMaxHalfOpen or TcpMaxHalfOpenRetried are exceeded.
Set SYN Protection Thresholds
The following values determine the thresholds for which SYN protection is triggered. All of the keys and values in this section are under the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters
These keys and values are:
Value name: TcpMaxPortsExhausted
Recommended value: 5
Valid values: 0?65535
Description: Specifies the threshold of TCP connection requests that must be exceeded before SYN flood protection is triggered.
Value name: TcpMaxHalfOpen
Recommended value data: 500
Valid values: 100?65535
Description: When SynAttackProtect is enabled, this value specifies the threshold of TCP connections in the SYN_RCVD state. When SynAttackProtect is exceeded, SYN flood protection is triggered.
Value name: TcpMaxHalfOpenRetried
Recommended value data: 400
Valid values: 80?65535
Description: When SynAttackProtect is enabled, this value specifies the threshold of TCP connections in the SYN_RCVD state for which at least one retransmission has been sent. When SynAttackProtect is exceeded, SYN flood protection is triggered.
Set Additional Protections
All the keys and values in this section are located under the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TcpIp\Parameters. These keys and values are:
Value name: TcpMaxConnectResponseRetransmissions
Recommended value data: 2
Valid values: 0?255
Description: Controls how many times a SYN-ACK is retransmitted before canceling the attempt when responding to a SYN request.
Value name: TcpMaxDataRetransmissions
Recommended value data: 2
Valid values: 0?65535
Description: Specifies the number of times that TCP retransmits an individual data segment (not connection request segments) before aborting the connection.
Value name: EnablePMTUDiscovery
Recommended value data: 0
Valid values: 0, 1
Description: Setting this value to 1 (the default) forces TCP to discover the maximum transmissio
Many of the DDOS nodes don't know they're being hijacked for a DDOS. Name and shame an innocent person?
They are NOT innocent. They let their computers be used in stealing, censorship, blackmailing, spam and other evil stuff. It doesn't matter if it is stupidity, ignorance or malicious intent.
If your car keeps hitting other cars you should hand over your license.
I keep an old pc in my dmz that is running unpatched windows xp just because of botnets...
Make up some story about how you tracked down a huge network of movie pirates.
Nobodies Prefect
Tidbits for Techs Technology Blog
Turn back on when the attack has ceased. Simples!
You switch to your backup Internet connection and disconnect the first one. let them DDOS the dead IP address while I continue to laugh at them on 4chan. "Haha you losers are not DDOSing me but some poor sap. What n00bs all of you are"
Works great, they all go way overboard at the foaming of the mouth when they realize they are all anklebiter n00b wannabes.
Sites under DoS attack should publish (through a channel not congested by the attack) a list of the IP addresses attacking them, through some trustworthy third party. Then, other sites should subscribe to that list and refuse service to those addresses until they clean up and stop attacking.
For instance, consider your uncle who uses AOL. His computer is infected with botnet garbage and is participating in a DoS attack against (say) Slashdot. Slashdot sends a list of attacking IPs, including your uncle's, to Team Cymru (the third party). Cymru aggregates these and publishes a list, updated every three hours. AOL subscribes to that list. When your uncle goes to check his AOL email, he gets an error: "We regret to inform you, your computer has been hacked, and is being used by criminals to break the Internet. You can't get to your AOL email until you kick the criminals off by installing an antivirus program and running a full scan. Click here to install Kaspersky Antivirus for free. Thank you for helping keep criminals from breaking everyone's Internet. Sincerely, Tim Armstrong, CEO, AOL."
Then your uncle gets mad and calls up AOL and complains. They try walking him through using the antivirus program, but he just curses them out and says he'll go to Hotmail instead. He tries ... but Hotmail also subscribes to the same list and tells him the same thing: "Your computer is infected with malware and is being used to attack other sites on the Internet. You cannot obtain a Hotmail account until your computer is clean. Click here to install Microsoft Antivirus." He gives up and calls AOL back, and they help him get his computer cleaned up. Within half an hour, it's off the botnet; and within three hours, it's off the list of attacking hosts, and your uncle can get his AOL email again.
The idea of voluntary email blackhole lists could be adapted here. Victims of DDOS could submit lists of IP addresses that are attacking, to a central clearinghouse, which will analyze the attack pattern in order to determine the most efficient response. The clearinghouse would verify and document which groups of IPs are part of a particular attack in progress, and notify the relevant ISPs in real time. These ISPs would respond by blocking outgoing access to the victim from their network for a time. Whenever possible, they could later contact the offending customer to help them eliminate the bot infection. Botnets could be mapped out instantly, and in great detail. DDOS attacks could be significantly throttled down after just a few minutes. If enough ISPs participated, DDOSers would be left with just the crummy little ISPs to use that don't give a toot. Regrettably, this system could also be used to illuminate any legitimate activity that governments and ISPs frown upon, and the central clearinghouse itself needs to be somehow immune to DDOS attacks.
Learn more about how open recursive nameservers help enable DNS amplification attacks. A good analogy for open recursive nameservers are the open mail relays of the late 1990's. Someone puts a resource on the internet without locking them down nor caring who (ab)uses them. UDP was fun when the internet was more trustworthy. Now it is the bane of network abuse. It's not just DNS. SNMP is also a frequent attack amplifier that anonymizes the true attack source. The only ones worth naming and shaming are cost-shifting ISPs that don't yet implement SAC004 (aka BCP 38). The lack of source address filtering is what enables anonymous forged UDP attacks to be successful.
If your ISP or Colo provider operates an open recursive nameserver, ask them why. It's no longer acceptable to be ignorant of the detrimental effects they have on the Internet as a whole versus the minor benefit that could easily be served responsibly by OpenDNS or Google DNS.
who will say, "uh, what? if you got a dose from somebody, you want public health."
if this is supposed to be a new economy, how come they still want my old fashioned money?
now im not a hacker, but i work with a security specialist
we run network traffic view and see what kind of ddos it is, and if its traceble. usually not, especially if its a UDP flood. sometimes we can look at a specific ip thats attacking (of the many) and port scan it and see if its a botnet or a shell or something hidden by VPN. sometimes there are tcp attacks that show the ip and that makes that possible. you can even DDOS some of the attackers, see if you cant break down some of them. if your not getting a super large ddos, you might even be able to lock down the whole ddos with a counter ddos, if you have a hacker on your side. this can get really nasty and legally grey as well
but to be terribly honest, social engineering might be more effectual as many hackers are someone who has been a customer or user before, or a competitor, and they often have some kinda agenda. police might be of help, but you need to know their true IP and get their address, and call the cops in that area. with a DDOS, usually anyone worth their hacking skills will use UDP which is hard to trace.
if all else above is not applicable (and its probably not) you can wait it out, or even change your DNS or IP and somehow get traffic to it, without the hackers being alterted.
a really sad aspect of the internet is Low Orbit Ion Cannon (dirt simple ddos for noobs) and many "security tester sites" (pay for ddos)
with this you can even have scum that are Sub-Script-Kiddie hacking you.
We were once DDoSed and we first called our colocation guys (that also manages our firewalls) if they could do it, the technician could do nothing. They called their ISP and they quickly found that the majority of the traffic came from countries we don't do business in so they simply blocked (or routed away) traffic from those countries going to our net and the site became instantly accessible again. The ISP has an anti-DDoS service that does this automatically based on some threshold magic. This is a service we are going to get.
Most of the systems involved in distributed attacks are not intentionally willing participants. They are generally part of a botnet, belonging to unknowing owners and controlled by uncaring masters. Shame them all you want but that won't make them go away.
Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
I covered it here -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
* Plus, a LOT MORE a Windows setup can do...
APK
P.S.=> Only 'problem' with using the route command is, it's a commandline driven one. Personally, I'm surprised nobody's built a GUI commandline model to 'automate' it (or a script). It's probably been done script-wise though, since IF I can think of it? Someone else has (there is very little "original thought").
Hardest part? Acquiring the list of attackers - since in a DDoS they come by the 1,000's @ once.
(However, & again: That's also what scripts are good for too, in parsing out & extracting pertinent information from program outputs)...
Once you get that?
You put it into a list construct & then feed it to the automating program via a loop for the route command itself... & you've blackholed them, enmasse!
... apk
I've had sizable amounts of junk come in from China Telecom DSL class C blocks in Shenzhen. It's obviously a botnet. Amusingly, by changing what the attackers get back, it's possible to slowly influence their behavior. The zombies just send blindly, trying SMTP and PHP attacks, and they continue to send even if they get no useful response. But after a few days, some control node notices that the botnet isn't accomplishing anything and stops. Except that a few zombies don't get the word and continue to send the same junk.
