MASSIVE DDOS ATTACKS ALL OVER U.S.

[Iron Woode]

Originally posted by: aves2k

Originally posted by: N8Magic
Fixed linky.

I can't get either to work, what's it say.

"UDP port 1434 - SQL Server Monitor worm - likely using a known buffer
overflow to install itself on the server.

Heads up if your running a MS SQL Server box."

 

[RossMAN]

Those of us paranoid about security (most of us are secure behind a router and/or firewal software) should unplug our computers from the internet, unplug them from power and hide them underneath our beds.

But what about the WiFi networks?

 

[KK]

Everyone do a reboot, that should fix it.

KK

 

[ElFenix]

Originally posted by: N8Magic
Fixed linky.

that linky sucks

 

[ChrisIsBored]

Originally posted by: RossMAN
Those of us paranoid about security (most of us are secure behind a router and/or firewal software) should unplug our computers from the internet, unplug them from power and hide them underneath our beds.

But what about the WiFi networks?

Unless your home PC is running MS SQL I don't think you have a problem... but if there were anyone who needed a reason to turn off the computer and walk away for a while... it might be you...

 

[Iron Woode]

Originally posted by: KK
Everyone do a reboot, that should fix it.

KK

Hehehe.

I tried that. I thought my router was buggered. Turns out to be much worse. At least the problem isn't my equipment.

 

[RossMAN]

Originally posted by: ChrisIsBored

Originally posted by: RossMAN
Those of us paranoid about security (most of us are secure behind a router and/or firewal software) should unplug our computers from the internet, unplug them from power and hide them underneath our beds.

But what about the WiFi networks?

Unless your home PC is running MS SQL I don't think you have a problem... but if there were anyone who needed a reason to turn off the computer and walk away for a while... it might be you...

Actually a lot of the eCommerce websites are hosed so this means no spending $ until all this settles.

 

[Ciber]

This is great publicity for MS

 

[N8Magic]

Originally posted by: Ciber
This is great publicity for MS

Wheres Ameesh? :Q

 

[Ciber]

I wonder what MS marketing guys will say about this tomorrow........lol......

 

[ElFenix]

Originally posted by: N8Magic

Originally posted by: Ciber
This is great publicity for MS

Wheres Ameesh? :Q

hahahaha buuuurn!

 

[ViRGE]

They'll say:

Originally posted by: Microsoft
What the hell is wrong with you people?! We published this flaw 6 months ago, and you still can't be bothered to update against it!?

 

[Aves]

Originally posted by: Ciber
I wonder what MS marketing guys will say about this tomorrow........lol......

They'll say that the port 1434 buffer overflow that would have likely been crucial in orchestrating this whole thing was a well known issue and server admins should have taken the appropriate steps to protect themselves.

I find it funny that my firewall logs are showing connect attempts from lawsqlsrv2.hotmail.com, certainly they would have fixed this on their own servers.

 

[VBboy]

Originally posted by: CiberMASSIVE DDOS ATTACKS ALL OVER U.S.

Sorry about that, guys. I'm gonna run to the kitchen and turn off my DDOS thingy

 

[Insane3D]

Originally posted by: VBboy

Originally posted by: CiberMASSIVE DDOS ATTACKS ALL OVER U.S.

Sorry about that, guys. I'm gonna run to the kitchen and turn off my DDOS thingy

Booooooo

 

[ElFenix]

Originally posted by: VBboy

Originally posted by: CiberMASSIVE DDOS ATTACKS ALL OVER U.S.

Sorry about that, guys. I'm gonna run to the kitchen and turn off my DDOS thingy

oooo that was bad

 

[Platypus]

Don't blame microsoft too hard, almost every platform has programs with buffer overflow errors. You only see the Microsoft servers get hit because they are the most popular platform, and they are easy to target. Buffer overflow is a VERY common thing, and it just so happens that MS's SQL is the target this time. If you run a MS Server, look out. Personally I am glad both my servers run unix.

 

[Ciber]

Originally posted by: CorporateRecreation
Don't blame microsoft too hard, almost every platform has programs with buffer overflow errors. You only see the Microsoft servers get hit because they are the most popular platform, and they are easy to target. Buffer overflow is a VERY common thing, and it just so happens that MS's SQL is the target this time. If you run a MS Server, look out. Personally I am glad both my servers run unix.

MS LOVER!!!!!!!!!!!
















j/k...... hehe

 

[SnapIT]

Originally posted by: CorporateRecreation
Don't blame microsoft too hard, almost every platform has programs with buffer overflow errors. You only see the Microsoft servers get hit because they are the most popular platform, and they are easy to target. Buffer overflow is a VERY common thing, and it just so happens that MS's SQL is the target this time. If you run a MS Server, look out. Personally I am glad both my servers run unix.

No, MS SQL server is far from the most popular SQL server on or off the internet...

 

[Adul]

funny playing warcraft 3 has been flawless

 

[luv2chill]

Whoa... Yeah a quick look at my sonicwall's log shows at least 100 attempts to connect to UDP 1434 from a ton of different IPs beginning at 23:30 (Central).

Wonder what the aftermath will be...

l2c

 

[optoman]

Whats so special about the 1434 port?

 

[Aves]

Originally posted by: optoman
Whats so special about the 1434 port?

MS SQL Server Monitor Port, there is a known buffer overflow exploit that can be used on it.

 

[Platypus]

Originally posted by: SnapIT

Originally posted by: CorporateRecreation
Don't blame microsoft too hard, almost every platform has programs with buffer overflow errors. You only see the Microsoft servers get hit because they are the most popular platform, and they are easy to target. Buffer overflow is a VERY common thing, and it just so happens that MS's SQL is the target this time. If you run a MS Server, look out. Personally I am glad both my servers run unix.

No, MS SQL server is far from the most popular SQL server on or off the internet...

Did I say Microsoft SQL servers?
No.

Read.Comprehend.Post.

 

[optoman]

Thanks

Alot of sites are down. I wonder how many IT guys are getting paged right now.