full-disclosure - Ubisoft DDoS

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: Tue, 09 Mar 2010 14:10:18 +0100
From: Jan Schejbal <jan.mailinglisten@...glemail.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Ubisoft DDoS

Hi there,
Ubisoft apparently got a DDoS on their DRM servers [1], causing 
legitimate players of Assassins Creed II etc. being unable to play their 
games. (as the new DRM system requires constant connection to the 
servers) - I assume pirated copies ran fine, of course...

Is there any information who was behind that attack? Some people angry 
about the DRM wanting to make a point, or criminal botherders trying to 
extort money from Ubisoft?

What are the best strategies to defend against such an attack, except of 
course not creating such a stupid thing that has a large sign reading 
"DDoS ME!" built into it and pisses of a lot of people at the same time?

Some people claim that attacks were announced "on IRC, in Usenet and on 
the Steam forums" - can anyone confirm this and/or provide message IDs?

Sincerely
Jan

[1] http://twitter.com/Ubisoft/status/10184920360

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/