| Submit your comments on this article |
| -Short Attention Span Theater- |
| DoS Attack on Hosting Matters |
| 2006-04-28 |
| Lot's of blogs like Captains Quarters, Powerline, etc are down. Wonder if this is a runup to Mondays festivities? Hat tip to LGF. Hupitle Angererong2203 reports: Most if not all Hosting Matters sites are down due to a DoS attack. Even mine :( Attack is originating internationally, from a country that HM feels is not going to be interested in pursuing the culprit. |
| Posted by:Steve |
| #13 Hmmmmm Huffington Post seems not have been affected..... As Jerry Garcia sang "Friend of the Devil is a friend of mine.." |
| Posted by: Frank G 2006-04-28 18:35 |
| #12 I worry about you Angie. hark hark hark |
| Posted by: 6 2006-04-28 17:15 |
| #11 Props to the first person who gets the reference. Horshack is an old and respected name. |
| Posted by: Angie Schultz 2006-04-28 14:41 |
| #10 Kalle. I don't work at Motorola anymore so I have no idea if it is in use or they license it. Being its money to license I am sure they would. You can see details by doing a patent search at uspto.gov |
| Posted by: 3dc 2006-04-28 13:32 |
| #9 It originate in Soddi and was aimed at Aaron's site. At LGF lots of discussion about the sites hosting the Mohammad cartoons being hacked or targeted for DDoS. Hupitle Angererong2203 was me, btw. In my language that means "The cattle are dying". Props to the first person who gets the reference. |
| Posted by: Chuck Simmins 2006-04-28 13:21 |
| #8 Even better approach and well thought 3dc -- is your patented method in use? |
| Posted by: Kalle (kafir forever) 2006-04-28 13:19 |
| #7 I patented a solution to DoS long ago. Patent is owned by Motorola. It works. Patent is written for cellular but notes same effect with similar modification to MAC layer with ethernet. Problem is that Robert Metcalfe invented ethernet with broadcast PSIST values for backoff. Metcalfe and all the ethernet (and other network backoffs) implemented these PSIST values as a table. However, when your access attempt curve clips and becomes flat your controller has no way of knowing how deep it is in doo doo and the PSIST values are pretty much static. This broadcast needs feedback to dig itself out of a hole. Its possible to provide this feedback if, when a device attempts to talk to the ethernet chip it adds a count of failed attempts and a time period. Only a small percentage of devices need to do so to provide valuable statistical data to modify the PSIST values broadcast. Therefore, one does not need to modify the MAC layer. In the MAC layer is an engineering area. A brand of ethernet chip or the chips rom can insert these values into the engineering area. If the brands are the same then they can understand each other and may statistical decisions to dynamicly adjust the PSIST backoff values. View it as turning the network connection into molassas and then thining back to water when traffic conditions are fine. BTW... one of the co-inventors with me was the Russian who invented the Woodpecker radar. |
| Posted by: 3dc 2006-04-28 12:55 |
| #6 Instabackup notes that while originating in KSA, that just means the computers attacking are located there. Could be anybody behind the attack, say anybody with a beard or a turban or a limited view of "tolerance, or maybe just the proverbial swedish grandmother. Who knows? |
| Posted by: Omaique Angarong6414 2006-04-28 12:54 |
| #5 Time to drop Saudi-orininating IP's at the core? That might get noticed by their government. |
| Posted by: mojo 2006-04-28 12:32 |
| #4 Everytime a DoS attack is launched, a full military attack is launched against the offending nation. Clean up their "internet" hubs right quick. |
| Posted by: DarthVader 2006-04-28 12:32 |
| #3 Instapundit is down too. According to commenters at LGF the attacks are originating in Saudi Arabia. Big surprise. |
| Posted by: Jonathan 2006-04-28 12:29 |
| #2 The Blogfather is posting at http://instabackup.blogspot.com/ |
| Posted by: Seafarious 2006-04-28 12:28 |
| #1 Hosting Matters must be incompetent. When a DoS attack takes place the ISP should already have in place agreements and methods of identifying (and dumping) the offending traffic further up the pipeline. Some ISPs do that, others don't. I don't understand why so many bloggers still rely on that particular ISP. |
| Posted by: Kalle (kafir forever) 2006-04-28 12:21 |