MASSIVE DDOS ATTACKS ALL OVER U.S.

[McPhreak]

Originally posted by: mechBgon
Did anyone notice that this attack coincided very closely with the addition of the Clown avatar? :Q

:Q

 

[Reel]

Originally posted by: flot
Hmm.. guess I need to actually wake up before I start reading OT... I could have sworn the headline said "Massive DOGS attack all over us"

I was like "whoa, cool, massive dogs..."

HAHAHAHAHAHA!
Anyone else see AT + forums have some downtime a little while ago?

 

[SuperSix]

Originally posted by: RossMAN

Originally posted by: ChrisIsBored

Originally posted by: RossMAN
Those of us paranoid about security (most of us are secure behind a router and/or firewal software) should unplug our computers from the internet, unplug them from power and hide them underneath our beds.

But what about the WiFi networks?

Unless your home PC is running MS SQL I don't think you have a problem... but if there were anyone who needed a reason to turn off the computer and walk away for a while... it might be you...

Actually a lot of the eCommerce websites are hosed so this means no spending $ until all this settles.

Yea, like Mine.. Can anyone reach it?

 

[Adul]

and in other news AOl reports that this worm has had no effect on its service..


=\

http://biz.yahoo.com/rc/030125/telecoms_korea_internet_1.html

last line

 

[Aves]

Originally posted by: SuperSix

Originally posted by: RossMAN

Originally posted by: ChrisIsBored

Originally posted by: RossMAN
Those of us paranoid about security (most of us are secure behind a router and/or firewal software) should unplug our computers from the internet, unplug them from power and hide them underneath our beds.

But what about the WiFi networks?

Unless your home PC is running MS SQL I don't think you have a problem... but if there were anyone who needed a reason to turn off the computer and walk away for a while... it might be you...

Actually a lot of the eCommerce websites are hosed so this means no spending $ until all this settles.

Yea, like Mine.. Can anyone reach it?

No.

 

[Aves]

Originally posted by: Adul
and in other news AOl reports that this worm has had no effect on its service..


=\

http://biz.yahoo.com/rc/030125/telecoms_korea_internet_1.html

last line

Well odds are if you have any need to run an SQL server, AOL probably won't be your first choice as an ISP.

 

[nord1899]

Damn, looking at my firewall records everything explodes at 12:30am. Guess the reports I read were right that it went off right at that time.

Kind of funny, 3 Sub Seven attacks dropped right before everything goes wacko. God bless my Netgear FR314, firewall and router combo.

Just counted the lines, got 190 attacks in the past 12 hours or so. And I am on a simple cable modem, can't imagine what the backbones were getting.

 

[SnapIT]

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

Let me turn the tables a bit, name ONE free server, ONE free SQL server that has had as many exploits as IIS and MS SQL Server.... I didn't say that others products were flawless, but better...

Oh, and when it comes to SQL servers that are not free, i would say that a better, safer, faster server would be Oracle (which is probably why that is the most widely used SQL servers in the world)

The thing i am arguing against is that MS has a surprisingly small marketshare (less than half of the closest competitor in both Internet, and SQL servers) and still get's exploited so much more often... The obvious reason is that it is easier to exploit MS software...

In the future when you are mentioning MS SQL server, be sure to type the whole name, SQL isn't an ms trademark...

 

[nord1899]

Originally posted by: SnapIT

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

Let me turn the tables a bit, name ONE free server, ONE free SQL server that has had as many exploits as IIS and MS SQL Server.... I didn't say that others products were flawless, but better...

Oh, and when it comes to SQL servers that are not free, i would say that a better, safer, faster server would be Oracle (which is probably why that is the most widely used SQL servers in the world)

The thing i am arguing against is that MS has a surprisingly small marketshare (less than half of the closest competitor in both Internet, and SQL servers) and still get's exploited so much more often... The obvious reason is that it is easier to exploit MS software...

In the future when you are mentioning MS SQL server, be sure to type the whole name, SQL isn't an ms trademark...

Well in terms of marketshare, MS might be lacking in Corporate servers. But what about all those broadband users out there with unpatched systems. When you add those in, then you see why its so bad.

 

[kermalou]

i see in my router's logs a bunch of incoming 1434 requests, how do i find out what time they were at?

ita a linksys router

 

[nord1899]

Originally posted by: kermalou
i see in my router's logs a bunch of incoming 1434 requests, how do i find out what time they were at?

ita a linksys router

They all started just after midnight last night Eastern time. And they are still going on strong now.

No idea on how to get timestamps for a linksys router, I have a netgear one.

 

[Nemesis77]

Originally posted by: charrison
Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

Why? We are obviously not discussing that. All software has some sort of bugs/holes in it. But the fact remains that MS-software gets hacked more even though there are other servers out there with bigger market-shares (like IIS vs. Apache)

 

[ndee]

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

qmail, djbdns

 

[SnapIT]

Originally posted by: nord1899

Originally posted by: SnapIT

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

Let me turn the tables a bit, name ONE free server, ONE free SQL server that has had as many exploits as IIS and MS SQL Server.... I didn't say that others products were flawless, but better...

Oh, and when it comes to SQL servers that are not free, i would say that a better, safer, faster server would be Oracle (which is probably why that is the most widely used SQL servers in the world)

The thing i am arguing against is that MS has a surprisingly small marketshare (less than half of the closest competitor in both Internet, and SQL servers) and still get's exploited so much more often... The obvious reason is that it is easier to exploit MS software...

In the future when you are mentioning MS SQL server, be sure to type the whole name, SQL isn't an ms trademark...

