RSS



Go Back   bit-tech.net Forums > bit-tech.net > Article Discussion

Reply
 
Thread Tools
Old 7th Feb 2007, 14:28   #1
Da Dego
Brett Thomas
 
Da Dego's Avatar
 
Join Date: Aug 2004
Location: Cleveland, OH USA
Posts: 3,906
Da Dego is on a distinguished road
Hackers target core net routers

http://www.bit-tech.net/news/2007/02...e_net_routers/

__________________
"Frankly that seems overkill. iluvtrees2 arguing with spec is the intellectual equivalent of a bunny rabbit taking on a pissed-off lion." - Nexxo
Da Dego is offline   Reply With Quote
Old 7th Feb 2007, 14:41   #2
K.I.T.T.
Hasselhoff™ Inside
 
K.I.T.T.'s Avatar
 
Join Date: Jan 2005
Location: West Midlands, England
Posts: 581
K.I.T.T. is on a distinguished road
....funny it wasn't that long ago that i was talking about a way to 'take down the internet' that involved basically doing what this group of hackers did.

it would have worked what they did but only if they had kept it up to a point at which the DNS records held on the servers and ISP DNS servers lower started to become invalid so to speak (basically 24 hours old IIRC). Then they would have caused some good old fashioned vigalante mayhem but keeping up a DDoS of this severity for anything up to a day without being traced would be not exactly easy.

P.S. as it was said in the article, its not real hacking, hacking is finding and uncovering information that you weren't supposed to see or gaining access to a system purely to have a look around....this was a groups of randoms playing H4X0Rz
__________________
Founder of the RSPCM (see here)
My Blog

_____________________________________________
Q6600 (G0) @ 3.40Ghz | 4GB G.Skill (5-5-5-15 2T) @ 533Mhz | Radeon HD 4870 512MB GDDR5 | DFI Lanparty UT X48-T2R | Galaxy DXX 1000W | 640GB WD Caviar Blue| 1TB Samsung F1 | 250GB Deskstar
K.I.T.T. is offline   Reply With Quote
Old 7th Feb 2007, 14:41   #3
DougEdey
I pwn all your storage
 
DougEdey's Avatar
 
Join Date: Jul 2005
Location: Southampton
Posts: 13,933
DougEdey is just really niceDougEdey is just really niceDougEdey is just really niceDougEdey is just really nice
Call them Crackers Then! Hackers try to make something do what it shouldn't do.
__________________
Burnout: Paradise Stats!XBL: DougEdey Bindi
PSN ID: DougEdey
Twitter

DougEdey is offline   Reply With Quote
Old 7th Feb 2007, 14:50   #4
TheoGeo
What are these goddamn animals?!
 
TheoGeo's Avatar
 
Join Date: Jun 2003
Location: Reading
Posts: 2,205
TheoGeo will become famous soon enoughTheoGeo will become famous soon enough
damn script kiddies, they should leave internet tubes alone
__________________
My Deviance -- My Music
Athlon X2 4400+ -- 2GB Corsair XMS -- Geforce 7800GT -- Abit AN8-SLI -- 24" BenQ fp241w -- 74 gig raptor -- 1.6TB total storage -- 530w tagan psu

Even if you're on the right track, you'll get run over if you just sit there.
TheoGeo is offline   Reply With Quote
Old 7th Feb 2007, 15:39   #5
mmorgue
Supermodder
 
Join Date: Feb 2005
Location: Mos Eisley, in the bar...
Posts: 378
mmorgue is on a distinguished road
Pfft - big deal. I downloaded the internets yesterday. Let them hack it -- I can always reload it...
mmorgue is offline   Reply With Quote
Old 7th Feb 2007, 16:07   #6
randosome
Banned
 
Join Date: Sep 2006
Posts: 226
randosome is on a distinguished road
Quote:
Originally Posted by guardian.co.uk
When a person types the name of a website into a web browser it looks up the location of that site by consulting a root server.
As far as my understanding went

Lets say i look up bit-tech.net - well firstly my PC would look at its DNS records, if it isn't there, it then goes to the next DNS server up (you Router ?) then if that doesn't have the DNS record, it would go up again (your ISP)

