Article

2006-04-28 -Short Attention Span Theater-

Archived material is restricted to Rantburg regulars and members. If you need access email fred.pruitt=at=gmail.com with your nick to be added to the members list. There is no charge to join Rantburg as a member.

Posted by Steve 2006-04-28 11:31|| || Front Page|| [1 views since 2007-05-07] Top

#1 Hosting Matters must be incompetent.

When a DoS attack takes place the ISP should already have in place agreements and methods of identifying (and dumping) the offending traffic further up the pipeline.

Some ISPs do that, others don't. I don't understand why so many bloggers still rely on that particular ISP.

Posted by Kalle (kafir forever) 2006-04-28 12:21|| http://radio.weblogs.com/0103811/categories/currentEvents/]">[http://radio.weblogs.com/0103811/categories/currentEvents/] 2006-04-28 12:21|| Front Page Top

#2 The Blogfather is posting at http://instabackup.blogspot.com/

Posted by Seafarious">Seafarious 2006-04-28 12:28|| 2006-04-28 12:28|| Front Page Top

#3 Instapundit is down too. According to commenters at LGF the attacks are originating in Saudi Arabia. Big surprise.

Posted by Jonathan">Jonathan 2006-04-28 12:29|| 2006-04-28 12:29|| Front Page Top

#4 Everytime a DoS attack is launched, a full military attack is launched against the offending nation. Clean up their "internet" hubs right quick.

Posted by DarthVader 2006-04-28 12:32|| 2006-04-28 12:32|| Front Page Top

#5 Time to drop Saudi-orininating IP's at the core?

That might get noticed by their government.

Posted by mojo">mojo 2006-04-28 12:32|| 2006-04-28 12:32|| Front Page Top

#6 Instabackup notes that while originating in KSA, that just means the computers attacking are located there. Could be anybody behind the attack, say anybody with a beard or a turban or a limited view of "tolerance, or maybe just the proverbial swedish grandmother. Who knows?

Posted by Omaique Angarong6414 2006-04-28 12:54|| 2006-04-28 12:54|| Front Page Top

#7 I patented a solution to DoS long ago.
Patent is owned by Motorola. It works.
Patent is written for cellular but notes same effect with similar modification to MAC layer with ethernet.

Problem is that Robert Metcalfe invented ethernet with broadcast PSIST values for backoff. Metcalfe and all the ethernet (and other network backoffs) implemented these PSIST values as a table. However, when your access attempt curve clips and becomes flat your controller has no way of knowing how deep it is in doo doo and the PSIST values are pretty much static. This broadcast needs feedback to dig itself out of a hole.

Its possible to provide this feedback if, when a device attempts to talk to the ethernet chip it adds a count of failed attempts and a time period. Only a small percentage of devices need to do so to provide valuable statistical data to modify the PSIST values broadcast. Therefore, one does not need to modify the MAC layer. In the MAC layer is an engineering area. A brand of ethernet chip or the chips rom can insert these values into the engineering area. If the brands are the same then they can understand each other and may statistical decisions to dynamicly adjust the PSIST backoff values.

View it as turning the network connection into molassas and then thining back to water when traffic conditions are fine.

BTW... one of the co-inventors with me was the Russian who invented the Woodpecker radar.

Posted by 3dc 2006-04-28 12:55|| 2006-04-28 12:55|| Front Page Top

#8 Even better approach and well thought 3dc -- is your patented method in use?

Posted by Kalle (kafir forever) 2006-04-28 13:19|| http://radio.weblogs.com/0103811/categories/currentEvents/]">[http://radio.weblogs.com/0103811/categories/currentEvents/] 2006-04-28 13:19|| Front Page Top

#9 It originate in Soddi and was aimed at Aaron's site. At LGF lots of discussion about the sites hosting the Mohammad cartoons being hacked or targeted for DDoS.

Hupitle Angererong2203 was me, btw. In my language that means "The cattle are dying". Props to the first person who gets the reference.

Posted by Chuck Simmins">Chuck Simmins 2006-04-28 13:21|| http://blog.simmins.org]">[http://blog.simmins.org] 2006-04-28 13:21|| Front Page Top

#10 Kalle. I don't work at Motorola anymore so I have no idea if it is in use or they license it. Being its money to license I am sure they would.

You can see details by doing a patent search at uspto.gov

Posted by 3dc 2006-04-28 13:32|| 2006-04-28 13:32|| Front Page Top

#11 Props to the first person who gets the reference.

Horshack is an old and respected name.

Posted by Angie Schultz 2006-04-28 14:41|| 2006-04-28 14:41|| Front Page Top

#12 I worry about you Angie. hark hark hark

Posted by 6 2006-04-28 17:15|| 2006-04-28 17:15|| Front Page Top

#13 Hmmmmm Huffington Post seems not have been affected.....

As Jerry Garcia sang "Friend of the Devil is a friend of mine.."

Posted by Frank G">Frank G 2006-04-28 18:35|| 2006-04-28 18:35|| Front Page Top

23:45 Valentine
23:28 tu3031
23:26 SteveS
23:23 Frank G
23:17 Halliburton Earthmovers, Inc
23:16 SteveS
23:12 SteveS
23:12 DanNY
23:05 twobyfour
22:33 JosephMendiola
22:26 JosephMendiola
22:19 JAB
22:16 JosephMendiola
22:15 Ulomons Snugum3975
22:08 JosephMendiola
22:03 tu3031
22:03 Zenster
22:02 JosephMendiola
22:01 3dc
21:59 Dave D.
21:58 tu3031
21:58 xbalanke
21:58 Zenster
21:57 Danking70