DDoS - 3rd Party articles

[Drogen_Shomuro]

Like many others, I began to wonder about all the downtime and what's causing it. Square-Enix has announced several times that the reason is because of anonymous DDoS attacks. But why hasn't this issue been resolved for so many months? I did a simple google search and came up with these articles: *warning, some pretty long reads*

http://www.devhardware.com/c/a/Opini...line-Terrorism
This article explains what DDoS is and why Square-Enix might be a target of Internet terrorism.

http://grc.com/dos/grcdos.htm
The story of a crippling DDoS attack on grc.com, what they had to do to combat it, and a dive into the world of DDoS zombies
Interestingly enough, this attack was created by 3 people, led by a 13 year-old kid... I'd hate to imagine what a team of skilled hackers could do...
Moral of the story: make sure you have some anti-spyware measures, lest you become a DDoS zombie...

http://grc.com/dos/
If you liked the above article, there's more like it here. Of course, the DDoS attacks on Square-Enix probably aren't as simple as these...

Happy reading

[TheGrandMom]

Re: DDoS - 3rd Party articles

EXCELLENT read! Thank you!

This is something everyone with a Windows PC should do:

"Consequently, an active connection to an IRC server can be detected with the following command:


netstat -an | find ":6667"

Open an MS-DOS Prompt window and type the command line above, then press the "Enter" key. If a line resembling the one shown below is NOT displayed, your computer does not have an open connection to an IRC server running on the standard IRC port. If, however, you see something like this:


TCP 192.168.1.101:1026 70.13.215.89:6667 ESTABLISHED

. . . then the only question remaining is how quickly you can disconnect your PC from the Internet!

A second and equally useful test can also be performed. Since IRC servers generally require the presence of an "Ident" server on the client machine, IRC clients almost always include a local "Ident server" to keep the remote IRC server happy. Every one of the Zombie/Bots I have examined does this. Therefore, the detection of an Ident server running in your machine would be another good cause for alarm. To quickly check for an Ident server, type the following command at an MS-DOS Prompt:


netstat -an | find ":113 "

As before, a blank line indicates that there is no Ident server running on the default Ident port of "113". (Note the "space" after the 113 and before the closing double-quote.) If, however, you see something like this:


TCP 0.0.0.0:113 0.0.0.0:0 LISTENING

. . . then it's probably time to pull the plug on your cable-modem!
"

To open a DOS prompt go to Start >>> Run >>> type in cmd and hit Ok

[Susurrus]

Re: DDoS - 3rd Party articles

ok so if NOTHING appears that is normal right?

[TheGrandMom]

Re: DDoS - 3rd Party articles

Yes if no string of numbers/letters appear then you are fine. The only thing that should come up should be the command prompt. Mine is:

C:\Documents and Settings\Mom>

so it should look something like that.

Also remember since the DOS prompt is emulated, you can copy the command from your browser and paste it into the window. This way you will not make any spacing/spelling mistakes.

[Blood Red Poet]

Re: DDoS - 3rd Party articles

Another reason why the world should be ran on Mac's. At least, if I read that correctly.

[TheGrandMom]

Re: DDoS - 3rd Party articles

http://service1.symantec.com/SUPPORT...rc=bar_sch_nam

How to Remove the SubSeven Trojan from your Macintosh

Sub7 is a trojan program that turns your pc into a slave. Even the beloved Mac is not immune.

[DakAttack]

Re: DDoS - 3rd Party articles

This is an extremely old article. Window's SP2 as well as other security updates have been released since then. I have no clue what they do, but I'm just stating what doesn't seem to be obvious at this point. >_>

[Deviantkat]

Re: DDoS - 3rd Party articles

I dont know if you could really say that the attacks on SE are any more advanced or organized than those stated above. DDoS attacks are the 'script kiddie's (a term for a noob hacker) way of making a big splash. Bad news for him is that its easy to get caught, unless you're actually good at hacking.

Any half decent hacker knows better than this. DDoS attacks are for immature people who think being destructive is funny, and they get nailed for it. They can send the DDoS through proxies or something of the like, but sorry kids, the FBI can trace the ip route pretty darn well =).

Window's SP2 as well as other security updates have been released since then.

Actually, you'd be surprised how many holes Windows still has. It'll take them years to patch them all. Too many years of lazy programming and too much reused code. It'll be ages before a secure version of windows it released unless they rewrite it from scratch. (In which case it'll be years until they release that XD)

Don't worry. Point is, SE will have it sorted out. It'll just take some time until the legal officials can trace the signal and do something about it. Chances are making attacks on an institution as large as SE will warrant some pretty significant ass-kickage when they get around to it for screwing up their business.

[Skaw]

Re: DDoS - 3rd Party articles

Another reason why the world should be ran on Mac's. At least, if I read that correctly.

