|
|
What is a Denial of Service attack?I heard on the news today that my favorite social network, Twitter, is being plagued by what they called a "denial of service attack". What on Earth is that? They're forced to not actually get service and it's an attack? I mean, I've been to restaurants where I experience a denial of service, but how can something like that affect Twitter or Facebook or whatever? Ha! I love the joke about denial of service at a restaurant. You could even have said that was what launched the entire Civil Rights movement decades ago, but that wouldn't have been focused on what's going on right now with Twitter and Facebook, among other sites. The idea behind an actual denial of service attack (often called a DoS) is that if you flood the Web servers of a popular site with spurious, bogus queries, it'll be so busy answering those bogus requests that it'll have to reject legitimate connect requests from real users. Think of it this way: if you were answering phones for a company and suddenly found that seemingly every single call was a prank, wouldn't the people who were trying to call the company for legitimate reasons just get a busy signal, while you, the operator, were stuck dealing with and hanging up on the bogus callers? There are also a lot of ways to implement a DoS too, as it happens, but the most common are so-called "smurf attacks" (technically, ICMP floods), where incorrectly configured network devices allow queries to be sent to all machines on a network, rather than a specific one. The more complex the network, the more this kind of thing can be crippling to the service. Other ICMP floods include "ping floods", where ping packets are sent incessantly, or SYN floods, where, you guessed it, SYN packets are sent with forged sender addresses. Other types of Denial of Service attacks include "teardrop attacks", "peer to peer attacks", "application level floods", "nukes" and "distributed attacks" (also known as DDoS, or distributed denial of service). The lattermost is particularly tough because hundreds or even thousands of machines can all be unknowingly contributing to the attack (if you really want to get into the weird nomenclature, it's usually trojan attacks that compromise the individual machines, making them zombie agents. Suffice to say, what's happening to Twitter is very hard to address because if the tsunami of bogus queries are indistinguishable from legitimate ones, how can they shut it down or block it? To learn more about Denial of Service attacks, check out the informative article on Wikipedia. And as for Twitter? Hopefully that'll be back up and fully online pretty darn soon!
More Useful Twitter, LinkedIn and Social Network Help Articles:
✔ How do I search for a job on LinkedIn?
This may be a bit obvious, but I'm looking for work and am unclear how I can use LinkedIn to find positions other...
✔ Add a header graphic to my Twitter profile?I heard from a colleague that Twitter's added profile pictures a la Facebook's timeline photo on the top. Nice, but how do I...
✔ Export LinkedIn Profile as a PDF Resume?I've spent the last year or two updating and adding to my LinkedIn profile and it has a ton of information about me....
✔ How do I block an iPad app from accessing Twitter?My son installed an app on my iPad and now it's posting updates on my Twitter account when he plays. What the deuce?...
✔ Repost a Facebook photo on Instagram?I post a lot of photos on Facebook and sometimes want to share them with my Instagram followers. You can automatically mirror an...
Let's stay in touch!
Sign up for my weekly AskDaveTaylor Newsletter and you'll receive even more tech and gadget help
right to your inbox, along with exclusive news and industry updates. It's good stuff. I promise!
Categorized:
Twitter, LinkedIn and Social Network Help
(Article 9024,
Written by Dave Taylor)
Tagged: ddos, dos, facebook, malware, trojans, twitter, zombies Previous: Killzone 2 Walkthru Part III: Visari Square Next: How do I password-protect an iPhoto album on MobileMe Gallery? Reader Comments To Date: 5Dave Taylor said, on August 6, 2009 11:16 PM:
A very interesting question, Rick. As far as I have read, there's no consensus on what's going on and while some sites might garner dislike in certain communities, I think Twitter is fairly neutral as a social network. We might learn more in the next few days as the traffic patterns and attacks are analyzed, but this might be one that's never properly clarified. Ken B said, on August 7, 2009 9:32 AM:
Sometimes, the reasons behind a DDoS attack can be obvious. For example, if they can take down the Microsoft Windows update site, or an anti-virus website, they can prevent you from getting the update that could prevent the new infection. On the other hand, I suppose there might still be the occasional "I like to disrupt things and make the evening news" reasons. SelfMadeCelo said, on August 7, 2009 11:10 AM:
Sometimes there are other motives. There's a pretty well known DNS hole that will let you re-route all the traffic to a new site. It's been tried with Trend Micro but it failed because they have protection in place. Basically they tried to take down the site and then replace it with a download to their own software that would just add more computers to their botnet. You could even go as far as taking down banking websites and sending everyone to your own servers. Carmen said, on September 17, 2009 7:09 PM:
Would this DOS have anything to do with the recent issues with mobile facebook? My app receives notifications as usual but for the last couple of days it will not let me view these notifications nor will it allow a poke back. i have to go to my mobile browser and view notifications, but the "like" option that allows you to view the "liker" (for lack of a better word, lol) will only bring me back to my home page when i click on it. its very frustrating and i have visited several sites, discussions and forums but i find nothing but speculations. Based on other complaints all users are experiencing the same symptoms with no common denominator (model phone/smartphone, carrier). after reading your response i am wondering if the issues are a result of your explanation of "teardrop attacks" I was also concerned because i have not seen anything issued from Facebook acknowledging a problem/solution. Please, i would love some advice on this.
I do have a comment, now that you mention it!Check This Out Too... |
Recent Entries
Look for Answers
Recommended
All Our Categories
Apple iPad Help
Articles and Reviews Auctions and Online Shopping Blogs and Blogging Building Web Site Traffic Business and Management Computer and Internet Basics d) None of the Above Facebook Help Google Gmail Help Google Plus Help HTML, JavaScript and Web Site Programming Industry News and Trade Shows iPhone and Cell Phone Help iPod, Sony PSP and MP3 Player Help Kindle Fire Help Mac OS X Help Pay Per Click (PPC) Advertising Pinterest Help Search Engine Optimization (SEO) Shell Script Programming Tech Support Video Help The Writing Business Twitter, LinkedIn and Social Network Help Unix and Linux Help Video Game Tips and Help Windows PC Help Find Me on Google+ ADT on G+ |
I have some follow on questions to your DoS post... What is the motive for an act like this? Is it just plain old vandalism by geeks with nothing better to do? Or is there something more to it?
Rick.