Saturday, 25 April 2015

Github DDOS Attack...by China

http://tech.slashdot.org/story/15/04/24/2050210/github-ddos-attack-as-seen-by-google

Github DDoS Attack As Seen By Google

Posted by Soulskill  
from the i-can-see-my-house-from-here dept.
New submitter opensec writes:Last month GitHub was hit by a massive DDoS attack originating from China. On this occasion the public discovered that the NSA was not the only one with a QUANTUM-like capability. China has its own "Great Cannon" that can inject malicious JavaScript inside HTTP traffic. That weapon was used in the GitHub attack. People using Baidu services were unwitting participants in the denial of service, their bandwidth used to flood the website. But such a massive subversion of the Internet could not evadeGoogle's watchful eye. Niels Provos, engineer at Google, tells us how it happened. Showing that such attacks cannot be made covertly, Provos hopes that the public shaming will act as a deterrent.
This is how things would probably go in a free market.

Block 'em. Drop their packets. Hell, block everybody associated with them. And let the ostracism start.

But seriously, that JS injection attack is pretty cool.

No comments: