I thought most DDoS attacks were just doing SYN floods... I guess I'm not up-to-date on this. I agree, unless the routers have been compromised, a completed TCP handshake makes you fairly certain the connection is to the node it claims to be... which is most likely a zombie anyway. In which case the best reaction would be to contact the ISP and get them to block that IP address until the box is fixed, not to retaliate. Of course, if ISP's were perfectly responsive, there would be no problem with DDoS in the first place, would there? Perhaps we should focus on getting ISPs to quickly correct the problem once it is identified to them, rather than dreaming up ways to retaliate.
1) Identify 2 sites that implement "countermeasures,"
2) Start a small DoS attach against each one while spoofing the source address of the other.
3) Sit back and laugh your ass off as they both escalate and take each other out!
There is an obvious flaw in any internet countermeasures: All an attacker has to do bombard a site that implements countermeasures while spoofing the source address of another site they really want attacked... and the countermeasures site will do their dirty work for them! In an environment where you can never be certain where the attack is actually coming from, striking back would appear to be a fool's errand.
No, blogs are doomed, for very simple reasons. Not only is there a complete lack of accountability, but the barriers to bribing a blogger to write exactly what you want them to write are incredibly low, much lower than for say, an expensive news organization. (Microsoft is already paying bloggers to diseminate pro-longhorn information. )Granted, a few bloggers will develop a reputation for integrity and survive, but how can anybody trust a new blog with no way of knowing who is really behind it?
Care to elaborate on what "doing it right" entails? Obviously some sort of challenge/response system, but I haven't done much work with authentication. Which authentication protocols use this? Is there a challenge/response mechanism built into HTTP/HTML?
Nice, but what is the maximum distance I can get between the cold head and the warm head? And can I switch the cold head and warm head without physically turning the unit around, so I can use it for both cooling and heating? Plus, it looks like I'd still need a separate pump and fluid (water) line to use it as a ground source heat pump.
Well, no, it's more of a heat exchanger, isn't it? Only if you include the machine making the cold water could it be considered a heat pump. This guy hasn't made an "air conditioner", he's made half of an air conditioner -- the easy half, at that. When I see the compressor and the coils discharging the excess heat outside, then I might actually call it a heat pump.
Uh, those methods do nothing for you if the software is designed to simply record HTTP POST and SMTP operations, in which case it doesn't really matter how the data was entered into the machine. Yes, one-time-use keys would work, except that none of the mail readers support them, do they? Hmm... bringing your own copy of ssh might work... do public access terminals let you run your own software? Seems to me that I would disable floppy, CD, and USB file system.
Under windows, shouldn't you be able to use the character map application to "type" in your password using the mouse, thus circumventing any hardware keyloggers? Of course, if I was going to capture passwords, I'd modify the browser itself to record all POST data, so it doesn't matter how you input your password.
Gee, you must not have a job or something, if you can be available to look over your child's shoulder every second they are on the internet. As a matter of consumer choice, ISPs should make filtering available as a low-cost or no-cost option. And no, running filtering software on your own PC is not a viable option -- if you as a parent can circumvent the filters, then so can your child! While I feel that every consumer should have the option of a filtered "save" internet connection, I am extremely uncomfortable with the government defining exactly what that option should be. Also, if I decide not to filter out blasphemous web sites, will the ISP report that fact to my church elders? Given that the feds can now access pretty much anything they please without a warrant, how do I know that knowledge of my preference for lesbian albino dwarf porn won't fall into the hands of my political opponents?
PARENTAL CONTROL for when their kid uses their computer. The parent should be running some form of a net nanny software and/or only allow the kid to use the computer under strict parental supervision. Right... so shouldn't the parents have the option of purchasing such voluntary censorship from any ISP they choose to use? I don't see a problem with requiring a censored connection option. I do see problems with censoring everybody's connection, and I don't think the government should be deciding what is and isn't obscene or deciding what filters are or are not effective. Given all ISPs making some form of optional filtering available, shouldn't the marketplace be able to determine which filters work best for the people that choose to filter their own or their children's access?
Disney need to do a serious focus group research with today's kids. They apparently already have, and discovered that kids like fart jokes... that's why they put them in all their new movies. But then, so do Pixar and Dreamworks... sigh.
