SCO DOS Harming Innocent Bystanders 422
An anonymous reader writes "The SCO-IBM-Linux controversy has certainly caused quite a stir. Unfortunately the vigilantes conducting the DOS attacks against SCO are harming innocent by-standers as described in this e-Week story. " Choice conspiracy theory quote: 'Given SCO's behavior recently, it's just as likely that they're attacking themselves in their continued attempt to pump up their stock price'
Smoking crack poll (Score:3, Funny)
Re:Smoking crack poll (Score:3, Funny)
.
you mean you didn't get your cheque?
Re:Smoking crack poll (Score:2)
No, I'm a free-lance hippie.
Re:Smoking crack poll (Score:5, Funny)
1> They will blame it on IBM
2> They will say that since they are known for vaporware, that any derivitive "vapors" belong to them. Then they will start to sue drug dealers and junkies charging them a license fee to to continue smoking their crack.
Re:Smoking crack poll (Score:3, Funny)
I wouldn't put it past them to go after the drug cartels.... in most cases their enforcers are preferable to IBM's lawyers.
Re:I Disagree (Score:4, Informative)
Re:I Disagree (Score:5, Funny)
Could you please translate this for those of us that smoke crack?
Re:I Disagree (Score:4, Funny)
Encountering Police while zooted on cocaine is: Scary
Obvious responce: run like hell
Encountering Police while looped on stamps is: Scary
Obvious responce: wet pants laughing
Re:I Disagree (Score:5, Interesting)
That probably confused you just as much, but I hope that makes the gibberish make sense.
Re:I Disagree (Score:4, Funny)
Re:I Disagree (Score:2)
i'll admit that you lost me after the second sentance - but i assume what follows them is supporting bable in erudite form.
truth of the matter is that your first sentance (and thus the second) are difficult to prove, they can only be generalized,.. approximated (because of the difficulty of assembling an uncontaminated set of test "subjects").
the first sentance is a real hoot tho - i gotta give you that.
" LSD more often sparks insight or provides a
Re:I Disagree (Score:2)
Even if you have a bible, that is such a waste. It's much better to just wait a day (I used to wait two) and visit reality. The contrast can be startling. If you positively can not and will not wait a day, shrooms or great hydro can fill the gap nicely. It's not like it's a living hell.
serotonergic vs. dopaminergic fuckedupedness (Score:3, Interesting)
"The serotonergic system and mysticism: could LSD and the nondrug-induced mystical experience share common neural mechanisms?" J Psychoactive Drugs. 2002 Jul-Sep;34(3):263-72.
A bit wacky, but a good read if you're into behavioral neurobiology...
Re:I Disagree (Score:3, Funny)
See original BSD code.
Like there were people in Berkley in the 60's - 70's and not doing LSD?
DOS too? (Score:5, Funny)
Re:DOS too? (Score:3, Informative)
Re:DOS too? (Score:2, Informative)
Re:DOS too? (Score:3, Interesting)
Re:DOS too? (Score:5, Funny)
Re:DOS too? (Score:3, Funny)
Re:DOS too? (Score:2)
Typical zealot reaction (Score:5, Insightful)
This is why armchair slashdot readers typically shouldn't be lawyers [myself included], doctors, etc...
I hope they catch the people doing the DoS attack [probably as they brag how cool the attack is over some l33t IRC channelz] and beat their heads into the ground.
SCO maybe "evil" but you gotta think before you act!
Tom
Re:Typical zealot reaction (Score:2)
I'm sitting in one of those fold up camp chairs which fit in a long tubular bag, and which my company gave me before laying me off...
Does that count as an armchair? Cuz I *so* like giving completely incompetent legal advice to fellow /. readers... oh, and IANAL...
Re:Typical zealot reaction (Score:3, Insightful)
I hope they catch the people doing the DoS attack [probably as they brag how cool the attack is over some l33t IRC channelz] and beat their heads into the ground.
Sure, script kiddies deserve whatever knocks they get, but has anyone really shown these are DDoS attacks? What if they are just good, old-fashioned slashdottings? Slashdot often carries two SCO stories a day, and even if the main article doesn't have a link to SCO, one of the links or comments will. I know, I click on them (several times) ju
Re:Typical zealot reaction (Score:2)
Boy, that'll tell 'em!