The resource-consuming API requests on our system go through a fair queuing system, so that many requests from the same IP address queue up behind each other and don't consume much in the way of resources. At one point, some grad student was trying to use the API, and they were doing it ineptly, sending hundreds of thousands of initial requests without ever making the followup call to get the results. This built up a huge work queue, but the fair queuing meant their requests had lowered priority and weren't impacting real users. After a few days of this, I blocked the IP address for 24 hours. After unblocking, the requests reappeared. So not only was the requester inept, they weren't paying attention to their own program. So I wrote to the department chair at the user's university, and after a few more days, the API calls stopped.
If you actually had a clue about this stuff you wouldn't need to re-post your drivel time and again.
..Mullah or Pope, Preacher or Poet, who was it wrote: "Give any one species too much rope and they'll fuck it up"?
All I know is, it works & is entirely 'doable'. Amazon & MS do it -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
* You know, though you & I have "had our differences" here in the past? I was PRETTY SURE you had this level of 'know-how' down...
(In that case - you're probably just being 'facetious', & that's ok too... it's Christmas!)
APK
P.S.=> Nice part is - It gave me an idea to automate the route command's functionality too actually (first in a shell/spawn to test, & then to actually reproduce it via the Win32/64 API directly), into a loop-thru-list of attackers, to null route them.
(E.G./I.E.-> 1st acquire the attacking IP addresses, even if by the 1,000's from say, router logs, of course - so you can 'blackhole route/nullroute' them, enmasse)...
That wouldn't be "tremendously hard to do", not really... & since it isn't?
I am of the opinion that others probably HAVE DONE SO, via scripting languages like Python, for example, since there truly is VERY LITTLE "original thought" & this is PRETTY OBVIOUS actually, as to automating it vs. DoS/DDoS attacks!
(I can see admins using scripts for it, architected PRETTY MUCH like I just laid out, & Python makes things very easy for network admins & isn't as difficult as doing GUI work in languages like C/C++/Delphi etc.-et al, even if done in RAD environs)
... apk
null route the ip being attacked?
http://interserver.net/
Thought I covered that much here -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
(When I noted you need multiple addresses etc. since putting up a perimeter system could do that, BEFORE production servers)
* Guess I'll have to be more "explicit" when I post it again in the future... that's all!
APK
P.S.=> Sometimes, I assume too much on the part of readership, knowing that & other facts FIRST, as well as I & don't express myself as well as I should is all... Especially after that amount of typing or edits!
... apk
Most packet based DDoS attacks (SYN|FYN|ACK|ICMP) floods do not require a return packet. The source address is always bogus. Reporting it is a joke. New fun and exciting targeted DDoS attacks use improperly set up services/daemons. In this case, recursive lookups on DNS servers are the cause. IMHO, If someone has a fast connection and doesn't disable recursive DNS lookups they should get a warning. After tha,t publishing their whois information on a web site would be a great way to motivate them.
Having to work for a living is the root of all evil.
Give me a break! I post what to do in detail vs DDoS here http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
* I guess Jorge Bastida, alias erroneus, isn't happy with my exposing him attempting to BLACKMAIL others here -> http://slashdot.org/comments.pl?sid=2261720&cid=36545928
APK
P.S.=> It only shows me how LOW you really are, on all fronts, fatass -> http://slashdot.org/comments.pl?sid=3335159&cid=42371769 ...
... apk
Impersonating me too here -> http://slashdot.org/comments.pl?sid=3339513&cid=42390817
Clue: I post what to do in detail vs DDoS here http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 & in this very thread, long before YOU ever posted!
* I guess Jorge Bastida, alias erroneus, isn't happy with my exposing him attempting to BLACKMAIL others here -> http://slashdot.org/comments.pl?sid=2261720&cid=36545928
When he gets defeated for his lack of computer skills, big mouth, and trolling... along with the above.
(Reprehensible little fatboy trolls, like you? All the same... you make me laugh!)
APK
P.S.=> It only shows myself or anyone else reading here just how LOW you really are, on all fronts, fatass -> http://slashdot.org/comments.pl?sid=3335159&cid=42371769 ...
... apk
Would "I have evidence that a computer system that I operate is being abused in violation of the Computer Fraud and Abuse Act" be any clearer?
Amazon &/or Microsoft pretty much can, & actually DO, vs. such things (amazon's setup for that, but not directly - it was MORE for being "proof" to "holiday shopping 'rushes'" but it works out the same for them, vs. DoS/DDoS too - "bonus!")
If you actually had a clue about this stuff you wouldn't need to re-post your drivel time and again.
I think APK's point here is that Amazon and Microsoft provision their networks for the worst case of traffic that they can imagine, and then they sell the excess capacity back to the public as virtual servers.
As soon as you switch your DNS to point to the new servers, the DDOS follows.
Then switch your DNS to point to a huge caching proxy such as CloudFlare. See previous Slashdot stories mentioning CloudFlare (1) (2).
How does Google DNS not have a detrimental effect while other services comparable to Google DNS do?
(Vs. Sardaukar86's comments of "if anyone cared" about what I write here? Well - 100's of upward mods made you "eat your words"... you couldn't ARGUE WITH THE NUMBERS, that outnumbered your 'opinion' by MANY orders of magnitude... lol!)
So, if the numbers only matter, what about the 100s of posts with downward mods, do those outnumber the opinions of your supporters by orders of magnitudes. And if you think you are downmoded by trolls, how do we know you aren't also upmodded by trolls too?
My point was to merely show there ARE working solutions is all... it's Christmas, & I feel for anyone going through it (if they didn't instigate it that is).
APK
P.S.=> Could & DO they sell off excess capacity? Afaik, AMAZON pretty much does with their 'cloud' services & what-not!
(Feel free to correct me here, I am not an expert on them, nor do I utilize their services in any capacity personally in that way, other than buying from them on occasion)...
... apk
"You covered a bunch of techniques on a windows machine that would increase the damage done by a ddos" - by Anonymous Coward on Tuesday December 25, @11:14PM (#42392105)
No, wrong again - those are KNOWN DDoS mitigating IP stack parameter settings that help vs. DDoS/DoS.
See the Microsoft link I posted in my initial post again, troll -> http://msdn.microsoft.com/en-us/library/ff648853.aspx
FAIL #1 of 2 here, & I see you're posting as AC... figures - you know you failed, & are just 'trolling' (some people have no lives, no class (even on Christmas))...
---
"and nothing to do on the routers. go die in a fire" - by Anonymous Coward on Tuesday December 25, @11:14PM (#42392105)
WRONG AGAIN: See my subject-line, & this link I posted in my init. post:
http://en.wikipedia.org/wiki/Null_route
PERTINENT QUOTE/EXCERPT:
---
"Null routing has an advantage over classical firewalls since it is available on every potential network router (including all modern operating systems), and adds virtually no performance impact. Due to the nature of high-bandwidth routers, null routing can often sustain higher throughput than conventional firewalls. For this reason, null routes are often used on high-performance core routers to mitigate large-scale denial-of-service attacks before the packets reach a bottleneck, thus avoiding collateral damage from DDoS attacks â" although the target of the attack will be inaccessible to anyone. Blackhole filtering can also be abused by malicious attackers on compromised routers to filter out traffic destined to a certain address."
---
FAIL # 2 here: "2 for the price of 1", troll... lol, you're "on a ROLL, troll"!
---
Also - Have you ever used netconfig in Linux on a MULTI-HOMED server with a subordinate subnet it routes packets to?
It can act as a router or firewall via a multi-homed system.
I.E.-> You set it "front-facing" to your subnetted network and it works as a firewall of sorts to a subnet from a multihomed Linux system (you allow/disallow what comes in etc. easily using it).
In fact - It is MUCH like the technique I am describing in fact, by dropping packets via a programmatically automated routing command.
I'd test it via a spawn/shell first - then, go at the necessary IP code via Win32/64 directly (instead of spawning a route commandline primitively as a front-end to it only).
* It wouldn't be TOUGH to make such a program either... & you wouldn't NEED a router - just a computer you have lying around pretty much (vs. DoS/DDoS).
E.G./I.E.-> Once you obtain the attacking IP addresses from a router log or even a netstat command you parse out the needed info. from (attacking IP addresses), you put them into a list, iterate thru it with a loop, automating the route command directly (ala spawn/shell, primitive but would work as a front-end + backend system between the 2 programs).
