Forgot your password?

typodupeerror

Comment: ZOMG THE SKY [isn't] FALLING! (Score 1) 320

by blhack (#34677524) Attached to: After IPv4, How Will the Internet Function?

Guys, look at This list of Class A.

Prudential insurance? A class A? Almost 17 million addresses?

Ford motor company? General electric?

DoD has 11 class A chunks? That's almost 200 million addresses. You could give almost everybody in the united states a mobile phone with that.

These are just the most obvious ones. Does Apple really need 17 million addresses? Does HP? Xerox PARC?

This FUD has been getting spread around since the late 1990s. I think we're fine, and I think we're going to be fine for quite a while into the future.

Comment: Re:Idiots! (Score 1) 715

by blhack (#34494844) Attached to: MasterCard Hit By WikiLeaks Payback Attacks

On top of that... Do you understand how the money traffic servers work? They're not like publicly accessible HTTP Web servers, you can't DDoS them.

Yes, you absolutely can DDOS them, you just probably couldn't do it with an existing, canned tool like LOIC. (I'm assuming LOIC just does HTTP?). Have you ever noticed that, when the internet bails out at your friendly neighborhood coffee shop, they're usually unable to process credit card transactions? This is because all of those desktop card terminals talk to VISA/Mastercard/AMEX/etc's payment processing servers over the public internet. The transaction is protected with strong encryption the same as VPN or HTTPS is, but this doesn't mean it can't be attacked.

Keep in mind that there is almost no "hacking" going on here, they're just flooding it. This is why this type of DOS attack is almost impossible to stop. The same technique could be applied to any service.

In order to even reasonably take this down you not only need to know the IP of where these are entering (It COULD be the same as the web server, but I doubt it)

This shouldn't be even remotely difficult to do for anybody who has more than a very, very basic understanding of computer networking.

Then, suppose you've figured out your point to attack, you need to figure out the vector. Using the LOIC as is won't cut it, they probably have the most minimal of firewalls that knows to just drop anything that looks like an HTTP request - so in order to really DDoS it you'll need to figure out which port your using (Which shouldn't be too difficult if you've managed to reach this part) - but then you might also need to form your requests in such a way that they don't appear malformed either, lest they be trended and dropped.

Again, no. You're not worried about specifically attacking the protocol, you're looking to just overwhelm the machine with traffic.

Comment: Good. (Score 4, Insightful) 379

by blhack (#33803670) Attached to: Canadian Spammer Fined Over $1 Billion

This is something that I've tried and tried and tried to explain to some of my friends that work in marketing. When you are sending spam, you are literally using somebody *else's* property in a way that they don't want you to use it in order to give them messages.

This should be looked at no differently than causing unused speakers in my house to play radio advertisements when I want them turned off.

You send spam, and it's taking up a limited resource (disk, bandwidth, power, man hours, etc.) to your end and against the will of the recipient. I really hope that there are more cases like this.

Comment: Re:SEE! (Score 4, Interesting) 271

by blhack (#33614316) Attached to: Boeing Gets $89M To Build Drone That Can Fly For 5 Years Straight

It's already *here*.

That is absolutely fantastic news. Could you point me at a place where I could buy one?

The reality is that the derivative technologies are not always things like "we need to invent a solar panel", they're not even "we need to invent light composites", they're "we need to figure out a way of quickly producing these exotic materials on a large enough skill to fill the demand that the military is going to have for these.".

You can't carve your way to success without cutting remarks.

Working...