SCO might be threatening to sue you, but it seems to me they've already got you wasting your time.
Re:Typical zealot reaction (Score:3, Insightful)
SCO might be threatening to sue you, but it seems to me they've already got you wasting your time.
And we're both reading SCO stories on Slashdot and posting comments about same, and you're talking about someone wasting time? :)
Re:Typical zealot reaction (Score:3, Funny)
Guess he didn't tell you he had his reload key remapped to a script:
;)
#!/bin/bash
while true
do
wget --no-http-keep-alive --delete-after -m -p http://www.sco.com
done
and it was on a dual cpu box parked on an OC-3, so maybe his time wasn't completely wasted
Don't do this at
Yeah well (Score:5, Funny)
Yeah, well tough shit. If they don't like it, they can complain to their ISP to get those SCO criminals booted off their network.
</sarcasm>
Sorry, I was just trying to imitate the SPEWS guys ;-)
Re:Yeah well (Score:5, Informative)
Problem is, you can't really "step aside" from the architectural issues given the point he is making. The DDoS attacks on SCO have been exclusively aimed, as far as I can tell from the reports, at their *web* sites -- which appear to be located in a Denver co-location.
If the attacks had been aimed at SCO's mail server, or local ISP connection, then then Hafen might have a point. But unless he's using the Denver co-lo for his office connection and e-mail, then I think he just has a problem with his ISP that is unrelated to the DDoS attacks on SCO.
Besides which, I'm still not convinced SCO experienced any kind of DoS last weekend. I think they just came down for maintenance, and have since used misleading - but not outright mendacious - statements to "confirm" that they were attacked:
a) "SCO considered issuing a formal statement in the matter,
said Stowell, but decided against it."
Because a formal statement would have been a denial of the
attack?
b) Stowell has also told the press that the "latest" attack
has been reported to "law enforcement authorities".
If the "latest" attack was in May, then Stowell's statement
would remain as true as if the attack was in August. Note also
the vague phrase "law enforcement authorities" rather than
specifying which agency was contacted, as if Stowell didn't
want anyone following up on the matter. In the May attack,
Stowell was very specific as to which agency the attack had
been reported to - the FBI Cyber Crimes division.
c) When called, people working for SCO either don't know why the
web site is down, or say it was down for an upgrade or
maintenance. I know, because I was one of the people who
called, and I documented the conversation at Groklaw
(http://radio.weblogs.com/0120124/, about 2/3 down the page).
d) The recent outages generally start during non-business hours.
SCO possibly had a short DoS attack on Friday afternoon, but
there is no way it kept them down for 3 days; the utter
vagueness of their public announcements regarding it do not
lend confidence to the idea that they experienced any DoS
attack at all; their own employees have consistently told
callers that the site is/was down for maintenance; sites on
the same Center 7 network (canopy.com) were responding
without problems during the SCO outages; and even SCO's
public statements have confirmed that outages since the
weekend outage were for maintenance:
The outage prompted Netcraft to declare that
SCO was again the target of a DoS attack. However,
the outage was actually due to preventative
measures taken by SCO and its hosting service to
mitigate the effects of future attacks, according
to company spokesman Marc Modersitzki.
(http://www.eweek.com/article2/0,3959,1233231,00.a sp)
So, in short, I think that a) SCO didn't experience any DoS attacks, and b) that Centershift / Hafen has problems with their ISP and should get a new one rather than making statements to the press that their Internet problems are due to inadequately verified DoS attacks on SCO's webserver in Denver, hundreds of miles away from Centershift's Salt Lake City offices.
Re:Yeah well (Score:3, Insightful)
Well, if it was a DOS how could I access machines behind the same routers the website is on?
Such as these routers
c7pub-216-250-136-74.center7.com (216.250.136.74)
c7pub-216-250-136-98.center7.com (216.250.136.98)
c7pub-216-250-136-254.center7.co m (216.250.136.254)
And these machines behind the r
Their ISP? (Score:3, Funny)
"Uh, hi... is this IBM?"