Just an idea...
APK
P.S.=> I may write this up as my next freeware to release... who knows! Wouldn't take me long @ all...
... apk
"Maybe if APK actually made a short simple point, he wouldn't have the problem with people skimming over most of his posts." - by Anonymous Coward on Tuesday December 25, @11:30PM (#42392167)
There IS no "short & sweet" with what I posted - it demanded detail on an important subject, which you are NOT on topic on by the way.
I.E.-> My post was just trying to HELP here is all. It's Christmas too, why not!
---
"Odd he doesn't notice how he gets more upmods on short and helpful posts versus downmods on posts that are 90+% redundant, off-topic, or filler that could be summarized in a couple, useful lines." - by Anonymous Coward on Tuesday December 25, @11:30PM (#42392167)
Ahem: Do you have PROOF via a list of links of such downmods of mine you say I get?
For all anyone knows? YOU applied them if you did... anyone can do that... See Mr. Bruce Perens on THAT note, here:
"It just takes one Ubuntu sympathizer or PR flack to minus-moderate any comment. Unfortunately, once PR agencies and so on started paying people to moderate online communities, and to have hundreds of accounts each, things changed." - by Bruce Perens (3872) on Friday July 30 2010, @03:55PM (#33089192) Homepage Journal
FROM -> http://linux.slashdot.org/comments.pl?sid=1738364&cid=33089192
(It's the SAME as HBGary got caught doing, or the Chinese Water Army)
Additionally?
Yes, I have caught trolls in the act doing that very thing on /. here (one completely LEFT here in fact afterwards), in TomHudson = Barbara, not Barbie - everyone knew it, the idiot used the SAME email on both accounts for a long time).
So please:
DO Produce your list of proof (be FAIRLY warned I am setting you up like a BOWLING PIN though, trust me): Let's see how off-topic these posts of mine you speak of were...
In return response?
I will post 100's of upmodded posts I've gotten here (hard for us AC posters since we start @ ZERO, not 1- whatever registered 'lusers' do)... it's exactly what I do vs. statements like yours, everytime... & it works. Unlike you? I produce fact, not fictions.
We'll compare & "do the math"!
I will also produced posts from trolls like yourself threatening to do it via TOR (webmistressrachel) in downmodding ALL OF MY POSTS when they can!
( & yes, to collect them up on her part (she was "in" with tomhudson/barbara, not barbie & tons of proof of that exists via their 'trolltalk.com' domain & here too)).
Again, per my subject-line above: Without said proof from you, YOUR 'opinion'? Unfounded, & unsubstantiated.
Lastly, per our topic here?
I offered every & ANY way I know of to mitigate it. Did you do so? No! Thus, you prove yourself an OFF TOPIC TROLL, & "pot calling the kettle black"... fool.
APK
P.S.=> IF the "best you've got" is replies like that? Go have a drink since it's a holiday... it'd be more productive on YOUR part, instead of offering your helpful suggestions"
erroneus is a fatass. His words show that http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 it's just truth. Seems he likes to blackmail others too http://slashdot.org/comments.pl?sid=2261720&cid=36545928 again with his own words in a post of his.
erroneus you're embarassing yourself posting ac now. Isn't being a fatass enough? And, you are, a fatass. Your words show that http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 it's just truth, not libel like you also have done here. It appears you also like to attempt blackmail others too http://slashdot.org/comments.pl?sid=2261720&cid=36545928 and I am sure libel before that too. Once more, that's just your own words in a post of yours as proof of it.
Re: Cats in a thread on magnetism
You think admitting it is off-topic means no one would have modded it off-topic before now?
Someone looks like a sore loser.
You're the only sore loser, as anyone else can see, APK wins every time you open your mouth.
Pretty much true: Python is written in C++ iirc.
It is also FAR easier than doing C, C++, or even Delphi for SIMPLE scripting - less declarations work up front (top of code basically in them vs. Python (& to me? Python's no more or better than a simple scripting tool vs. a FULL BLOWN programming language that has FAR more ability & power, such as those I noted)
---
Yes- especially since it was designed thus, to be easier, vs. C or C++ "difficulty" in many folks eyes...
Personally?
I don't see it, when folks "knock" C or C++ for "complexity"... I really don't! Well, unless you took them BOTH & in the order I did (C first, C++ after).
C++ *might* be tough when you start doing "more advanced" stuff (i.e. - stuff I haven't done @ least in C++, because I never did it all, & certainly NOT what's in the new C++11 standard, but I would like to try it in the new RAD studio by Embarcadero which does both Delphi & C++ Builder...) OR if you took C before C++ (which I did in academia).
C & C++ were what I started on too, way, Way, WAY back... decades ago. I am fairly USED to them for pretty large projects & yes, smaller scale apps too.
---
However also - I think Delphi's better in a LOT of ways, save for having a single inheritance model (vs. multiple inheritance based like C++, which I think is mere esoterica actually - what REALLY uses it, and does everything? Hell no)
Plus, I can produce have tests that show it in fact in performance where Delphi ROCKS Microsoft Visual C++ from long ago!
(Ask if you want to see or verify this - I will produce it from a trade journal for computing from the past for Win32 coding).
---
However - Python? It is JUST not as capable (as the other 3 languages I noted...).
Case-in-point: Can you create a driver in Python? Not afaik!
* HOWEVER - You CAN in the other languages, & I've programmed all 3... and MANY others (nearly a dozen iirc) since 1982.
(Python usage for me? LOL, well - It was only to try what you noobs are using lately though - one MUST "put his hands onto something" first, before one can fairly comment on it, after all!)
APK
P.S.=> Here's an example, lol, JUST FOR YOU (which can be reduced to a single line, ala -> print "troll bs here"[::-1]) (minus error handling, & I don't write code without it in ANY language - speed tradeoffs aren't worth programmatic stability)):
An application of... "ReVeRsE-PsYcHoLoGy" - 4 off-topic trolls like you:
"?FTW" - by Anonymous Coward ANOTHER "ne'er-do-well" /. OFF-TOPIC TROLL on Sunday July 10, @06:32AM (#36710070)
"???"
Uhm... Could we get a translation of that off-topic "troll-speak/trolllanguage" of yours, please?
---
* And, you're an off-topic troll - no questions asked...SEE MY SUBJECT LINE ABOVE!
Yes, it must have just have been another off-topic done nothing of significance with his life troll spewing his off-topic b.s. again & not contributing to the ongoing conversations. Oh well - No biggie!
("ReVeRsE-PsYcHoLoGy", for trolls - Courtesy of this code by "yours truly" in less than 1 second flat):
---
#TrollTalkComReversePsychologyKiller.py (Ver #2 by APK)
def reverse(s):
try:
trollstring = ""
for apksays in s:
trollstring = apksays + trollstring
except:
print("error/abend in reverse function")
return trollstring
s = ""
print reverse(s)
try:
s = "Insert whatever 'trollspeak/trolllanguage' gibberish occurs here..."
s = reverse(s)
print(s)
except Exception as e:
print(e)
---
... apkb
At least I don't cry about it for 10 pages of links and crap no one cares about.
Why not install fail2ban instead of this verbose description of script hacking??
That is more like 10 pages of getting your butt kicked, ten pages of win. Maybe you should look more closely at the post instead of just going "tl;dr."
Oh my, I actually looked at the links this time around, and I am so sorry to have wasted your Christmas evening. I just finally noticed how much up-modded posts APK has, as I thought he was just kidding. Apparently his posts are exactly what people here need, and are not off-topic or too long, and I was wrong to argue otherwise.
You fail troll, see subject-line above per this challenge http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311 I put to you... can't you read? Apparently, you are ILLITERATE as well as weak in math!
I also produced what I said I would in a partial list of my favorite upward moderations here on this site, & you by comparison?
LMAO - 1 post where I admit I was off topic (but so was the person I replied to, it was fun banter about cats).
That post? Please - Again:
You probably JUST applied a downmod to since that thread is STILL LIVE... lol, do you *think* you're "fooling" anyone, troll?
Please... lmao!
* Your flurry of posts now additionally only show you fail, or YOU cannot do math (see above)... because 235++ upmods or so for me, vs. that single post "doth not equate to a 'win' for you off-topic trolls"... & you ARE off topic.
APK
P.S.=> So far? You FAIL... badly!