And the lesson is quite simple: online delivery only works in areas with a high density of people with huge disposable incomes. Covering rural or poor areas is a sure way to run at a loss. Cherry-pick the high profit areas first, and forget about service to the rest of the country!
Right you are! There is no delivery fee! There is just a substantial discount for picking the pizza up yourself! And the television networks never turn the audio volume up for the commercials! They do, however, turn the volume down for the regular programming!
Ok, here's another one: why are people really happy when they receive big income tax refunds, knowing full well that they've lost a year's worth of potential interest on their money that they could have had if they had filled out their W-4 differently? Look, the government isn't giving you money -- they are giving you your own money back after drawing interest on it! Ok, I'll stop ranting now...
Never seen any discrimination based on body modification. However, I was subject to extreme derision from fellow Unix nerds for occaisionally wearing a suit to work, and was actually turned down for a job at the old SCO because I showed up for the interview in a three piece suit. Amazing how all these people that insist they have a right to show up for work in jeans and t-shirt and shouldn't be judged by their appearance can't accept the fact that others might want to dress differently from them. And if you really want to be given shit from your coworkers, try showing up for work in full Scottish formal attire, i.e. a kilt!
Obviously, the most important technology included in any Windows release -- new and improved Microsoft Marketing! Can you guess which band they'll hire to do the themesong for Longhorn? I'll bet they already have a contract with MTV for the kickoff!
An exception to the above has occurred to me. Encryption with a one-time pad is secure for as long as the pad is secure, so it can be both fast and unbreakable. A secure scheme for pad distribution is left as an excercise for the user, and this applies only to encryption, not message digests (hashes). It should be possible to eventually brute force a collision to any message digest.
Slashdot Mirror
The plane will carry 300 Japanese passengers or 150 American passengers.
I thought most DDoS attacks were just doing SYN floods... I guess I'm not up-to-date on this. I agree, unless the routers have been compromised, a completed TCP handshake makes you fairly certain the connection is to the node it claims to be... which is most likely a zombie anyway. In which case the best reaction would be to contact the ISP and get them to block that IP address until the box is fixed, not to retaliate. Of course, if ISP's were perfectly responsive, there would be no problem with DDoS in the first place, would there? Perhaps we should focus on getting ISPs to quickly correct the problem once it is identified to them, rather than dreaming up ways to retaliate.
Because he won't quit. He'll simply open a new account with a new ISP and start all over again.
1) Identify 2 sites that implement "countermeasures,"
2) Start a small DoS attach against each one while spoofing the source address of the other.
3) Sit back and laugh your ass off as they both escalate and take each other out!
There is an obvious flaw in any internet countermeasures: All an attacker has to do bombard a site that implements countermeasures while spoofing the source address of another site they really want attacked... and the countermeasures site will do their dirty work for them! In an environment where you can never be certain where the attack is actually coming from, striking back would appear to be a fool's errand.
No, blogs are doomed, for very simple reasons. Not only is there a complete lack of accountability, but the barriers to bribing a blogger to write exactly what you want them to write are incredibly low, much lower than for say, an expensive news organization. (Microsoft is already paying bloggers to diseminate pro-longhorn information. )Granted, a few bloggers will develop a reputation for integrity and survive, but how can anybody trust a new blog with no way of knowing who is really behind it?
Care to elaborate on what "doing it right" entails? Obviously some sort of challenge/response system, but I haven't done much work with authentication. Which authentication protocols use this? Is there a challenge/response mechanism built into HTTP/HTML?
Nice, but what is the maximum distance I can get between the cold head and the warm head? And can I switch the cold head and warm head without physically turning the unit around, so I can use it for both cooling and heating? Plus, it looks like I'd still need a separate pump and fluid (water) line to use it as a ground source heat pump.
Well, no, it's more of a heat exchanger, isn't it? Only if you include the machine making the cold water could it be considered a heat pump. This guy hasn't made an "air conditioner", he's made half of an air conditioner -- the easy half, at that. When I see the compressor and the coils discharging the excess heat outside, then I might actually call it a heat pump.