Yes, it is; what can I do for you?"
"Uh, this is, uh, [edited] at SCO. Someone's DOSing us, and..."
[uproarious laughter from IBM rep]
[CLICK]
Who takes the fall? (Score:5, Insightful)
If a SCO executive ordered the self-attack, and a loyal SCO IT person (I want a shot of what he's drinking) carried it out, when the FBI comes calling, how far up the tree would the IT person point when he was arrested?
If a SCO executive was pinpointed in ordering a DOS (unlikely, but hey, Enron being publicly exposed was unlikely), how would that affect the Linux lawsuit? IANAL, but it seems like SCO execs would have nothing to gain from DOSing theirselves and only fines or Jail-time to face.
Re:Who takes the fall? (Score:2)
What does it matter if a self-DOS charge gets piled on top of fraud charges? We all know that the SCO execs are going to jail anyway. =)
Pattern Recognition (Score:3, Insightful)
I mean, if they are hiring "pattern recognition" experts to determine if code has been copied or changed, a good and proper slashdotting sure has a lot of similarity to a DDoS attack.
I figure, just by reading what those SCO people release to the press, they not only have trouble distinguishing truth from bull shit, but couldn't tell a slashdotting from a real DDoS attack. Soon, we'll get a press release
I agree with this analysis... (Score:3, Insightful)
No wonder they weren't making any money on their UNIX sales.
Re:Who takes the fall? (Score:3, Interesting)
I don't know about you, but the DoSer's actions pretty well makes him not one of us in my mind.
DOS? Perhaps not. (Score:5, Interesting)
The SCO site has been up during business hours in Utah, but has since failed again. Many news sites carried the story that Eric Raymond had spoken to agroup responsible for a Distributed Denial of Service attack on the www.sco.com site and that they agreed to stop. However it appears that this may have been a hoax, or they subsequently changed their minds, or another person decided to continue the attack, or that the timeout on the attack has not yet been reached.
In a similar situation 10 days ago Microsoft chose to deploy Akamai's caching service, which has successfully averted any outages.
Akamai would be more dependable at warding off Distributed Denial of Service attacks than favours from Eric Raymond, but concievably SCO may have difficulty swallowing its pride and buying a service that uses tens of thousands of Linux servers, for which Akamai presumably has not purchased a SCO licence.
Re:DOS? Perhaps not. (Score:2)
As much others respect Eric Raymond, I don't think he will have any influence..
In fact, by publishing the article, it may even produce the opposite results... More people now know that SCO is being attacked and want to join in.
No, I'm not attacking...
ChiefArcher
Re:DOS? Perhaps not. (Score:3, Funny)
I think honestly words above english proper not.
Not a gramma nazi... just thought that sentance read funny enough to point out. Don't hate me =)
And, no, I'm not off topic, moderators. At this point I would comment on how commenting on a moderator giving me an off topic mod would be self fulling, but I won't, since then it would happen.... oh wait... damn.
It might help actually.. (Score:2)
They'll have nowhere to post their FUD.
Re:It might help actually.. (Score:2)
Maybe it's a subtle plan (Score:5, Funny)
So much for trying to be funny...
Economics (Score:5, Interesting)
Not that I want to endorce vigialantism, but DOS attacks on SCO and its partners could be used to stop other corporations from doing business with them. Perhaps that is the DOS attackers' goal. However, I do not think that the DOS attacks are productive to the goal of getting rid of SCO's attacks on Linux.
IMO, a much better strategy would be for everyone using Linux to start buying SCO stock, and then, as a stock holder action, vote all of SCO's patents and copyrights into the public domain (and then disolve the company).
Re:Economics (Score:2)
Re:Economics (Score:2, Insightful)
Re:Economics (Score:2)
Regardless of weither or not it rewards the current SCO stock holders, it is by far fastest legal way to get rid of SC
Re:Economics (Score:5, Insightful)
Some people may feel that "something needs to be done" about this SCO Group, but I would imagine that the large organizations that have big money backing them are not worried at all. Can we keep using Linux? Yes. Is anyone going to stop us? No. Can the SCO Group file a lawsuit? Yes, they can file it, but that doesn't mean they are going to win. How much money has been saved (and will be saved in the future) by using Linux? It's almost more of a case that Linux is a wonderful operating system that just happens to be free - not that people are putting up with an inferior operating system just so they don't have to pay money. Obviously, Linux is worth the effort defending - it has, does, and will continue to provide millions of people and organizations across the world an excellent value. If someone needs to foot the bill to keep Linux healthy, they would be doing a great service that will benefit all of mankind for decades to come.