... apk
I accept your apology and am happy that you see where you went wrong. YOUR opinion was unfounded, and was easily shown wrong by numbers.
APK
P.S.=> You can consider this a Christmas gift, I kept the post "short and simple" instead of pointing out how foolish you've been and how easy it is to show you are wrong.
You're a fool troll... too bad you failed to meet my challenge -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311 IN THAT YOU ARE CLEARLY UNABLE TO PRODUCE 236 OR MORE DOWNMODS OF MY POSTS, vs. my list of upmods.
* Now, you just KNOW I've just GOTTA say it. as-is-per-my-own "inimitable style":
THIS? This was just "too, Too, TOO EASY - just '2ez'" & it always is vs. trolls that are reduced to such puny easily seen thru machinations... like impersonating me or trying to!
(Talk about "giving away" you're "on the ropes" & blown away, troll... lol!)
APK
P.S.=> You're not even ORIGINAL in your trolling, for Pete's sake, lol...
E.G.-> Do you know how many of these "attempts at impersonating me" I have archived in my bookmarks?
I've actually got to see (wait)... 155!
So please - At least have some creativity... I do realize you're a limited trolling dolt, but please - be original @ least in doing so! Lmao...
... apk
apk's not crying, he's laughing at you troll. You fail his challenge here http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311 and you can't produce proof of your words, showing more downmods of his posts than his upmods here for an ac that is a lot of them since it is tougher for them to get by a long shot versus registered lusers http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 ? You fail again, troll. His post is on topic here too http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 you are not as usual. Once more you double fail.
I saw it too where apk posted his favorite upmods list http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 and the off topic trolls can't meet his challenge and back up their words saying he has more downmods than up mods where he made a fair challenge to the trolls to back up their words and they failed it here http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311 and the trolls can't handle it.
True. Apk provides proof of his upmods http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 versus the troll saying he's downmodded for long posts he does that seem to do well here on this site http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311 and trolls failed a simple challenge. So much for slashdot trolls that can't backup their words.
To do the ReverseString work, for starters... or in C/C++, strrev, for the reasons I noted (and, I'd have to layout the GUI too ontop of it). More code needs to get laid out, as well as the gui.
I don't find ANY of them difficult though, not for the most part... see my 1st post, I did state that much. Especially about C or C++ which many 'bitch about' being 'too hard' etc./et al.
Plus - In languages capable of producing drivers and entire operating systems like C/C++ & Delphi can do drivers via the DDDK?
They ARE more capable... point-blank, bottom-line, fact!
QUESTION: Can Python do drivers &/or Operating Systems?
Not afaik. It is LIMITED, but made easier to work with, than what it was created in, in C++ iirc.
* For simple scripts, I've found that experimenting with Python to see how "today's noobs work" is pretty ok, but it is LIMITED as hell!
Could I do commandline/tty/DOS Window/console mode apps in Delphi or C/C++?? Sure...
However - Again, it'd be more lines of code (partially generated by the IDE in some cases, others not, but still more lines, but FAR more powerful languages overall, by far, vs. Python).
(Especially vs. C/C++ &/or Delphi, which are my favorites over time).
---
"But you seem more interested in talking about trolling that actual computer topics." - by Anonymous Coward on Wednesday December 26, @01:36AM (#42392623)
Oh, really? See this post, it IS about THIS TOPIC of this article's thread replies -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
Now, are ANY of YOUR REPLIES on topic here? Answer that...
Ah... lmao - You fail, you know it, now... go away, "shooo" little troll (before I spank you even more, lol).
Especially since 1 of my favs (since I was only coding python for MAYBE 1 week @ the time shown below) was about & ON HELPING PYTHON PEOPLE code properly (many there couldn't get what I showed them right there)... shows that NOOBS use Python, imo!
APK
P.S.=>
"The "WTF?" was in reference to GUI work in those languages being difficult. If you find it any more difficult to do GUI work than scripting in Python, you are doing things wrong." - by Anonymous Coward on Wednesday December 26, @01:36AM (#42392623)
Hmmm... For a guy in myself "doing it wrong"? I've done pretty ok in this art & science over the years from a partial list of only SOME of my 'favorites' on that note, shown below next...
See below (have you done more or better, & earlier also):
"My Name is Ozymandias: King of Kings - Look upon my works, ye mighty, & DESPAIR..."
----
Windows NT Magazine (now Windows IT Pro) April 1997 "BACK OFFICE PERFORMANCE" issue, page 61
(&, for work done for EEC Systems/SuperSpeed.com on PAID CONTRACT (writing portions of their SuperCache program increasing its performance by up to 40% via my work) albeit, for their SuperDisk & HOW TO APPLY IT, took them to a finalist position @ MS Tech Ed, two years in a row 2000-2002, in its HARDEST CATEGORY: SQLServer Performance Enhancement).
WINDOWS MAGAZINE, 1997, "Top Freeware & Shareware of the Year" issue page 210, #1/first entry in fact (my work is there)
PC-WELT FEB 1998 - page 84, again, my work is featured there
WINDOWS MAGAZINE, WINTER 1998 - page 92, insert section, MUST HAVE WARES, my work is again, there
PC-WELT FEB 1999 - page 83, again, my work is featured there
CHIP Magazine 7/99 - page 100, my work is there
GERMAN PC BOOK, Data Becker publisher "PC Aufrusten und Repairen" 2000, where my work is contained in it
HOT SHAREWARE Numero 46 issue, pg. 54 (PC ware mag from Spain), 2001 my work is there, first one featured, yet again!
Also, a British PC
There is a quote you should see from a Bruce Perens:
It just takes one Ubuntu sympathizer or PR flack to minus-moderate any comment. Unfortunately, once PR agencies and so on started paying people to moderate online communities, and to have hundreds of accounts each, things changed.
How can we trust modding in this day and age of sock-puppetry? All of those mods could just be done by some sock-puppet accounts, or one of the many trolls that mod your posts up so other trolls can see them better.
You would think if he were modding up his own posts, he would get more than 2 +5 posts a year. It is easy to get two +5 posts in response to a single story even if you know nothing about it and are completely wrong. Getting dozens of -1 posts in a single thread though, that takes special skill.
It is obvious you are just some troll arguing with yourself because you can't argue with any of APK's points. Once he has beaten you by arguing with simple numbers, you give up and try to make it look like there are multiple ACs supporting your position.
.. while guys like me banged your woman and made you WATCH, lol...
Well, you kind of blew it there didn't you troll. You think people would think the same person who posts Bible quotes and talks about having good time with neighbors would resort to being that low? You would have to do a lot more than imitate APK's intimidating style to make people think you are actually APK.
You're off topic and a digusting no dick fatass http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 whereas the person you are insulting in apk is on topic and with a useful post http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741 you failed blimp. Your whole life's a fail when you let yourself turn into a bloatbody pig.
Instead of being a fatass (you said it) and "ne'er do well": When you can show you've done MORE, BETTER, & EARLIER than I have in the art & science of computing (per this TINY only partial list of some of my favorites over timeshown below)?
Then, you *might* have a point... after all: Consider it a challenge... even possibly exercise & YOU NEED IT (lol):
LMAO - Plus, despite your off topic trolling & comments on me?
Well... What I've done & accomplished?
It's better than letting yourself turn into a walrus LIKE YOU, after all... lol, fact!
OR
A blackmailer like you've shown us all you are -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 as well!
---
(Is THAT all you have when 'the chips are down' fatboy? See subject-line above).
---
* Man... lol, I woke up VERY early today to see just where this all devolved to from that off-topic troll erroneus the BLOATED "ne'er-do-well" attempting his usual "last resort of trolls", the ad hominem attack (parent to this post)..
Well, you brought it on yourself erroneus...
Especially the 2 challenges to you I issue here now to you (show you've done more/better/earlier in computing than I have, + disprove my points on hosts files)
Since you're also trying to put me down on grounds in the art & science of computing?
Especially on HOSTS files??
How come you couldn't disprove my points on them???
I'll also gladly put them up, with work I have done that I can SHOW in programs for it below (whereas you cannot do the same)...
YOU get past the challenge of showing us you've done better than I in computing? Just to burn you more, I'll put up points on custom hosts files usage that help users on MANY levels. You are FREE to disprove them.
You do THAT?? Well... lol, I'll even BUY YOU some slimfast as others suggested you eat vs. donuts... lol!
However - YOU? The trolling blackmail attempting fatboy likes of you??
No way. YOU can't do it, & I know it, YOU KNOW IT, anyone reading knows it.
