ich mal wieder das Opfer von gelungenen Hackerattacken war-ich weiss Ihr denkt ich hätte einen Verfolgungswahn ggg-bringe ich Euch mal was zu der neuesten Variante von DDOS-Attacken,geschrieben von Steve Gibson ,einem Experten für Sicherheit,der damit ziemlich Aufsehen erregte:
I surrender.
I surrender right now, completely and unconditionally.
And I'm not kidding.
It is my intention to carefully and completely explain, to the entire world, exactly why there is no defense against the sorts of clever Internet attacks you guys can create.
I want to do that because the world still doesn't get it.
It occurred to me that you might think that I think I'm invulnerable after managing to block the IRC Zombie/Bot attacks , so I wanted to be SURE that you understood that I AM UNDER NO SUCH DELUSION.
I was talking to a reporter on the phone a few hours ago, during the first REAL, non-blockable attack we have ever experienced. And I calmly explained that we were under attack and off the Net. In a bit of a panic, he asked what I was going to do about it. So I told him that I was going to take a long walk on the beach — because you and I both know there's absolutely NOTHING I CAN DO to defend against a real, professional, Internet Denial of Service attack. So I might as well enjoy the day.
I have started working on a next set of pages to explain all this. The pages are not finished, but you can see what I have so far, and where I'm going with it: (Page 1 ) (Page 2 )
So, I respectfully ask that you leave me alone and allow my site to stay on the Net. I know that you can easily knock me off. That's not even a question. But only if I'm here can I explain that to the rest of the planet.
Thank you for your consideration . . . and for your charity.
grc.com/dos/openletter.htm
Independent security expert Steve Gibson has posted his much-awaited analysis of the DDoS attacks launched against his grc.com site and it makes fascinating reading.
Steve was hit with two heavy denial-of-service attacks at the start of the month which made his site inaccessible to everyone. This is the start point in an extensive hunt and investigation for who had attacked him, why, how and was it possible to prevent it happening again.
Reading somewhat like a thriller or Raymond Chandler novel, Steve found that a 13-year-old boy calling himself Wicked and two others had been incensed with reports that Mr Gibson has called them script-kiddies on his site. As it happened, he didn't, but this was enough provocation for the DoS attack.
Despite Wicked's claims, Steve discovered that he had simply made small changes to an IRC bot - aka Zombie - which was present on a large number of innocent people's PCs. The program effectively gives a hacker complete control over someone's PC and works through IRC. Once the program is there, a hacker can update the program as and when they wish. Then, if the person is online, the PC can be used to fire hundreds of packets at chosen IP addresses - a denial-of-service attack.
Steve managed to get hold of a copy of the Zombie, which he used to infiltrate an IRC chat area where a number of hackers were discussing use of the Zombies and were writing different versions for one another. While there he has a fascinating conversation with a senior hacker that calls himself Boss.
On the way, Steve lambastes ISPs for paying little attention to their security and also ignoring his attempts to offer to put it right. He is also saddened by the current state of legal powers regarding such Internet attacks - FBI officers explaining that nothing can be done unless $5,000 worth of damage is caused and even then priority is given to criminals. Plus, since Wicked is only 13, he is exempt from prosecution.
He also gives a dire warning about Windows XP which we will cover very shortly in another story. In short it is a fantastic piece of investigative journalism and we strongly recommend a read. The piece ends with Steve promising to knock out a new piece of software that will ascertain how much effort ISPs are putting into protecting their customers PCs, in the hope of forcing them to pull up their socks.
The full text in on grc.com here . The article has already sparked a big discussion, going on as we speak. ®
Weitere Seiten zur Sicherheit im Internet:
security.alldas.de/ www.alldas.de/?doc=news
Eine deutsche Seite zur Sicherheit im Internet:
www.german-secure.de/Frameseiten/Startseite/Startframe.htm
homepage.swissonline.net/mruef/ hier auch eine Abhandlung zur neuen biodata-firewall sehr gute Artikel,von jemandem,der bei Biodata gearbeitet hat!
www.kryptocrew.de/ darf hier natürlich nicht fehlen,wo ich den Hinweis gefunden hab mfG Kicky
PS:ich bin nicht mehr angetütert von Levkes Party ggg
I surrender.
