87 Comments
- inactive, on 10/12/2007, -9/+122The series of tubes are clogged. Someone get a plunger.
- saintdesy, on 10/12/2007, -1/+72This is EXACTLY why I don't buy into DNS!
Everyone should 64.191.203.30 this story! - Phatt138, on 10/12/2007, -2/+63Absolutely. You'd just have to title the article, "Incredible! Addictive Flash Game Where Bush Bashes Linux Before Being Hit With New Compound Rubber Tire With Integrated Sensors After it Flies From Jet-Car Driven by Top Gear's Richard Hammond - Kevin and Alex Comment!"
I'd digg it. - sporkmonger, on 10/12/2007, -2/+59You mean a DOS attack? The digg effect has little to do with DNS.
- HalFTW, on 10/12/2007, -3/+54Quick, everyone copy down diggs IP. :)
- BGog, on 10/12/2007, -3/+52Actually if the root dns servers when down we would be largely uneffected for quite a while. You would not be able to register new domain names but the beauty of the DNS system is that the namespace is actually cached on 1000s of DNS servers around the world. If they fail to get updates from the root they will simply continue to feed from their cached copy of the database. In addition if they were all taken out, I believe they have the ability to simply promote different dns servers with a good copy of the database to a root position.
Now I'm not saying that this isn't a big deal because it is but the internet is designed to route around problems. That includes a complete failure of all root DNS servers.
The exception to this is that there are some ISPs who do not setup their dns servers properly. They feed directly from the root servers instead of from another server upstream from them. If they do not have the options on their dns server setup properly, then a loss of the root servers could have an impact on those ISPs and their customers.
Anyway, don't panic. There isn't a single point of failure. Except perhaps digg. If digg went down civilization WOULD end. Really... it would... - jesuswilkinson, on 10/12/2007, -4/+42For a rough idea of what would motivate people to do something like this, read http://www.dennismoran.org/media/stacks.msnbc.com/news/376219.html and imagine what an effective denial of service attack on the .com/.net root servers would be like. One where the DoS traffic is valid DNS requests with spoofed source addresses, combined with UDP-smurf amplifiers randomly. Originating from a global botnet. Investigators would have a hard time investigating when the world is falling apart around them because no e-mail works anywhere on earth due to DNS timeouts, and the attack is left to run until every zombie computer is traced back to its physical location and disabled. Imagine trying to trace back zombies when the only traffic that they're sending out is legitimate DNS requests.
- dd240sx, on 10/12/2007, -5/+33Somebody was bored
- EBFoxbat, on 10/12/2007, -2/+27While designed for uber-redundancy as to survive a nuclear attack,the interweb truck seems to have hit a pothole. No flat tire though.
Better luck next time South Korean 1337 []-[] Ax0r5. - Egoist, on 10/12/2007, -0/+25The root servers are designed so that 2/3rds of them can be offline and you wouldn't notice. The RFC regarding the root servers is considered the bible of redundancy design.
- latova, on 10/12/2007, -3/+24Using the internet... to kill the internet?
- dmsean, on 10/12/2007, -0/+21I think somebody (South Koreans) were mad because they can't sell WoW gold on eBay anymore.
- darthmdh, on 10/12/2007, -0/+19According to John Crain from ICANN (nice guy btw, met him irl) the attacks have been traced (so far) to South Korea.
http://www.breitbart.com/news/2007/02/06/D8N4H5L80.html - LilRabbitFooFoo, on 08/11/2008, -1/+20You didn't include the words "Apple" and "iPhone". :)
- SteaminTmann, on 10/12/2007, -1/+19yea this really makes me mad, I wanted to read this article, is it me, or has duggmirror been sucking lately?
- Insaneo, on 10/12/2007, -0/+17@kevbell
Pretty sure that would be North Korea.
But Keep Trying. - Ambicar, on 10/12/2007, -1/+16@greenjohnsmith
What we have here is a failure to communicate. How exactly did you manage to become interested in his story, get into the comments, get this far down IN the comments, not understand the joke, fail to even try to figure out the joke and then post a response? I certainly hope you are not in IT for a living, because if so your troubleshooting skills are, shall we say, lacking. - r00tus3r, on 10/12/2007, -2/+14The fact that he got so many diggs is kinda scary. I thought digg users were much more knowledgeable.
- sirdaz, on 10/12/2007, -3/+14@greenjohnsmith:
Type it into your browser.. it's the IP address for digg.com... - dtfinch, on 10/12/2007, -0/+11Meanwhile, dnsmon.ripe.net is experiencing the largest attack in its entire history.
- olego, on 10/12/2007, -2/+13Fortunately, because DNS has so much caching hierarchy, and because there are 13 root servers, taking down 2 of them for 12 hours has little effect on the overall Internet. This is nothing compared to Slammer.
- ElGuano, on 10/12/2007, -0/+10You don't need a lot of computers - you just need to control a lot of computers.
