FFF.NET under attack.

POSTED BY: Haken
UPDATED: Monday, July 28, 2008 19:08
VIEWED: 9228
PAGE 2 of 5

PREV PAGE 1 2 3 4 5 NEXT PAGE

TRAVELER

Saturday, July 26, 2008 10:13 PM

Computer terrorists. Well I have powerful allies.

Meet my good friend Gaz.

http://www.imdb.com/mymovies/list?l=28764731
Traveler

HAKEN

Saturday, July 26, 2008 10:37 PM

Quote:
Originally posted by TheSomnambulist:
I gotta plead complete ignorance here but what is a DOS? and an SQL was it? And why hack, to what gains?

The bots responsible for these attacks inject javascript code into the SQL server so that when a dynamically generated page (like this one) is served up, the javascript runs on the user's browser to to redirect the browser to a website that has more malicious code that attempts to infect the user's computer to either gather data or to propagate itself further.

In order to do this, the bots probe all the site's pages for vulnerabilities. Imagine a lot of computers loading hundreds of pages all at the same time. FFF.NET, being a small site with limited bandwidth, can't handle that type of traffic and eventually stops working.

Since the last attack, I've patched some of the holes, at least the ones I know of, to prevent the injection from working or affecting other people.

However, there's little I can do about the DOS attack. The best I could do was to block a whole segment of the world off, particularly Asia, since it's where most of these attacks come from.

MSB

Saturday, July 26, 2008 10:58 PM

HUGS well it's wonderful whatever you do... Thanks ever so much Haken

____________________________________________

Love doesn't make the world go 'round; love is what makes the ride worthwhile.

STINKINGROSE

Saturday, July 26, 2008 11:09 PM

Quick, hit the SGAtlantis fansite and threaten Rodney with a lemon unless he helps!!

(Sorry.)

I was wondering why the page wouldn't load last week.

THESOMNAMBULIST

Saturday, July 26, 2008 11:34 PM

Originally posted by Haken:

Quote:
The bots responsible for these attacks inject javascript code into the SQL server so that when a dynamically generated page (like this one) is served up, the javascript runs on the user's browser to to redirect the browser to a website that has more malicious code that attempts to infect the user's computer to either gather data or to propagate itself further.

In order to do this, the bots probe all the site's pages for vulnerabilities. Imagine a lot of computers loading hundreds of pages all at the same time. FFF.NET, being a small site with limited bandwidth, can't handle that type of traffic and eventually stops working.

Since the last attack, I've patched some of the holes, at least the ones I know of, to prevent the injection from working or affecting other people.

However, there's little I can do about the DOS attack. The best I could do was to block a whole segment of the world off, particularly Asia, since it's where most of these attacks come from.

Good grief!!! People do this kind of thing? What the hell for? I can't claim to fully understand this, but however you are doing it, well done for deflecting these guys. Seems like a nightmare! I find it incredible you can keep this site running with such determined 'bots' as you call them trying to attack the site in such large numbers at any given time.

Thanks Haken.

DaveShayne - thanks for your explanation also. Much appreciated.

RALLEM

Sunday, July 27, 2008 12:12 AM

They're less than human is why. I suppose they spent too much time looking into the black and lost their minds.

http://swyzzlestyx.com/index.html

TUJIAOZUO

Sunday, July 27, 2008 1:39 AM

Quote:
They're less than human is why. I suppose they spent too much time looking into the black and lost their minds.

They saw a vasty nothingness and went bibbledy over it. Then went into confederation with the Cylons and turned against mankind

Your Indian Pirate Lord,
Ash

EMBERS

Sunday, July 27, 2008 2:15 AM

Wow, I had no idea you were having such troubles...
I've paypalled a donation, I hope it helps some.
I love this site and I would hate to see anything happen to it!

New Firefly fans should check this out: http://www.fireflyfans.net/thread.asp?b=2&t=15816
DON'T MISS DR.HORRIBLE! Nathan Fillion sings!!!!! Now only available on iTunes

HAKEN

Sunday, July 27, 2008 3:13 AM

Quote:
Originally posted by TheSomnambulist:
Good grief!!! People do this kind of thing? What the hell for? I can't claim to fully understand this, but however you are doing it, well done for deflecting these guys. Seems like a nightmare! I find it incredible you can keep this site running with such determined 'bots' as you call them trying to attack the site in such large numbers at any given time.

People do it mostly because they can. They create these bots and let it loose mostly for the purpose of phishing (identity theft, credit card fraud, etc.). It's done either by distributing code that'll get on users' computer to collect info or by using the compromised servers to send out phishing spam or to propagate the bots. It's big money for them if it works. Most of the time, though, it just wreck havoc with everyone's websites, servers, and computers.

It's also very easy to do these days because toolkits for this stuff are readily available, and one no longer requires much programming skill, if any at all, to become a mad hacker on the verge of cyber world domination (at least that's the mindset).

If one is into conspiracies, the urban myth (or joke) is that many of these viruses, trojans, and bots are created by anti-virus companies. It's a guarantee moneymaker. Either pay for your antivirus subscription or risk infection. When business is slow, the antivirus companies and security firms release one or several of these things and everyone will come paying. Ah, but I digress.

KNIGHTREYEDER

Sunday, July 27, 2008 4:21 AM

Sort of like insurance companies buying radar systems for the pigs. More tickets, more insurance company income. What a racket.

I see the money/motivation there, and had never heard this take on the virus scan companies.....hummmmmm, interesting.

_________________________________________________
VOTE FOR OUR FAVORITE SHIP!!
http://blogs.amctv.com/scifi-scanner/2008/05/coolest-starship-tourname
nt.php

Mal's expression in the scrapyard when he first see's Serenity says it all.

PREV PAGE 1 2 3 4 5 NEXT PAGE