A significant problem is that if the SCO Group goes under, and they have sued you and you have spent money on legal fees, or you have given up and bought their "product", they may be unable to pay those legal fees for you, or refund the license you have been paying them to use their "IP" that was never theirs. This could probably be prevented by requiring the SCO Group to sign an NDA with an arbitration clause prior to disclosing (or attempting to disclose) confidential network data, in order to get an estimate of how much you "owe" them. The NDA and the arbitration clause could be intended for any vendor that would like to give an estimate and could include a "third party", such as a governmental agency, that could handle any legal problems, such as IP violations or unregistered software.
Or maybe the defendant could ask the judge to allow legal fees to be placed in escrow by the SCO group in case they lose?
Whether or not the DDOS attacks continue, The SCO Group is in a very bad place right now and the future looks pretty bleak for that organization. DDOS attacks are just making an already pothetic situation even worse. I wonder what's going to happen when they finally go poof? The license reverts back to Novell?
Re:Economics (Score:2)
The analogy isn't exactly wrong either. Corporations work very much like democracies, except that instead of one person one vote, it is one share one vote.
The Fault of the Apache Server (Score:5, Funny)
Well, if their server had been running proper licensed SCO code then it would not only have survived the continual DoS, but would have shot down the attacking machines in droves...
...but no, they just want to demonstrate how crap Apache & Linux is, especially since it is stolen perversion of all of SCO's IP. And what an effective demonstaration it is, why that must be propping up the stock value by about 99%
;-)
It just so happens... (Score:3, Funny)
All those running worms/shell scripts used in DOS attacks can license the IP behind it now! Only $799! (Special Introductory Price).
Eh? (Score:5, Interesting)
I remember reading elsewhere that it's entirely possible that they've just taken down there site of their own accord.
Re:Eh? (Score:2)
Few more and SCO will be having all hands full of saying what Linux community has done to them.
Read The Fucking Article (Score:2)
ca-ching... (Score:5, Funny)
Makes it One Million Dollars [yahoo.com]in two months.
Reginald C. Broughton...come on down!
(so it's OT, but keep watching these bastards).
Re:ca-ching... (Score:3, Interesting)
Bad publicity (Score:5, Insightful)
Eventually SCO will go broke trying to win its laughable lawsuit. IBM has the resources to fight the case and the Open Source Community shouldn't worry about a few lost revenues in the meantime. One of the reasons why Linux has been able to take on Microsoft is the fact the M$ can't undermine the open source revenue stream when it is practically non-existant.
In the meantime, is there any reason why we should stoop to SCO's level?
no-one's even proven it was "us" (Score:2)
Re:no-one's even proven it was "us" (Score:2)
You know average people don't read Linuxtoday and
Re:Bad publicity (Score:2)
And, of coure, a DoS attack made to appear to come from the open source community by typical media spin won't do any damage whatsoever.
Question (Score:5, Insightful)
Server Stats and relevance (Score:5, Funny)
Net packet loss (Score:5, Interesting)
Re:Net packet loss (Score:4, Funny)
Slashdotting a site about internet statistics via a link on a thread about DDoS...
Now, *that's* Irony for ya, Alanis! (I hope you get it now)
There is 0 justification for DOS'ing SCO (Score:5, Insightful)
DOS attacks are the internet equivalent of standing outside someones home playing heavy metal at 140 dB.
I'm puzzled as to what the guys making the attack hoped to accomplish.
To punish them for lying about linux? Their reputations are already in the toilet. Only ignorant fools are buying into their claims anyway.
