full-disclosure - Re: Ubisoft DDoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Tue, 9 Mar 2010 15:27:02 +0100
From: Adrenalin <adrenalinup@...il.com>
To: Jan Schejbal <jan.mailinglisten@...glemail.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Ubisoft DDoS

I'm just wondering, even if it's under DDoS, isn't it as easy to block as to
collect the list of IP that send too much data, and just block them on the
upper level ISP ?

On Tue, Mar 9, 2010 at 2:10 PM, Jan Schejbal <
jan.mailinglisten@...glemail.com> wrote:

> Hi there,
> Ubisoft apparently got a DDoS on their DRM servers [1], causing
> legitimate players of Assassins Creed II etc. being unable to play their
> games. (as the new DRM system requires constant connection to the
> servers) - I assume pirated copies ran fine, of course...
>
> Is there any information who was behind that attack? Some people angry
> about the DRM wanting to make a point, or criminal botherders trying to
> extort money from Ubisoft?
>
> What are the best strategies to defend against such an attack, except of
> course not creating such a stupid thing that has a large sign reading
> "DDoS ME!" built into it and pisses of a lot of people at the same time?
>
> Some people claim that attacks were announced "on IRC, in Usenet and on
> the Steam forums" - can anyone confirm this and/or provide message IDs?
>
> Sincerely
> Jan
>
> [1] http://twitter.com/Ubisoft/status/10184920360
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
>

Content of type "text/html" skipped

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/