I remember stories about N. Korea's military "hacking army." I wouldn't dismiss them as a potential threat... - Jubalicious, on 10/12/2007, -2/+11what's a digg.com?
- tange1, on 10/12/2007, -2/+1048 diggs and its down? Duggmirror missed it..
- sirloin, on 10/12/2007, -4/+11You want to take them down?? post them on digg
- EBFoxbat, on 10/12/2007, -2/+9Yeah, that was a b movie plot.
- stisaac, on 10/12/2007, -0/+7You forgot about the attractive digg models in the background.
- spiker611, on 10/12/2007, -35/+42Ironic how digg does it's own DNS attack, on an article about a DNS attack.
- Ambicar, on 10/12/2007, -1/+8One of my favorite comebacks when working is when some secretary or something walks up to me and says, "The Internet is Down". My response is, "The WHOLE Internet?" Man are there gonna be some people freaking out over that! They never get it, but the look on their face is always a good one.
- ABadInAlbany, on 10/12/2007, -0/+6what's that one constant red line shown on all the graphs at 67 avg unanswered queries?
- drilldown, on 10/12/2007, -0/+6OK, who posted the root DNS server backbone story on DIGG?
- YellowJKT, on 10/12/2007, -0/+6ok. who was the fool who tried to download all of the intarwebs pr0n at once?
- jon3k, on 10/12/2007, -0/+6@BGog
That's not entirely true. You would only be able to visit sites that were cached by your service provider. Our service provider doesn't offer recursive DNS for our primary internet circuit (fiber metro-e), and I wouldn't use it if they did, so we provide recursive resolution with name servers in house. If the root name servers were unavailable, I would only be able to provide my clients with recursive resolution for addresses that were in my cache. It's silly to think that most (or any) provider would have a complete table of the entire Internet domain space.
Personally I prefer not to rely on my service provider to offer recursive resolution, I can do that just fine myself, thanks. - lowerdown, on 10/12/2007, -0/+6someone get a big beach ball and throw through those tubes. need to get them cleaned out so ted stevens can download the entire internets
- dmsean, on 10/12/2007, -0/+5I think all digg users care about is the point...details get lost on them
- inactive, on 10/12/2007, -0/+5Digg's IP 64.191.203.30
- rubicante, on 10/12/2007, -0/+5It wasn't South Korean hackers attacking us, it was someone's bots in South Korea.
All of South Korea uses Windows with ActiveX enabled, so you'd expect that.
http://digg.com/linux_unix/SEED_How_South_Korea_s_Encryption_Standard_is_Holding_the_Nation_Back - inactive, on 10/12/2007, -2/+6Ultra slow to respond. Here are a couple grabs:
http://www.glowfoto.com/static_image/07-002208L/9063/jpg/02/2007/img3/glowfoto - kevbell, on 10/12/2007, -0/+4Wow! that was almost as exciting as watching my clothes go out of style. took a while to load, though, must be under attack.
- Pelapp, on 10/12/2007, -0/+4Dam, 55 comments, and only 3 or 4 of them add something to the story... (Yes I know, but they started it!)
- jon3k, on 10/12/2007, -0/+4*raises hand*
that's my bad :/ - TDot1980, on 10/12/2007, -2/+6ALERT THE INTERNET!
- FidelBlack, on 10/12/2007, -1/+5Not as LEE7 as hacking a gibson!!
- widman, on 10/12/2007, -0/+4@alternateheaven "Them"? Who are you talking about? There are more and more script kiddies and crackers every day, but it feels like less and less knowledgeable hackers. Or they are being hired by Google to do some lame services :)
- pinesol101, on 10/12/2007, -5/+9digg can and probably has been used as a tool for a hacker to knock someones site down..
- ClaiE, on 10/12/2007, -0/+3In this domain, not only North Korea has a hacker Army.
- Sethwm2, on 10/12/2007, -7/+10Yeah this is not good... anything affected yet?
- jon3k, on 10/12/2007, -0/+3No, actually everything he said is true. Well I can't tell you for sure if he was attacked specifically, but it's pretty common these days to see a constant stream of ssh brute force attacks from APNIC address space.
North Korean counterfeiting ("Super Dollar"):
http://www.rferl.org/featuresarticle/2005/11/64927a05-f097-4a30-a7f9-c18ca93141a7.html
North Korean Hacker Army:
http://www.wired.com/news/politics/0,59043-0.html - jon3k, on 10/12/2007, -0/+3@Ambicar
Just imagine how many lookups AOL's name servers perform a second. Trust me, there are name servers which generate hundreds, possibly thousands, of requests of the root name servers each SECOND. - aeonoftime, on 10/12/2007, -2/+4Damn Ted Stevens is defragging that interweb thingy again.
-
Show 51 - 87 of 87 discussions



What is Digg?