To protect Linux? If one thinks about it, SCO has not harmed Linux in any meaningful way! The free distro's are there, and will be there for a long time. All they've done is slowed down adoption by the more clueless managers, which is really no big deal. Their legal claims about the GPL being invalid are such arrant nonsense: they won't stand in court. No matter what happens there will always be a GPLed kernel we can use.
To let them know we think they suck? Well, considering the increasingly defensive and irrational stances that they are taking, I think they already know that. The rest of the world is not buying into their claims. Even if their claims of hundreds of "licenses" sold are not wildly exagerated, that would mean 1% adoption rate.
To prevent people from doing business with SCO? I think that's pretty unethical. If people want to do business with SCO, let them. It's their choice if they want to throw good money away on vapor-ware of bad product. Would you prevent a stranger from buying cigarettes with his own money?
I know alot of people think using force to shut people up who say things you don't like is OK. But those people should take a look at the impression this gives to the non-geek world. They just reinforced the impression that OSS proponents are whiny immature people.
I think the guys behind the attacks scored an own goal.
Um, no... (Score:5, Funny)
Obviously you missed the whole heavy metal thing. Standing outside of someones home playing heavy metal would be about picking up chicks (most likely the daughter of the family who's house your serenading). The SCO/DDOS equivalent would be something like driving around in a drunken stupor taking mailboxes off their posts with a baseball bat (or something equally annoying).
Hmmmmm (Score:2)
Do I smell a rat?
thad
Not Exactly Innocent... (Score:3, Interesting)
Sheesh (Score:4, Interesting)
SCO hosts on Linux (Score:2)
Good excuse... (Score:4, Funny)
I'm blaming SCO for it.
"Sir, looks like a friendly fire incident"
Canopy is their hosting company... (Score:3, Informative)
So while Centershift may want to change ISPs, Canopy will probably sue them if they do. Hell, they may even sue them if they don't. That's what seems to happen to anyone [informationweek.com] that has a contract with a Canopy company.
Doesn't Compute (Score:2)
Given that this is a startup iSP
So where is the real truth here?
Groklaw skeptical about Dos (Score:5, Informative)
We Got DoS'd (Score:5, Informative)
That might not seem too significant, until I mention the fact that all our sales happen through the web -- not to mention most of our project management interaction with our customers. Hence, we were paralyzed pretty well by the attack. If Friday was going to be a typical day, we lost $4000-$5000 is sales. Not to mention lost money due to lost productive time on projects.
I don't know how SCO's bottom line was hit, but that was ours, and because we don't have huge padded bank accounts or support of shell-game investors, we really can't afford that.
Not to mention that the bad publicity is real. Sure, some of us here understand the situation and understand the childish folks who undertook the attack only represent a small portion of open source contributors, users, and supporters. But our VP of tech had some negative things to say about them.
Moral of the story: yep, DoS attacks hurt innocent bystanders, even some slashdot fanboys who dislike SCO's tactics as much as the next guy but spent too much time unemployed last year and really don't want their current employer hurt. And transitively, DoS attacks hurt the rep of the Open Source community. Really. If you're one of the people inclined to do something like that, think twice.
I Got Sued By SCO...... (Score:5, Funny)
Re:I Got Sued By SCO...... (Score:2, Funny)
You suck. You suck purely because you didn't tell me where I can order one of those t-shirts at!
Well to get a T-shirt, just send a $699 introductory priced license fee for each T-Shirt to:
Darl McBride
123 SCO Lane
Cayman Islands
90210
Better hurry, once the promotion is over, licensing fee for each t-shirt goes to $1399.
What DDoS (Score:5, Informative)
On another note, the center is also owned by the Canopy Group and is very Linux friendly. Many of thier comercial offerings involve Linux and their monitoring is based on Cricket. I wonder how they (and other Canopy Group companies) are feeling about this whole mess.
Found on the SCOX yahoo msg board (Score:4, Interesting)
>>For instance, did you know that, because SCO filed its initial Complaint before it registered its copyright, it's therefore limited by statute to recovering merely $150,000 for any infringements? There are several such Aha! moments awaiting an assiduous reader of this analysis.
Anybody know if this is true?