I surrender right now, completely and unconditionally.
And I'm not kidding.
It is my intention to carefully and completely explain, to the entire world, exactly why there is no defense against the sorts of clever Internet attacks you guys can create.
I want to do that because the world still doesn't get it.
It occurred to me that you might think that I think I'm invulnerable after managing to block the IRC Zombie/Bot attacks , so I wanted to be SURE that you understood that I AM UNDER NO SUCH DELUSION.
I was talking to a reporter on the phone a few hours ago, during the first REAL, non-blockable attack we have ever experienced. And I calmly explained that we were under attack and off the Net. In a bit of a panic, he asked what I was going to do about it. So I told him that I was going to take a long walk on the beach — because you and I both know there's absolutely NOTHING I CAN DO to defend against a real, professional, Internet Denial of Service attack. So I might as well enjoy the day.
I have started working on a next set of pages to explain all this. The pages are not finished, but you can see what I have so far, and where I'm going with it: (Page 1 ) (Page 2 )
So, I respectfully ask that you leave me alone and allow my site to stay on the Net. I know that you can easily knock me off. That's not even a question. But only if I'm here can I explain that to the rest of the planet.
Thank you for your consideration . . . and for your charity.
grc.com/dos/openletter.htm
Independent security expert Steve Gibson has posted his much-awaited analysis of the DDoS attacks launched against his grc.com site and it makes fascinating reading.
Steve was hit with two heavy denial-of-service attacks at the start of the month which made his site inaccessible to everyone. This is the start point in an extensive hunt and investigation for who had attacked him, why, how and was it possible to prevent it happening again.
Reading somewhat like a thriller or Raymond Chandler novel, Steve found that a 13-year-old boy calling himself Wicked and two others had been incensed with reports that Mr Gibson has called them script-kiddies on his site. As it happened, he didn't, but this was enough provocation for the DoS attack.
Despite Wicked's claims, Steve discovered that he had simply made small changes to an IRC bot - aka Zombie - which was present on a large number of innocent people's PCs. The program effectively gives a hacker complete control over someone's PC and works through IRC. Once the program is there, a hacker can update the program as and when they wish. Then, if the person is online, the PC can be used to fire hundreds of packets at chosen IP addresses - a denial-of-service attack.
Steve managed to get hold of a copy of the Zombie, which he used to infiltrate an IRC chat area where a number of hackers were discussing use of the Zombies and were writing different versions for one another. While there he has a fascinating conversation with a senior hacker that calls himself Boss.
On the way, Steve lambastes ISPs for paying little attention to their security and also ignoring his attempts to offer to put it right. He is also saddened by the current state of legal powers regarding such Internet attacks - FBI officers explaining that nothing can be done unless $5,000 worth of damage is caused and even then priority is given to criminals. Plus, since Wicked is only 13, he is exempt from prosecution.
He also gives a dire warning about Windows XP which we will cover very shortly in another story. In short it is a fantastic piece of investigative journalism and we strongly recommend a read. The piece ends with Steve promising to knock out a new piece of software that will ascertain how much effort ISPs are putting into protecting their customers PCs, in the hope of forcing them to pull up their socks.
The full text in on grc.com here . The article has already sparked a big discussion, going on as we speak. ®
Weitere Seiten zur Sicherheit im Internet:
security.alldas.de/ www.alldas.de/?doc=news
Eine deutsche Seite zur Sicherheit im Internet:
www.german-secure.de/Frameseiten/Startseite/Startframe.htm
homepage.swissonline.net/mruef/ hier auch eine Abhandlung zur neuen biodata-firewall sehr gute Artikel,von jemandem,der bei Biodata gearbeitet hat!
www.kryptocrew.de/ darf hier natürlich nicht fehlen,wo ich den Hinweis gefunden hab mfG Kicky
PS:ich bin nicht mehr angetütert von Levkes Party ggg
