Do they even have to attack themselves? (Score 1)

I'm no expert at this, but wouldn't it be possible to just send out a few million false responses to get picked up? I mean, if their FTP server was running just fine and the whole thing is a question of this being valid then why say they were ever attacked at all? Just write a small deal that randomly generates an IP (maybe with some guidlines so if people find out where your replying to it doesn't turn out to be a site that would ruin the whole story such as www.microsoft.com or www.dod.gov) and have it send out responses to them. If it turns out that they attacked themselves then whos to say they were attacked and didn't just fake the actual attack having ever even been real? Please don't flame this, it really is a question out of curiosity.