The DoS attack is a disservice to the community... (Score:2)
GJC
DOS has nothing to do with Linux (Score:5, Insightful)
We don't assume that Microsoft endorses or orchestrates DOS attacks against Linux sites when attacks occur against Linux sites. Similarly, we shouldn't tie DOS attacks against SCO to the Linux community. People who are launching DOS attacks against anybody are just uncivilized script kiddies. If they happen to be Linux users as well, that's incidental.
DOS attacks on SCO have nothing to do with Linux or the Linux community. SCO's legal attacks on Linux are outrageous and unfounded, but the Linux community is responding to them with facts and will, if ever presented with a real legal challenge, respond in court.
SCO Source (Score:5, Interesting)
SCO is the owner of the UNIX Operating System Intellectual Property that dates all the way back 1969, when the UNIX System was created at Bell Laboratories. Through a series of mergers and acquisitions, SCO has acquired ownership of the patents, copyrights and core technology associated with the UNIX System. The SCO source division will continue to offer traditional UNIX System licenses to preserve, protect and enhance shareholder value.
Darl, I can tell you're lying... your lips are moving! Care to list exactly which patents SCO owns?
No jobs at SCO (Score:3, Funny)
Please STOP! (Score:3, Insightful)
SCO mess is actually raising awareness (Score:3, Interesting)
Re:http://www.sco.com/ (Score:4, Funny)
A hyperlink for the lazy (Score:5, Funny)
Re:A hyperlink for the lazy (Score:2)
Re:A hyperlink for the lazy (Score:4, Funny)
Re:A hyperlink for the lazy (Score:2)
Re:A hyperlink for the lazy (Score:2)
Re:A hyperlink for the lazy (Score:5, Funny)
www.darlmcbride.com also fine (Score:3, Interesting)
Re:Friendly fire... (Score:5, Insightful)
Likewise... (Score:3, Funny)
...SCO can't be seen as an IT company* without a functioning web site. ;)
Discalimer: yes, I know they're in the lawsuit business now. By reading this post, you acknoqledge that all joke replies are to at least be original.
Re:Friendly fire... (Score:2)
I hope you were trying to be funny or sarcastic with that comment.
SCO may have made some wild claims in the lawsuit, but I do not seriously think they are dumb enough to perpetrate an attack on themselves in this manner. There is simply no evidence to support this, and to entertain conspiracy theories like this only clouds the issue.
And as for "IBM is behind all the backlash to SCO", this is not correct either. I and other member
Re:DOS? or DoS? (Score:3, Informative)
Yes, I am a pedantic geek.
Please use DoS for Denial of Service, and DOS for Disk Operating System. "of" shouldn't be capitalized.
Too bad the Deptartment of Transportation had to screw up my little world with DOT. Quit shouting "dot!"
Re:SCO owns DOS too? (Score:4, Interesting)
says: "EMBEDDED LINUX MOVED TO TOP PRIORITY AT LINEO, INC., FORMERLY KNOWN AS CALDERA THIN CLIENTS, INC.
Lineo's Embedded Linux, Based on Caldera Systems' OpenLinux, is Natural Evolution for Companies With Years of Success in Both Linux and Embedded DOS"
ah well couldn't find much more under 1 minute.
Re:Innocent? (Score:3, Insightful)
The same way the customers in Israeli cafes are a legit target of suicide attacks?
If they don't want to be blown up, they should just stop supporting Israeli occupation of Palestine! It doesn't matter what their personal opinions are, they are guilty by association!
Don't be a psychopath. It is not okay to blackmail or extort or terrorize people in order to force them to see things your way. Damaging innocent third parties in an effort to get those parties to
Re:Innocent? (Score:2, Flamebait)
If DoS attacking Center7 is blowing up a cafe, then SCO has been carpet bombing us for months. So yes, it would be a fitting response.
But wait, nobody's getting blown up. SCO is trying to destroy the future of software development, and the network is responding unfavorably. Boohoo for SCO.
Hosting company also owned by Canopy (Score:3, Insightful)
BTW, Center 7 and Canopy sued Computer Associates recently. They settled for $40 million. Those Canopy Group fuckers are sue-happy pricks. "Contracts are what you use against people you do business with", indeed.
CA says settles Canopy Group, Center 7 litigation [center7.com]