Well in terms of marketshare, MS might be lacking in Corporate servers. But what about all those broadband users out there with unpatched systems. When you add those in, then you see why its so bad.

And this would explain how MS servers are more open to exploits? No, of course not, the security holes in IIS and MS SQL server have nothing to do with what the desktop users use...

So, i fail to see your point...

 

[SilverThief]

:Q

 

[SnapIT]

Originally posted by: ndee

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

qmail, djbdns

There are probably many others, PostgreSQL comes to mind... as well as MySQL... but the point is that even though there are less servers out there using MS software, the servers running MS software are exploited way more often...

 

[ndee]

I have to agree, the patches has been available, it's really a problem with lazy admins.

 

[polm]

Originally posted by: ndee
I have to agree, the patches has been available, it's really a problem with lazy admins.

So basically you are saying it is the Admins fault ?

And if I get shot tomorow walking down the street it is MY fault for not wearing a bullet proof vest ?

 

[ndee]

Originally posted by: polm

Originally posted by: ndee
I have to agree, the patches has been available, it's really a problem with lazy admins.

So basically you are saying it is the Admins fault ?

And if I get shot tomorow walking down the street it is MY fault for not wearing a bullet proof vest ?

uhm, let me think reeeeeeeeeeeeeeeeeeeeeeal long... No. Your analogy sux BTW.

 

[charrison]

Originally posted by: SnapIT

Originally posted by: charrison

Originally posted by: SnapIT

Originally posted by: pulse8

Originally posted by: Nemesis77
Maybe MS should be banned from the Internet ? I mean, look at the harm their software brings: IIS-servers are routinely hacked and defaced, thanks to MS SQL-server, Internet has slowed to a crawl and several root-servers are offline, Outlook spreads viruses faster than the eye can see, Hotmail is a spam-magnet, Code Red, Nimda etc. etc...

If it wasn't Microsoft, it'd only be someone else's software.

You mean like the systems that are used twice as often as MS systems today? (only counting servers)

Obviously MS servers are are more vunerable to attacks... (or it's the people who uses the other systems that are more alert)

Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

SQL has a very good track for being quality software. A patch for this exploit has existed for more than 6 months. This is about clueless admins, not bad software.

Let me turn the tables a bit, name ONE free server, ONE free SQL server that has had as many exploits as IIS and MS SQL Server.... I didn't say that others products were flawless, but better...

Show proof of this. Here is list of things fixed in SP3 of SQL 2000. I am willing to bet Oracle has got a list of similar size.
I am also willing to bet that free sql products with lesser feature sets have just as many defects.

linkage



Oh, and when it comes to SQL servers that are not free, i would say that a better, safer, faster server would be Oracle (which is probably why that is the most widely used SQL servers in the world)

Oracle is better because it can reside on 64 hardware. This is one of the few things that oracle has on MSSQL.
Both oracle and mssql provide rich features and reliability for enterprise computing.

Mssql is much cheaper and much faster than Oracle. MS sql has owned TPC bencharks for both speed and cost of transactions. Check out tpc.org sometime.

Ms Sql is new to the enterprise market, but I can guarantee oracle is worried about it.





The thing i am arguing against is that MS has a surprisingly small marketshare (less than half of the closest competitor in both Internet, and SQL servers) and still get's exploited so much more often... The obvious reason is that it is easier to exploit MS software...
I will give you that IIS does have significant security problems compared to apache. The same cannot be said for MS Sql. MS Sql is a solid enterprise product.





In the future when you are mentioning MS SQL server, be sure to type the whole name, SQL isn't an ms trademark...

Well, it was only product being talked about at the time

 

[charrison]

Originally posted by: Nemesis77

Originally posted by: charrison
Name me 1 product that has never had an exploitable bug? I will give you all the time you need.

Why? We are obviously not discussing that. All software has some sort of bugs/holes in it. But the fact remains that MS-software gets hacked more even though there are other servers out there with bigger market-shares (like IIS vs. Apache)

If all software has bugs, but only MS software hacked more often, does this mean MS has lower quality software or more people spend time and effort to make MS look bad?

 

[RaynorWolfcastle]

Originally posted by: polm

Originally posted by: ndee
I have to agree, the patches has been available, it's really a problem with lazy admins.

So basically you are saying it is the Admins fault ?

And if I get shot tomorow walking down the street it is MY fault for not wearing a bullet proof vest ?

wow, that's a terrible analogy, I can't see the relation with the current situation.

 

[Deleted member 4644]

If I find out who did this, I will KILL them. Personally.

 

[charrison]

Originally posted by: RaynorWolfcastle

Originally posted by: polm

Originally posted by: ndee
I have to agree, the patches has been available, it's really a problem with lazy admins.

So basically you are saying it is the Admins fault ?

And if I get shot tomorow walking down the street it is MY fault for not wearing a bullet proof vest ?

wow, that's a terrible analogy, I can't see the relation with the current situation.

It is reality. Computer security is a full time job. If it is not treated as such companies will keep getting hit hard by it.

 

[ndee]

Originally posted by: charrison

Originally posted by: RaynorWolfcastle

Originally posted by: polm

Originally posted by: ndee
I have to agree, the patches has been available, it's really a problem with lazy admins.

So basically you are saying it is the Admins fault ?

And if I get shot tomorow walking down the street it is MY fault for not wearing a bullet proof vest ?

wow, that's a terrible analogy, I can't see the relation with the current situation.

It is reality. Computer security is a full time job. If it is not treated as such companies will keep getting hit hard by it.

So which fault was it do you think? (I don't understand your last post )