|
<<
^
>>
Date: 1999-01-23
Smurf-attack: Die Pingflut kommt
-.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.-
Dass der Mensch auch im Netze grundsätzlich nicht
unbedingt ein Guter ist, zeigt die steigende Zahl sogenannter
"Smurf-Attacks." Ein einziger, schlimmer User kann ganze
Provider-Netzwerke in einer Ping/Springflut ersaufen lassen,
bloss weil er sich mit einem einzigen, anderen User um ein
Chat/Pseudonym gestritten hat.
post/scrypt: Eine Kunst/partie, das sogenannte "Electronic
Disturbance Theater" verwechselt diese hirn/tote
Vorgangsweise mit Netzpolitik.
-.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.-
Andy Patrizio
January 21, 1999 A growing number of network
administrators are finding themselves on the receiving end of
an attack that they can't stop, thanks to an exploit in TCP/IP
and one malicious hacker.
Problems often originate on Internet Relay Chat, a real-time
chat network known as IRC with thousands of channels and
tens of thousands of users where people meet and talk in
"chat rooms" in real time.
....
Fights frequently break out in these channels as network
gurus put their knowledge of TCP/IP to the worst kind of use.
By using a flaw in TCP/IP, it's possible to attack anyone on
IRC -- to knock them off chat and even take down their ISP.
The attack is called a "Smurf" attack. Smurf works by
sending out a ping to hundreds or even thousands of sites
and telling them to all respond to a single IP address.
...
A user with a 28.8k modem can put out enough bandwidth to
fill one-third of the capacity of a T1 (1.54 megabits/sec.) line,
according to Gary, an IRC operator who asked that his full
name not be used.
...
"I used to use IRC to chat, but now I've got to try not to get
flooded off and try not to get hacked," he said.
...
The Computer Emergency Response Team (CERT) at
Carnegie-Mellon University said Smurf attacks went up from
3 percent of reported incidents in January 1998 to 10 percent
by December of that year, according to Jed Pickel, a
member of the CERT technical staff.
...
Yale recently removed its IRC server because of these
attacks and New York University was recently flooded so bad
it was off the network for two weeks, he said.
...
As bad as Smurf attacks are, there's no way to stop them.
The packet flood can be blocked at the router or at the
upstream service provider, but that doesn't prevent the flood
from being unleashed in the first place.
...
There are ways to solve the problem, Gary said. IPv6, the
next generation of the TCP/IP networking protocol, will close
this loophole and not allow for domain spoofing, but it won't
see wide deployment for several years.
...
full text
http://www.nytimes.com/techweb/TW_Internet_Chat_Wars_Spill_Over_.html
relayed by
anon@juno.com via mea culpa jericho@dimensional.com
-.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.-
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.-
edited by
published on: 1999-01-23
comments to office@quintessenz.at
subscribe Newsletter
- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.- -.-. --.-
<<
^
>>
|
|
|
|