Black Hat USA 2013 - Lessons from Surviving a 300Gbps Denial of Service Attack

By: Matthew Prince

[crazyvet]

I did a 300pb/s ddos with a 1973 Texas Instruments calculator routed through my Commodore 64.

[jackv.z]

Summary: Hi I make money stopping ddos attacks, I will now explain how to perform a ddos

[j.b.]

At 27:00 he mentions 'Anycast.' Anycast is still around protecting networks from DDOS attacks. It's still imperfect, yet it apparently still works in the same manner. And yeah, I am catching up some on my cyber stuffs.

[MrEndzo]

I wonder what kind of number they do these days.

[MrNullGaming]

Simply a NTP attack these are as easy as anything scan for the open lists on the server with another tab open attacking, scanning for lists takes a few days but results are extreme

[ChristopherGray]

How does it feel when a 15 year old kid takes down your service? Must be embarrassing.

[goeiecool]

So NOBODY is going to comment on the announcer saying gigabyte instead of gigabit? It's right at the start of the video.

[pavelyankouski]

I wonder is it possible to use alternative router if the original was under attack or some critical packet loss, like uninterruptible power supply unit ? So just switch to an another source of the ethernet. I mean "ups" is existing, why there is no "uis"

[cipheroth]

"Stunningly Simple" of course... for that reason it is not fixed

[anonymous-diqg]

is there anyway a large gameserver like gta 5 on psn could be ddos'd? what kind of ddos protection do they have? i know theyre servers are always going down for no reoson is it possibly ddos?

[destrierofdark_]

Someone should create a cyclic DDoSer that basically nukes every open resolver based on this list, with some of the packet information being a "you're running an open resolver, see this link for more" and then basically have that link be instructions on how to close their resolver, essentially as a mechanism of hard peer pressure to get as many open resolvers to a closed status as possible. And if you disagree, I understand, but vast problems require respectively equal drastic measures.

[duskrisergfx]

One time I had a backdoor on my computer, and it came with a virus that took the name of CloudFlare, while the hacker that put the virus on my computer DDoSes me every few hours. No joke, I did have problems with them because of it.

[Exsyting]

hahaha i live in Mn but damn I wonder how many terabytes of data could be sent if a big botnet took control and actually could spoof a target???

[ogamibirdflu]

56:04
That accent...is it French? PseudoPalestinian? Something else?

[pavelyankouski]

This is why singleplayer mode still is the best choice for a game developers. Lans is almost dead, but I think "private" or "vip" lans could be a good alternative of the common internet. Internet became boring or better to say is an experimental place to clown out everybody

[privateserver]

Guys i will tell you how to secure from ddosers this doesnt work for web but it works for pc so ok if you want to secure your network you need to configuard your network that you need to enter first mac_version this isint mac windos.i mean when you confirm the network the ddoser will have no access to ddos you his sent packets will disable it but if you buy roater and dont configuard it when you join mc.cs. or some web or game the owner will have your ip and he can ddos you and turn of your network.so i mean you need first to know how ddos works to protect you self

[ryancampos]

Duvildo you guys knocks my IP 189.1.172.204

[JamesBond-xlnt]

thanks to this, i crash game servers super quickly :)