What I've managed? Hey - It's better than being a fatboy who can't handle I smoke him constantly... & who resorts to blackmail when "hurt" (you bring on yourself fool).
APK
P.S.=> Since I am what you say I am erroneus?
Well, tell you what then, again:
You show us you've done MORE, BETTER, & EARLIER than I have & as on as many levels in the computer sciences than I have (per an only small partial list of my favorites below, that I suspect I accomplished in computing WHILE the 'trolling likes of you' were STILL IN DIAPERS - lmao: DOUBTLESS "extra huge size" for a DISGUSTING BLIMP like yourself):
---
"My Name is Ozymandias: King of Kings - Look upon my works, ye mighty, & DESPAIR..."
----
Windows NT Magazine (now Windows IT Pro) April 1997 "BACK OFFICE PERFORMANCE" issue, page 61
(&, for work done for EEC Systems/SuperSpeed.com on PAID CONTRACT (writing portions of their SuperCache program increasing its performance by up to 40% via my work) albeit, for their SuperDisk & HOW TO APPLY IT, took them to a finalist position @ MS Tech Ed, two years in a row 2000-2002, in its HARDEST CATEGORY: SQLServer Performance Enhancement).
WINDOWS MAGAZINE, 1997, "Top Freeware & Shareware of the Year" issue page 210, #1/first entry in fact (my work is there)
PC-WELT FEB 1998 - page 84, again, my work is featured there
WINDOWS MAGAZINE, WINTER 1998 - page 92, insert section, MUST HAVE WARES, my work is again, there
PC-WELT FEB 1999 - page 83, again, my work is featured there
CHIP Magazine 7/99 - page 100, my work is there
GERMAN PC BOOK, Data Becker publisher "PC Aufrusten und Repairen" 2000, where my work is contained in it
HOT SHAREWARE
I said all that needs saying or doing here http://slashdot.org/comments.pl?sid=3339513&cid=42393023
* :)
(Especially vs. a trolling off topic lardbody blackmailer like erroneus proved himself to be -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 , in his own words & links he posted no less... I get to prove he's also a "ne'er-do-well" as well as an off topic illogical failing ad hominem attack attempting fatboy too! BONUS... lol!)
APK
P.S.=> Let's see erroneus "take a swing" @ that & the two challenges I put to he there for his off-topic trolling + failed attempt @ ad hominem attacks on myself (as well as attempts @ impersonating me here that I caught last night -> http://slashdot.org/comments.pl?sid=3339513&cid=42391957 )
THIS? Well, since he brought it on himself as per his trolling usual, you just KNOW I've just GOTTA say it, as-is-per-my-usual "imitable style"?? This was just "too, Too, TOO EASY - just '2ez'"...
... apk
Once more - I said all that needs saying or doing here http://slashdot.org/comments.pl?sid=3339513&cid=42393023
* :)
(Especially vs. a trolling off topic lardbody blackmailer like erroneus proved himself to be -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 , in his own words & links he posted no less... I also NOW get to prove erroneus's also a "ne'er-do-well" as well as an off topic illogical failing ad hominem attack attempting fatboy too! BONUS... lol!)
APK
P.S.=> Let's see erroneus "take a swing" @ that & the two challenges I put to he there for his off-topic trolling + failed attempt @ ad hominem attacks on myself (as well as attempts @ impersonating me here that I caught last night -> http://slashdot.org/comments.pl?sid=3339513&cid=42391957 )
THIS? Well, since he brought it on himself as per his trolling usual, you just KNOW I've just GOTTA say it, as-is-per-my-usual "imitable style"?? This was just "too, Too, TOO EASY - just '2ez'"...
... apk
No effort @ all - I said all that needs saying or doing here http://slashdot.org/comments.pl?sid=3339513&cid=42393023
* :)
(Especially vs. a trolling off topic lardbody blackmailer like erroneus proved himself to be -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 , in his own words & links he posted no less... I also NOW get to prove erroneus's also a "ne'er-do-well" as well as an off topic illogical failing ad hominem attack attempting fatboy too! BONUS... lol!)
APK
P.S.=> Let's see erroneus "take a swing" @ that & the two challenges I put to he there for his off-topic trolling + failed attempt @ ad hominem attacks on myself (as well as attempts @ impersonating me here that I caught last night -> http://slashdot.org/comments.pl?sid=3339513&cid=42391957 )
THIS?
Well, since he brought it on himself as per his trolling usual, you just KNOW I've just GOTTA say it, as-is-per-my-usual "imitable style"??
This was just "too, Too, TOO EASY - just '2ez'"...
... apk
http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392311
* The topic and answer(s) I gave are on topic, like my post is today here on THIS topic -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
Are you? Answer that... You're just a troll, nothing more.
APK
P.S.=> So can downmods...and funniest of all? I challenged trolls who said my posts are more downmodded than upmodded vs. a partial list of my favorites only here & they failed that too, just like you failing now -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 lmao
... apk
You can do FAR MORE in C/C++/Delphi than a "toy language" like Python... no questions asked/fact.
* See my subject-line - it's no small wonder that the 'script kiddies' around here 'favor' toy languages over ones that can do GUI apps, console mode apps, OPERATING SYSTEMS, and DEVICE DRIVERS... since MOST of what I noted here that have the audacity to call themselves "programmers" are usually what I call "Web Chumps", nothing more.
(Heck - ask Linus Torvalds if he wastes time doing that simpleton shit... I have to unfortunately @ times, but I use ASP.NET via Visual Studio... a VERY powerful near ubiquitous tool, not 'toy languages' I dabble in to see what noobs use nowadays vs. C/C++/Delphi!)
Can Python do ALL of those things I noted? Hell no! It's a 'toy', or at best, a scripting tool vs. them. Period/fact.
APK
P.S.=> I've programmed them all after all & FAR more, in the languages I noted & far more other languages since 1982, extensively so relatively speaking & did pretty well on more than just a few levels professionally too (that I can demonstrate easily, unlike the 'noobs' I've met around here that troll me).
Are there GREAT ones here? Yes, Mr. John Carmack - he doesn't 'troll me' though. Are there close to that in other areas?? Yes, ANIMATS (he's contributed the IP stack).
You & those LIKE you troll??? Not even CLOSE... & not even close to my accomplishments. Your 'kind', using tools like PHP, Python, Ruby, etc.???? Dime-a-Dozen.
Thus? Well, face facts - I can comment freely & with facts as I have to you, & I don't see you disproving my points on them either... noob!
... apk
I can show you where various trolls like webmistressrachel threatened to DOWNMOD my posts whenever possible via TOR usage!
(THATs is the 'last resort' of these technical nincompoop trolls, & there's your reason why MANY of my posts go from 4 or 5 down to 1, 2, 3 levels, if not -1).
* Not that I really care - I do pretty well, as is, but
(I.E.-> Nerds whose whole LIVES have been lived beaten down because they're weasels & whimps, show how they act more like WOMEN, than men... lol!)
APK
P.S.=> Like I have said here before - I can & WILL provide direct quotes from various trolls in that regard upon request as I was told by law enforcement people to do so...
I could put out a LOT more like threats vs. my life, & other reprehensible behaviors on trolls' parts here directed my way over time as well!
(Much like you're seeing here, this is mild compared to SOME things that've happened here, like posting my personal information & the like etc./et al)...
List goes on, I am not even SCRATCHING THE SURFACE OF IT here!
... apk
No... in fact, I stated it COSTS, big http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390907 AND, I pointed out the companies (huge money makers) doing it successfully!
There's probably others, those are my 2 "prime examples thereof" is all... AND?
NOTE - I also posted OTHER METHODS too (for Windows users though)...
Methods that do NOT require 'huge bandwidth' & OC12 pipes to do it (ala the registry hack settings mitigations recommend by Microsoft for TCP/IP stack hardening).
Your point??
I appreciate your information, but - I find your tone to be one that's attempting to "condescend" to me, while you overlook ALL/EACH of my points!
Ok, but... I am WELL aware of how it works - since I have been fighting vs. crooks online for more than a decade now, actively (unlike MOST others, mere "armchair QB's" & critics galore but not much on being 'chefs') - see below.
So, yes - I KNOW HOW IT ALL WORKS & how the pricks that abuse people, companies, & nations work...
Plus - I am out there DOING SOMETHING ABOUT IT - actively now, & for YEARS before it, just like my parent post here was intended to be, because the methods work... see below too, I don't like stating things without some proof of my words (unlike the trolls I have smoked here today).