Uh, if it pulls in the keys from a file (on the same file system as the executable) then it is less susceptable to key logging, no?
Uh, those methods do nothing for you if the software is designed to simply record HTTP POST and SMTP operations, in which case it doesn't really matter how the data was entered into the machine. Yes, one-time-use keys would work, except that none of the mail readers support them, do they? Hmm... bringing your own copy of ssh might work... do public access terminals let you run your own software? Seems to me that I would disable floppy, CD, and USB file system.
Under windows, shouldn't you be able to use the character map application to "type" in your password using the mouse, thus circumventing any hardware keyloggers? Of course, if I was going to capture passwords, I'd modify the browser itself to record all POST data, so it doesn't matter how you input your password.
Gee, you must not have a job or something, if you can be available to look over your child's shoulder every second they are on the internet. As a matter of consumer choice, ISPs should make filtering available as a low-cost or no-cost option. And no, running filtering software on your own PC is not a viable option -- if you as a parent can circumvent the filters, then so can your child! While I feel that every consumer should have the option of a filtered "save" internet connection, I am extremely uncomfortable with the government defining exactly what that option should be. Also, if I decide not to filter out blasphemous web sites, will the ISP report that fact to my church elders? Given that the feds can now access pretty much anything they please without a warrant, how do I know that knowledge of my preference for lesbian albino dwarf porn won't fall into the hands of my political opponents?
PARENTAL CONTROL for when their kid uses their computer. The parent should be running some form of a net nanny software and/or only allow the kid to use the computer under strict parental supervision. Right... so shouldn't the parents have the option of purchasing such voluntary censorship from any ISP they choose to use? I don't see a problem with requiring a censored connection option. I do see problems with censoring everybody's connection, and I don't think the government should be deciding what is and isn't obscene or deciding what filters are or are not effective. Given all ISPs making some form of optional filtering available, shouldn't the marketplace be able to determine which filters work best for the people that choose to filter their own or their children's access?
Disney need to do a serious focus group research with today's kids. They apparently already have, and discovered that kids like fart jokes... that's why they put them in all their new movies. But then, so do Pixar and Dreamworks... sigh.
I tried to start an anarchists group, but we couldn't decide on where and when to hold the meetings...
Sorry, but having a hot chick only appeals to about half of the popultion... what OS should the people that aren't into hot chicks use? Mac OS X? ;-)
And the lesson is quite simple: online delivery only works in areas with a high density of people with huge disposable incomes. Covering rural or poor areas is a sure way to run at a loss. Cherry-pick the high profit areas first, and forget about service to the rest of the country!
Ok, here's another one: why are people really happy when they receive big income tax refunds, knowing full well that they've lost a year's worth of potential interest on their money that they could have had if they had filled out their W-4 differently? Look, the government isn't giving you money -- they are giving you your own money back after drawing interest on it! Ok, I'll stop ranting now...
Never seen any discrimination based on body modification. However, I was subject to extreme derision from fellow Unix nerds for occaisionally wearing a suit to work, and was actually turned down for a job at the old SCO because I showed up for the interview in a three piece suit. Amazing how all these people that insist they have a right to show up for work in jeans and t-shirt and shouldn't be judged by their appearance can't accept the fact that others might want to dress differently from them. And if you really want to be given shit from your coworkers, try showing up for work in full Scottish formal attire, i.e. a kilt!
But, couldn't a launch accident involving hydrogen perozide render everyone within a 3-mile radius blond?
You realize, of course, that Domino's charges almost twice as much for a delivered pizza than one you pick up yourself at Domino's...
A brand new solitaire game? Higher resolution wallpaper? The startup sound is changed to a recording of Bill Gates saying "Ha-ha!"?
Obviously, the most important technology included in any Windows release -- new and improved Microsoft Marketing! Can you guess which band they'll hire to do the themesong for Longhorn? I'll bet they already have a contract with MTV for the kickoff!
An exception to the above has occurred to me. Encryption with a one-time pad is secure for as long as the pad is secure, so it can be both fast and unbreakable. A secure scheme for pad distribution is left as an excercise for the user, and this applies only to encryption, not message digests (hashes). It should be possible to eventually brute force a collision to any message digest.