Counter DoS

Gregory Taylor greg at xwb.com
Thu Mar 11 08:35:45 UTC 2004


My mom likes the idea, she thinks it'll help her get her hotmail faster. 
(shrugs)

Brian Bruns wrote:

>On Thursday, March 11, 2004 3:05 AM [EST], Brian Bruns <bruns at 2mbit.com>
>wrote:
>
>  
>
>>Sounds like efnet channel wars on a much more interesting scale.
>>
>>Like I've said in previous posts - do we really want these people having
>>tools like this?  Doesn't this make them the equivelant of 'script kiddies'?
>>
>>How the hell could a company put something like this out, and expect not to
>>get themselves sued to the moon and back when it fires a shot at an innocent
>>party?
>>    
>>
>
>I hit send way to fast, heh.
>
>
>Whats going to happen when they find a nice little exploit in these buggers
>(even if they have anti-spoof stuff in them) that allows the kids to take
>control of them or trick them into attacking innocents?  Instead of thousands
>of DDoS drones on DSL and cable modems, you'll see kids with hundreds of these
>'nuclear stike firewalls' on T1s, T3s, and higher, using them like they use
>the current trojans?
>
>No product is 100% secure (especially not something that runs under Windows,
>but thats another issue), so how are they going to deliver updates?  Or make
>sure that the thing is configured right?  I could see blacklists (BGP based)
>cropping up of these systems, so that you can filter these networks from ever
>being able to come near your network.
>
>This is starting to sound more and more like a nuclear arms race - on one side
>we have company a, on the other company b.  Company A fears that B will attack
>it, so they get this super dooper nuclear strike system.  Company B follows
>suit and sets one up as well.  Both then increase their bandwidth, outdoing
>the other until finally, script kiddie comes along, and spoofs a packet from A
>to B, and B attacks A, and A responds with its own attack.  ISPs hosting the
>companies fall flat on their face from the attack, the backbone between the
>two ISPs gets lagged to death, and stuff starts griding to a halt for others
>caught in the crossfire.
>
>So, and who thinks that this is a good idea? :)
>  
>





More information about the NANOG mailing list