APK
P.S.=> Buddy, listen: As far as protecting vs. malware & other threats online? I am RIGHT IN THE MIDDLE OF IT with security firms:
http://start64.com/index.php?option=com_content&view=article&id=5851:apk-hosts-file-engine-64bit-version&catid=26:64bit-security-software&Itemid=74
and doing the FIRST security guide for Windows users, EVER 1997 onwards to 2008:
---
To "immunize" a Windows system, I effectively use the principles in "layered security" possibles!
http://www.bing.com/search?q=%22HOW+TO+SECURE+Windows+2000%2FXP%22&go=&form=QBRE
I.E./E.G.-> I have done so since 1997-1998 with the most viewed, highly rated guide online for Windows security there really is which came from the fact I also created the 1st guide for securing Windows, highly rated @ NEOWIN (as far back as 1998-2001) here:
http://www.neowin.net/news/apk-a-to-z-internet-speedup--security-text
& from as far back as 1997 -> http://web.archive.org/web/20020205091023/www.ntcompatible.com/article1.shtml which Neowin above picked up on & rated very highly.
That has evolved more currently, into the MOST viewed & highly rated one there is for years now since 2008 online in the 1st URL link above...
Which has well over 500,000++ views online (actually MORE, but 1 site with 75,000 views of it went offline/out-of-business) & it's been made either:
---
1.) An Essential Guide
2.) 5-5 star rated
3.) A "sticky-pinned" thread
4.) Most viewed in the category it's in (usually security)
5.) Got me PAID by winning a contest @ PCPitStop (quite unexpectedly - I was only posting it for the good of all, & yes, "the Lord works in mysterious ways", it even got me PAID -> http://techtalk.pcpitstop.com/2007/09/04/pc-pitstop-winners/ (see January 2008))
---
Across 15-20 or so sites I posted it on back in 2008... & here is the IMPORTANT part, in some sample testimonials to the "layered secu
http://slashdot.org/comments.pl?sid=3339513&cid=42393023
After all - YOU STARTED IT, http://slashdot.org/comments.pl?sid=3339513&cid=42390715
So - now I'll just finish it, and you, with it (not that a spineless prideless done nothing WORM like you even cares... lol, your "kind"? Doesn't merit pride!)
* :)
* Come on FATBOY... reply to that - face a challenge!
Yes - can't wait to utterly FURTHER humiliate your off-topic illogical ad hominem attack utilizing troll fat blackmail attempting ass -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 (your own posts do you in, lol), again...
How many times is it now? You just DO NOT LEARN do you fatboy??
This is yet another time... it will be a PLEASURE watching you "squirm" & perform 'evasive troll maneuvers', which you already are avoiding that link above - LOL, while your blubber body self proves my point even more.
APK
P.S.=> No fury... just laughter here - waiting to see you "RUN, Forrest: RUN!!!" like the fatboy blackmailer cowardly little wuss you showed yourself to be here in your own words -> http://slashdot.org/comments.pl?sid=3339513&cid=42392385 & posts!
(In addition to your ILLOGICAL off-topic invalid ad hominem attack above directed MY way , totally off topic http://slashdot.org/comments.pl?sid=3339513&cid=42390715 that failed)...
Me? I was on topic, helping others vs. DDoS attack & not with hosts files douchebag fatboy. See here -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
Were you? Hell no - you tried "trolling me"... you are a PUNK.
Are you a MAN or a WOMAN? I am curious, because you BEHAVE like a bitch...
... apk
Most DDoS attacks used spoofed IP addresses that aren't real. So that idea would never work. The author apparently doesn't understand how some of the attacks work. Plus, many of the attacks come through the anonymous TOR network.
The root cause is that people can not SEE what traffic their PC does,
no matter if it's malware traffic or from regular software with user intended purpose.
A simple browser API to the OS kernel could solve this. Like a realtime local firewall monitor.
In the simplest case the browser requests http://127.0.0.1:8888 and the kernel sends back the host names
it is doing traffic with, allowing the user to block or allow each host.
And very importantly showing which local program is causing the traffic, in order to locate malware.
I find it utmost stupid how many lengthy discussions there are on slashdot against government interference and for net
neutrality and the first thing some people do is to cry out for government and police to fix this fundamental flaw.
Most users accepted to cripple their systems with all intercepting virus scanners - why not take responsibility for the network traffic
it does instead?
Well back in the Flintstone days of the net [1994-2001] I'd do an ARIN lookup and call the listed telephone and be speaking to a real knowledgeable person in under a minute who knows their IP addresses by heart. I know those days are over. Never mind.
There is one net protocol for which no one has any expectation of privacy -- and if providers do deep packet inspection there is no controversy, ICMP.
My idea is to fire back a couple of small ICMP messages with an RFC described format back towards each attacking address every so often, with small payloads (we don't want to add to the traffic problem).
The payload of a 'notify' message that includes a unique random identifier, the time DDOS condition started, cumulative packet count from that address if available. Maybe some flags with attack type and name/address targeted to help forensics.
The second type of message used for 'source verification', also throttled, contains a list of recent notify identifiers and a https URL address, and is digitally signed with the same cert used by the SSL server. The url serves a page with a name and contact phone number.
The idea is that responsibly staffed providers (or those upstream of them) would routinely inspect these packets and parse them out to populate a threat board. End providers could match to customer accounts, those upstream of them could at least compile statistics in aggregate.
Of course it always becomes a cat and mouse game with the attackers constructing their own bogus notify networks. You'd see flood attacks consisting of bogus attack notification messages. But here the advantage begins, for it is impractical for botnet operators to address every unique ISP their slaves occupy individually.
Those who already have dark fiber piggyback slurp terabit packet inspection on the backbone (and You Know Who You Are) would have the best picture of all, with these poke messages they could assemble a picture of a botnet in minutes. Do something noble for a change.
Or we could just all run into the closet and pile blankets over our heads. Works for me.
<blink>down the rabbit hole</blink>
http://slashdot.org/comments.pl?sid=3339513&cid=42393487
http://slashdot.org/comments.pl?sid=3339513&cid=42393487
http://slashdot.org/comments.pl?sid=2261720&cid=36545928
Contact the authorities. If they don't care, contact the newspaper and tell them the authorities don't care. Lather, rinse, repeat.
In the meantime, contact your ISP and beg them not to disconnect you.
I've been DDoS'd for insulting people on irc. As a home user you have no option but to wait for it to end, especially if you have a static IP which I did at the time. It's small satisfaction knowing that the person flooding you is never going to amount to anything and will probably end up in PMITA prison one day.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I think that idea needs one of those old form letter responses: Your idea will never work because...
Excuse me, but please get off my Pennisetum Clandestinum, eh!
While it is at least somewhat on topic to induce a DoS attack attempt in a discussion of DDoS attacks, it would have been much more insightful if you showed a way to prevent or stop it. Or at least more useful if you showed how to harness such a crap-storm inducing power on other, arbitrary sites.
As much power and effort you attribute to the person(s) you think are stalking you, no one wants to take the time or is OCD enough to compile and keep a list of all of your posts. But if you look at a single thread, like say this one, it is clear you have far more downmods than upmods (in that case, zero upmods).
You are replying to the wrong AC. You can tell from misogamy and crude insults that it is just an imposter trying to make APK look bad. The troll is showing he has no limits to how low he will go, first making trying to make it look like APK was obsessed with keep track of posts and now going on to sexist insults.
Well, maybe he should register then, so he wouldn't have to manually keep track of posts and his karma would conclusively show he gets more upward mods than downward mods. You know, use technology to do the hard work instead of trying to manually argue with idiots. Also, I can't dedicate the whole of Boxing day to working out which post is made by whom.
Only the ISP doesn't care as he is a paying customer.
The only way this works is if the (and all) ISPs charge for the service. Think of it as virus-removal-on-demand. Now $5.99.
The slashdot crowd is pretty good at bringing servers to their knees when a link is posted on here!
Probably a notification (via their ISP since email addresses are hard(too costly) to get) to the people being used thattheir systems are mbeing manipulated and probably impaired. A clearing house for tools and instructions for removal and prevention could then be used.
Tracing back to the real perps and major jailtime for various criminal counts would be good (you would think by now they would have better tools to find and zap these criminals and identify the sources for government action)
I don't think that's possible. Far as I can tell, you're all dipshits.
The original point is DDoS you illiterate moron. Get your facts straight.
