NY times appears to have had a rough morning..

Hank Nussbacher hank at max.ibm.net.il
Mon Sep 14 06:08:44 UTC 1998


On Sun, 13 Sep 1998, Derek Balling wrote:

For HFG always check document source for previous hacked sites and their
"hidden" agenda.  Also it gives a clue that they are not 15 year old high
school kids as their CAPs and number/character alterations attempt to
deceive.  -Hank

> What I think you missed is that shortly after I received this post (and
> looked at the NYTimes web site) they corrected the problem which caused the
> original post.
> 
> www.nytimes.com got hacked. If you missed it, and feel the urge to check it
> out, I made a mirror of it at http://www.megacity.org/hacked_nytimes/ ... I
> don't plan to keep it more than a few days I suspect (I'm not one of those
> hacked-website collectors like some places *grin*), but I kept it for
> posterity of those who might want to check it out.
> 
> D
> 
> At 10:50 AM 9/13/98 -0500, Phil Howard wrote:
> >Richard Irving wrote:
> >
> >> Hrmm.. This sunday am I logged into www.nytimes.com,
> >> and got an unusual front page. Someone may want to take 
> >> a look......
> >
> >Looks like the classicalunderconfigured/overloaded server to me.  They were
> >probably running with not much spare capacity before, or didn't configure the
> >correct number of listening processes (or enough RAM to handle them).
> >
> >Possibly a SYN attack.  But on this date, more likely a demand "attack".
> >
> >This is not unusual when you consider the total capacity is ultimately
> >determined by the suits.
> >
> >FYI, I had no trouble pulling it from icreport.loc.gov.  I got it in the
> >evening, which would have been the 2nd demand curve for the day.  So server
> >capacity there was enough to deliver it in that probably broader hump.  But
> >maybe the masses, who normally go checking news sites and wouldn't recognize
> >a .gov site as even being an Internet thing, were clobbering places like
> >www.nytimes.com.  Even www.cnn.com seemed kinda slow to me.
> >
> >-- 
> >Phil Howard | stop7it2 at anyplace.edu die7spam at spammer0.com
> stop0ads at spammer5.org
> >  phil      | a2b8c2d0 at s1p8a2m2.edu stop9it3 at anyplace.com
> stop8303 at spam4mer.org
> >      at    | no45ads1 at lame3ads.org eat2this at dumbads5.net
> stop6629 at anywhere.net
> >  ipal      | end1ads8 at s2p4a6m3.edu ads8suck at anyplace.com
> stop0549 at no9place.com
> >     dot    | blow3me9 at anyplace.com no29ads0 at anywhere.net
> stop1694 at no71ads2.net
> >  net       |stop4688 at s5p9a1m1.net end0it82 at no2where.com
> end1it08 at no0place.edu
> 

Hank Nussbacher





More information about the NANOG mailing list