Horribly flawed logic. The only reason Macs aren't severe targets of malicious intent is because of the lack of users. There've been attacks on Mac users in the past, so don't think you're machine is any more invincible than a Windows machine. Same goes for Linux users.

[ibroyles]

Re: DDoS - 3rd Party articles

Horribly flawed logic. The only reason Macs aren't severe targets of malicious intent is because of the lack of users. There've been attacks on Mac users in the past, so don't think you're machine is any more invincible than a Windows machine. Same goes for Linux users.

That's true to an extent. Most of the problem lies in the lack of tools and safegaurds for a Windows system for dealing with these problems however. And also a lack of willingness on the average user's part to even care. At least on Linux machines security is actively inforced, and many tools are built into the linux kernel itself. Trust me when I say that the default Linux system is far more secure than anything you'll get with Windows XP, Windows 2000, Windows NT, etc. Even if malicious users target a GNU/Linux or Unix system, most of your average "kiddie scripts" will not provoke much of a response from it lol.

[Deviantkat]

Re: DDoS - 3rd Party articles

I'd agree Ibroyles. The state of modern computing is that Windows is made to be user friendly and flashy, built for the majority of users who don't know the first thing about how to keep their system decently secure. On top of that, its based on years of shoddy programming and reused code that's continually packed with useless features. Macs on the other hand have a relatively new OS, considering their hardware is by far more advanced than PCs. Linux, also, has been partially designed by the very hackers who would be attempting to invade systems as a defense for themselves (go open source!). Anyone who can use Linux in a productive fashion, i may add, is also quite knowledgeable in how to protect themselves from basic hacking attempts. Mac users are not all computer wizards, but yes, the lack of user base is a major reason they dont get targetted. Not too many people run Mac OS based servers. They're all Windows NT Server or Unix now.

[TheGrandMom]

Re: DDoS - 3rd Party articles

The state of modern computing is that Windows is made to be user friendly and flashy, built for the majority of users who don't know the first thing about how to keep their system decently secure.

They started down the right path by making things easier but along the way they got too greedy. They talk about all the virus/security issues that are out there yet they don't do a thorough job when it comes to overhauling their OS. Frustrating doesn't even cover it for the knowledgable end user. God forbid they should make light users think instead of just pushing a f'in button. Learning.....BAH who needs that!

[Macht]

Re: DDoS - 3rd Party articles

They started down the right path by making things easier but along the way they got too greedy. They talk about all the virus/security issues that are out there yet they don't do a thorough job when it comes to overhauling their OS. Frustrating doesn't even cover it for the knowledgable end user. God forbid they should make light users think instead of just pushing a f'in button. Learning.....BAH who needs that!

Started on the right path but after Windows 3.x they went to hell. Windows 95 was incredibly buggy and horrible, their Microsoft Office then and to this date (Excluding the Mac remake of it) has many of the bugs that it has always had.

Truely the only reason a system is usually safe is mostly because the lack of people who use it and also in turn less people with the knowledge to attack it. Example of this is looking at game consoles and mods, the PSP is a prime example in that the changes made to the OS after 1.5 has made changes that the people doing the mod can't figure out how to get past the changes. This due simply to that they are starting with 0 knowledge of the changes that occured and have to stumble around to figure it out like a person in the middle of the night or a blind man in an unfamiliar area.

Lot of this has been stated here before when the DDoS attacks first were announced to be attacking FFXI. As well as why it's difficult to stop them, for DDoS attacks.

[Omniblast]

Re: DDoS - 3rd Party articles

The motivation for DDoS is often financial, but there have been a share of political attacks as well. Early speculations and rumors on the internet were that Chinese hackers were responsible for the attacks on Final Fantasy XI, but naturally there is no verification of this.

lol I told this to my linkshell the first time around when the attacks came. (When the Japanese were promoting their history books that neglected to mention what happened in WWII in Nanking, China.) Some evidence as to such happening now, it wouldn't be too hard to believe. I mean how many people are in China, vs. Japan? I know everyone would say, "but their poor farmers in China! how can they afford computers?" Computers are so cheap now a days that they can be easily afforded, take for example that one day a school was selling their old iMac's for $100, a mad rush of people trampled over others to try and obtain one. (Ah American behavior at it's best!!)

I'm Chinese, I live in America, it's unfortunate these things happen. I have cried when I looked at the pictures of what happened in Nanking. I have cried at the stupidity of Americans in Lousiana, shooting guns at medical helicopters, raping and killing one another for $1,000 in debit cards.

I think it's time we had a alien invasion... or something global that will band humans together... something to make us survive instead of fighting against on another.

[Macht]

Re: DDoS - 3rd Party articles

You want to enact "Independance Day" I see. However if something global like that then I would think the severe Hurricans, Tsunami, or Earthquakes would be enough. Doesn't seem to be still though