You don't have more than 235 he asked you to show. You failed.
Why? Apk proved he has more upmods than trolls can show downmods of his posts.
"The vast majority of DDoS participants are infected computers in botnets" .. that run on Microsoft Windows ...
AccountKiller
I've seen an infected computer in which the dip (art time Warner) stopped all connections except http,, redirected all http traffic to a page informing them why their network was blocked, and how to clean all of the computers on the network and request an unblock. If that failed, they demands a note from that person that they had some one clean all thsir computers, any pc business. That actually was my computer with a bug a wipe didn't fix because it spread through the LAN!
I wouldn't recommand to do this "blindly" for 2 reasons :
1) in some countries, an IP address is considered a private data
2) some computer are part from botnets and shouldn't be "shown" since they are already compromised, this could ease a "take over" of those computers by another group
On the other hand, if you detect that the patern used is a signature from a voluntary botnet tool like LOIC, then you could show them I would say, since those people are volunteering and thus expose themselves directly. Their computers are not zombies but voluntarly associated to the attack, then it would be a "fair" counter attack.
To be an easily tracked for trolling sheep that lives for "karma points"?
LOL, no... don't *think* so...
Besides - I've got my 'private personal fanclub' of trolls that stalks me around here that have threatened to down moderate my posts, ala "webmistressrachel", & this choice quote from her:
---
"Screw you, apk, and the horse you rode in on. If I ever see you post here again, I'll bomb you as AC from Tor, meaning I'll NEVER run out of posts because I can change endpoint..." - by webmistressrachel (903577) on Sunday July 03 2011, @02:03PM (#36647614)
FROM -> http://slashdot.org/comments.pl?sid=2292298&cid=36647614
Using TOR to "anonymize" herself to do it... what a piece of TRASH, plain & simple!
---
(So, again - no thanks: Just not that stupid here... No reason to make it easy on the scumbags around here is all!)
APK
P.S.=> As far as 'using technology to do it'? I do - a simple text file & also my bookmarks/favorites in my webbrowsers... so, what's your 'point'??
... apk
Another computing technically unjustifiable downmod of my post http://tech.slashdot.org/comments.pl?sid=3339513&cid=42393295 that I just replied to &, days later of course and this one above it also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392369
and this one above that also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42391603
ALL TO SARDAUKAR86 "oddly", eh? LMAO - NOT!
Downmodded unjustifiably: Just like my original post BEFORE THOSE was downmodded -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390907 again - vs. Sardaukar86 the constantly FAILING troll vs. myself!
Every single time, lol!
Well - At least Sardaukar86 had the SENSE to leave my parent post alone ( which DOES OFFER GREAT DEFENSES vs. DDoS/DoS, our subject here ) -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
(No... it's Sardaukar86 attempting to "defend" his 'honor' I suppose... lol, what LITTLE He has left after this UTTER THRASHING I gave him, yet again, lol! This much IS obvious!)
So - Why do they do it, these trolls?
Well, I use FACTS & undeniable technical evidences to back me up... & my work as well!
(After all - I don't see ANY counterpoints that disprove points I wrote in my original parent post here, or the one I replied to now or the others I listed he "downmodded in 'effete retaliation'", merely proving my points)
Thanks trolls - For proving what I wrote is TRULY, unassailable (via VALID counter facts/points... lol!)
* :)
Yes - Predictable, hence why I watched this post for it, & like clockwork? "Same old, same old" troll-tricks, nothing more - See above...
APK
P.S.=> LMAO - Yes, folks: It's ALL THE TROLLS KNOW HOW TO DO, to *try* to "hide truths &/or facts" that they cannot disprove, every single time...
... apk
Another computing technically unjustifiable downmod of my post http://tech.slashdot.org/comments.pl?sid=3339513&cid=42393295 that I just replied to &, days later of course and this one above it also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392369
and this one above that also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42391603
ALL TO SARDAUKAR86 "oddly", eh? LMAO - NOT!
Downmodded unjustifiably: Just like my original post BEFORE THOSE was downmodded -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390907 again - vs. Sardaukar86 the constantly FAILING troll vs. myself!
Every single time, lol!
Well - At least Sardaukar86 had the SENSE to leave my parent post alone ( which DOES OFFER GREAT DEFENSES vs. DDoS/DoS, our subject here ) -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
(No... it's Sardaukar86 attempting to "defend" his 'honor' I suppose... lol, what LITTLE He has left after this UTTER THRASHING I gave him, yet again, lol! This much IS obvious!)
So - Why do they do it, these trolls?
Well, I use FACTS & undeniable technical evidences to back me up... & my work as well!
(After all - I don't see ANY counterpoints that disprove points I wrote in my original parent post here, or the one I replied to now or the others I listed he "downmodded in 'effete retaliation'", merely proving my points)
Thanks trolls - For proving what I wrote is TRULY, unassailable (via VALID counter facts/points... lol!)
* :)
Yes - Predictable, hence why I watched this post for it, & like clockwork? "Same old, same old" troll-tricks, nothing more - See above...
APK
P.S.=> LMAO - Yes, folks: It's ALL THE TROLLS KNOW HOW TO DO, to *try* to "hide truths &/or facts" that they cannot disprove, every single time...
... apk
Another computing technically unjustifiable downmod of my post http://tech.slashdot.org/comments.pl?sid=3339513&cid=42393295 that I just replied to &, days later of course and this one above it also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392369
and this one above that also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42391603
ALL TO SARDAUKAR86 "oddly", eh? LMAO - NOT!
Downmodded unjustifiably: Just like my original post BEFORE THOSE was downmodded -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390907 again - vs. Sardaukar86 the constantly FAILING troll vs. myself!
Every single time, lol!
Well - At least Sardaukar86 had the SENSE to leave my parent post alone ( which DOES OFFER GREAT DEFENSES vs. DDoS/DoS, our subject here ) -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
(No... it's Sardaukar86 attempting to "defend" his 'honor' I suppose... lol, what LITTLE He has left after this UTTER THRASHING I gave him, yet again, lol! This much IS obvious!)
So - Why do they do it, these trolls?
Well, I use FACTS & undeniable technical evidences to back me up... & my work as well!
(After all - I don't see ANY counterpoints that disprove points I wrote in my original parent post here, or the one I replied to now or the others I listed he "downmodded in 'effete retaliation'", merely proving my points)
Thanks trolls - For proving what I wrote is TRULY, unassailable (via VALID counter facts/points... lol!)
* :)
Yes - Predictable, hence why I watched this post for it, & like clockwork? "Same old, same old" troll-tricks, nothing more - See above...
APK
P.S.=> LMAO - Yes, folks: It's ALL THE TROLLS KNOW HOW TO DO, to *try* to "hide truths &/or facts" that they cannot disprove, every single time...
... apk
Another computing technically unjustifiable downmod of my post http://tech.slashdot.org/comments.pl?sid=3339513&cid=42393295 that I just replied to &, days later of course and this one above it also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392369
and this one above that also http://tech.slashdot.org/comments.pl?sid=3339513&cid=42391603
ALL TO SARDAUKAR86 "oddly", eh? LMAO - NOT!
Downmodded unjustifiably: Just like my original post BEFORE THOSE was downmodded -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390907 again - vs. Sardaukar86 the constantly FAILING troll vs. myself!
Every single time, lol!
Well - At least Sardaukar86 had the SENSE to leave my parent post alone ( which DOES OFFER GREAT DEFENSES vs. DDoS/DoS, our subject here ) -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42390741
(No... it's Sardaukar86 attempting to "defend" his 'honor' I suppose... lol, what LITTLE He has left after this UTTER THRASHING I gave him, yet again, lol! This much IS obvious!)
So - Why do they do it, these trolls?
Well, I use FACTS & undeniable technical evidences to back me up... & my work as well!
(After all - I don't see ANY counterpoints that disprove points I wrote in my original parent post here, or the one I replied to now or the others I listed he "downmodded in 'effete retaliation'", merely proving my points)
Thanks trolls - For proving what I wrote is TRULY, unassailable (via VALID counter facts/points... lol!)
* :)
Yes - Predictable, hence why I watched this post for it, & like clockwork? "Same old, same old" troll-tricks, nothing more - See above...
APK
P.S.=> LMAO - Yes, folks: It's ALL THE TROLLS KNOW HOW TO DO, to *try* to "hide truths &/or facts" that they cannot disprove, every single time...
