Slashdot Mirror
Mirai and Bashlight Join Forces Against DNS Provider Dyn (arstechnica.com)
A second wave of attacks has hit dynamic domain name service provider Dyn, affecting a larger number of providers. As researchers and government officials race to figure out what is causing the outages, new details are emerging. Dan Drew, chief security officer at Level 3 Communications, says the attack is at least in part being mounted from a "botnet" of Internet-of-Things (IoT) devices. "We're seeing attacks coming from a number of different locations," Drew said. "An Internet of Things botnet called Mirai that we identified is also involved in the attack." Ars Technica reports: The botnet, made up of devices like home WiFi routers and internet protocol video cameras, is sending massive numbers of requests to Dyn's DNS service. Those requests look legitimate, so it's difficult for Dyn's systems to screen them out from normal domain name lookup requests. Earlier this month, the code for the Mirai botnet was released publicly. It may have been used in the massive DDoS attack against security reporter Brian Krebs. Mirai and another IoT botnet called Bashlight exploit a common vulnerability in BusyBox, a pared-down version of the Linux operating system used in embedded devices. Mirai and Bashlight have recently been responsible for attacks of massive scale, including the attacks on Krebs, which at one point reached a traffic volume of 620 gigabits per second. Matthew Prince, co-founder and CEO of the content delivery and DDoS protection service provider CloudFlare, said that the attack being used against Dyn is an increasingly common one. The attacks append random strings of text to the front of domain names, making them appear like new, legitimate requests for the addresses of systems with a domain. Caching the results to speed up responses is impossible. Prince told Ars: "They're tough attacks to stop because they often get channeled through recursive providers. They're not cacheable because of the random prefix. We started seeing random prefix attacks like these three years ago, and they remain a very common attack. If IoT devices are being used, that would explain the size and scale [and how the attack] would affect: someone the size of Dyn."
I wrote this 2.5 years ago:
"The Hillary Clinton campaign is tied to Dyn.com through its officer, Gray Chynoweth and others. This connection is being used because in 1999, I hosted critical evidence on the free dyndns service. A free service can't be censored in the same way that a paid for service can. I know this from personal experience because I couldn't be censored until now. My ISP was pressured to close my account but couldn't because the NZ courts upheld my Lifetime Premier Internet connection. Instead the ISP was sold many times and is now in the hands of Vodafone. You may think me delusional, when I say that maintaining this 15 year long Clinton battle has cost me everything, but that's just the way it turned out. Being railroaded by Clinton reputation cleaners means they've set up everything to go down a single track to make me appear guilty and take the fall for a crime and not be able to get out of it. Unbeknownst to me a dormant bank account was fed with disability checks and then siphoned. My regular NZ bank account was also drained by someone booking a flight out of Malta for a Libyan to get to Ukraine in early Sept 2011, and then after 20 million seconds, or 33 weeks to be exact on May 1st, 2012, I was sent a phishing email from a Masonic organization in Paris alerting me to the dormant bank account in Canada. Inquiries led me to believe a higher amount actually existed and subsequent attempts to settle this overpayment have been stonewalled and bank transactions no longer exist to explain the siphoned funds. Search for dyndns + clinton and save what you can from the first Google link, because in a month it will be gone."
AND ITS GONE. so instead search in quotes "GOOGLE WHY CLINTON WAS RUSSIAN SPY"
Forcing Ecuador to cut of Assange's Internet access didn't work out like you petty thug wannabees planned, did it?