... apk
A well-written one should have checks on GUI controls (such as making SURE they re-enable after crashes, checking they enable/disable as you use them - so you don't "touch the same data twice", especially with multiple thread usage).
CONSOLE MODE/TTY TERM/DOS WINDOW apps don't DEMAND THAT, as they have no buttons etc./et al!
E.G.-> What I do, & why per the above...
I usually do these types of constructs because of that (using Borland Delphi Object Pascal here, except = same as "catch" with Try):
Try
Try
Except
End;
Finally
End;
* That way, I can handle ANY exceptions ANY way I like (both in an errlog with structured exception classes dumps, OR, with my own err/abend messages (usually these are for users)) & yet, still be accurate/stable as possible for 'safer' code!
I sometimes even "override" the default error handling to dump to a log, as to actual "structured exception handlers" (error handling classes), & let the user have a 'friendlier' one (IF I do so @ all), & give the user a "less fearful" feedback IF errors/abends hit!
ALA:
{STD ERR OVERRIDE SECTION}
procedure AppException(Sender: TObject; E: Exception);
procedure TForm1.AppException(Sender: TObject; E: Exception); register; // CUSTOM EXCEPTION HANDLER/MASK & LOG - "STD. ERR" override... apk // BLANK ELSE STOPS ALL ERRMSG SHOWING... apk // Use commented off code below IF you want to show it... apk // Added later on 'rice', good catch! apk // Show the error? NO! Just pipe to a log... apk
var
ErrorLog: System.Text;
begin inherited;
AssignFile(ErrorLog, ExePath + 'APKErrLog.txt');
try
System.Append(ErrorLog);
except
on EInOutError do
Rewrite(ErrorLog);
else
end;
Writeln(ErrorLog,
format('%s %s %s [%s]',
[TimeToStr(Now),
DateToStr(Date),
'APK', E.Message]));
Application.ProcessMessages;
System.Flush(ErrorLog);
System.Close(ErrorLog);
Application.ProcessMessages;
{
MessageDlg(E.Message + '. Occurred at: ' + Addr, mtError, [mbOK],0);
Form1.StatusBar1.Panels[0].Text:= E.Message;
MessageBeep(MB_ICONEXCLAMATION);
Application.ShowException(E);
ShowMessage(E.Message);
}
end;
Then, in the actual functions &/or procedures I do either of these 2 options, as needed:
E.G.:
A PLAIN EXCEPTION BLOCK:
try
try
except
ShowMessage('Contact your SysAdmin - err in function/procedure whateverthenameofitishere');
end;
finally
http://tech.slashdot.org/comments.pl?sid=3339513&cid=42408867
APK
P.S.=> Have you EVER written a GUI app? In a REAL language (not a 'toy' scripting tool @ best like Python)?? Obviously not - or, you'd KNOW the amount of extra work it takes to do a GUI app, RIGHT vs. doing commandline/DOS Window/tty term/console mode apps... & yes - That's listed in good part in that reply - read it, grow & learn by it!
... apk
http://slashdot.org/comments.pl?sid=3339709&cid=42393389
* :)
(Since you like DALEKS & obviously Dr. Who -> http://slashdot.org/comments.pl?sid=3339709&cid=42393097 well, it applies... lol, since you are a trolling PEST I have "controlled" before, rather easily!)
Some humor - I can afford it vs. "the trolling likes you YOU"... lol!
APK
P.S.=> Especially vs. TROLLS/PESTS, like you (that I demonstrated blowing you away easily before too -> http://tech.slashdot.org/comments.pl?sid=3339513&cid=42391603 as well, easily)... apk
Read it yourself, and his libel before it http://slashdot.org/comments.pl?sid=2261720&cid=36545928 since he tried hiding it by a downmod last time it was posted here http://slashdot.org/comments.pl?sid=3339513&cid=42399343 & here also http://slashdot.org/comments.pl?sid=3344205&cid=42411119 erroneus = Jorge Bastida.
Read it yourself, and his libel before it http://slashdot.org/comments.pl?sid=2261720&cid=36545928 since he tried hiding it by a downmod last time it was posted here http://slashdot.org/comments.pl?sid=3339513&cid=42399343 & here also http://slashdot.org/comments.pl?sid=3344205&cid=42411119 erroneus = Jorge Bastida.
Read it yourself, and his libel before it http://slashdot.org/comments.pl?sid=2261720&cid=36545928 since he tried hiding it by a downmod last time it was posted here http://slashdot.org/comments.pl?sid=3339513&cid=42399343 & here also http://slashdot.org/comments.pl?sid=3344205&cid=42411119 erroneus = Jorge Bastida.
Read it yourself, and his libel before it http://slashdot.org/comments.pl?sid=2261720&cid=36545928 since he tried hiding it by a downmod last time it was posted here http://slashdot.org/comments.pl?sid=3339513&cid=42399343 & here also http://slashdot.org/comments.pl?sid=3344205&cid=42411119 erroneus = Jorge Bastida.
Read it yourself, and his libel before it http://slashdot.org/comments.pl?sid=2261720&cid=36545928 since he tried hiding it by a downmod last time it was posted here http://slashdot.org/comments.pl?sid=3339513&cid=42399343 & here also http://slashdot.org/comments.pl?sid=3344205&cid=42411119 erroneus = Jorge Bastida. He was downmodded as troll in the parent post too idiot.
http://tech.slashdot.org/comments.pl?sid=3339513&cid=42408867
Your big mouth write checks your fatass can't cash? http://slashdot.org/comments.pl?sid=3339513&cid=42393023
Are you shamed since you "Run, Forrest: RUN" here http://slashdot.org/comments.pl?sid=3339513&cid=42393023 where your fatboy mouth wrote checks your fatass can't cash? Absolutely. Talk about shameful. You talk a big game but when it mattered, you ran and got yourself down modded as a troll.
He did produce his list. You can't do the same for downmods http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 All you trolls have is a lot of lies and no substance to back you. He surely did. You fail.
Apk put up 235 upmods of his. Where's your list of more downmods he challenged you to put out against this http://tech.slashdot.org/comments.pl?sid=3339513&cid=42392649 ? It isn't. You fail. You trolls lie and downmod but fail when the chips are on the table.
Erroneus/john b wilcox: When you eat, is your dish a wheelbarrow, your fork a pitchfork, and spoon a shovel or what http://slashdot.org/comments.pl?sid=3345911&cid=42414637 ? Does your bed use chevy truck coil springs and struts to hold your fat ass off the floor too? Hahahaha. No wonder you said this "Oh... to eat pizza again..." by erroneus (253617) on Saturday December 22, @05:20PM (#42371769) from http://slashdot.org/comments.pl?sid=3335159&cid=42371769 you disgustingly fat hog.
Erroneus/john b wilcox: When you eat is your dish a wheelbarrow, your fork a pitchfork, and spoon a shovel or what http://slashdot.org/comments.pl?sid=3345911&cid=42414637 ? Does your bed use chevy truck coil springs and struts to hold your fat ass off the floor too? Hahahaha. No wonder you said this "Oh... to eat pizza again..." by erroneus (253617) on Saturday December 22, @05:20PM (#42371769) from http://slashdot.org/comments.pl?sid=3335159&cid=42371769 you disgustingly fat hog.
Erroneus/john b wilcox: When you eat is your dish a wheelbarrow, your fork a pitchfork, and spoon a shovel or what http://slashdot.org/comments.pl?sid=3345911&cid=42414637 ? Does your bed use chevy truck coil springs and struts to hold your fat ass off the floor too? Hahahaha. No wonder you said this "Oh... to eat pizza again..." by erroneus (253617) on Saturday December 22, @05:20PM (#42371769) from http://slashdot.org/comments.pl?sid=3335159&cid=42371769 you disgustingly fat hog!
It's a shame that ISPs are routing spoofed udp packets, like in DRDOS attacks and are not made liable for this. When a fake UDP packet, spoofed with the source IP being replaced by yours, is sent to an amplifying system, like quake/cs/hl/codt server or a dns, then you get the answers... A lot. Why the hell those guys route trafic issued from an IP that is not in their range ? It's a line of config in routers. (Not exactly rocket science like a friend of mine says) Well simply because they make money out of upload trafic... Shame. Ok it would only solve the DDOS based on UDP spoofed packets, but it's not few. Btw I like the ideas expressed here lf a license to use a computer. Something giving the basics at least. I also like the idea of a reputation system (we have one in our high security cloud) to ban the IPs doing carp tepeatidly, by blackholing them, after a neutral group of netadmins decides it.