So technically, if you look at a site that almost no-one else has looked at, you could actually end up querying the root servers, but unlikely

now if the root servers did crash, then you would still have all those DNS caches all along the way, still unaffected - therefore you probably wouldn't notice, and the root DNS servers would come back up and everything would be OK

Now i think all those DNS caches do update every so often (depending on the TTL set on the domain)
randosome is offline   Reply With Quote
Old 7th Feb 2007, 17:06   #7
K.I.T.T.
Hasselhoff™ Inside
 
K.I.T.T.'s Avatar
 
Join Date: Jan 2005
Location: West Midlands, England
Posts: 581
K.I.T.T. is on a distinguished road
thats exactly why you've got to keep the core routers down for an extended period because once the DNS records go out of date in all the lower DNS caches (which i believe would be about 24 hours until DNS records are invalid because of age) then they'd query the core routers for their routing tables and certain IP's in their DNS database but since the core routers would either be offline or just plain DoS'd then they wouldn't respond and no-one (apart from anyone who knows the IP of the sites they go on) would be able to do anything.....apart from the USA who can pull all the international lines and run on their own, again unless it was a DDoS in which case that may not help either because the attack would be coming form inside the USA as well.....but this is all hypothetical rambling, its not like i was actually going to try it
__________________
Founder of the RSPCM (see here)
My Blog

_____________________________________________
Q6600 (G0) @ 3.40Ghz | 4GB G.Skill (5-5-5-15 2T) @ 533Mhz | Radeon HD 4870 512MB GDDR5 | DFI Lanparty UT X48-T2R | Galaxy DXX 1000W | 640GB WD Caviar Blue| 1TB Samsung F1 | 250GB Deskstar
K.I.T.T. is offline   Reply With Quote
Old 7th Feb 2007, 17:21   #8
Rocket733
Austerity - It's the only way
 
Rocket733's Avatar
 
Join Date: Dec 2003
Location: Indianapolis
Posts: 1,165
Rocket733 will become famous soon enough
Quote:
Originally Posted by K.I.T.T.
thats exactly why you've got to keep the core routers down for an extended period because once the DNS records go out of date in all the lower DNS caches (which i believe would be about 24 hours until DNS records are invalid because of age) then they'd query the core routers for their routing tables and certain IP's in their DNS database but since the core routers would either be offline or just plain DoS'd then they wouldn't respond and no-one (apart from anyone who knows the IP of the sites they go on) would be able to do anything.....apart from the USA who can pull all the international lines and run on their own, again unless it was a DDoS in which case that may not help either because the attack would be coming form inside the USA as well.....but this is all hypothetical rambling, its not like i was actually going to try it
Next time I know the internet is being hacked I'll know who to question.
Rocket733 is offline   Reply With Quote
Old 7th Feb 2007, 19:55   #9
DXR_13KE
Madeira's banana is the best!!!
 
DXR_13KE's Avatar
 
Join Date: Sep 2005
Location: Madeira ; Portugal
Posts: 6,478
DXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to beholdDXR_13KE is a splendid one to behold
i noticed this...... the trucks were not fully loaded that day.
__________________
Renegade X - 0.40 Release! <---- CLICK!
DXR_13KE is online now   Reply With Quote
Old 7th Feb 2007, 23:40   #10
speedfreek
Ultramodder
 
speedfreek's Avatar
 
Join Date: Nov 2005
Location: SE Wisconsin (us)
Posts: 1,439
speedfreek is on a distinguished road
I think it would take too much to take down the internets for too long, it probably made some people a little nervous though.
__________________
New Rig, Quad Core and 8800 baby! Now with 6gb of RAM and a nice even 2tb
now my server|Athlon 64 3700(2.64ghz)|7800gs|2gb XMS 2-3-3-6|2tb+ total HD space... In raid|I have a problem.
New Laptop: HP EliteBook, its fast!
speedfreek is offline   Reply With Quote
Old 8th Feb 2007, 09:06   #11
randosome
Banned
 
Join Date: Sep 2006
Posts: 226
randosome is on a distinguished road
Quote:
Originally Posted by K.I.T.T.
thats exactly why you've got to keep the core routers down for an extended period because once the DNS records go out of date in all the lower DNS caches (which i believe would be about 24 hours until DNS records are invalid because of age) then they'd query the core routers for their routing tables and certain IP's in their DNS database but since the core routers would either be offline or just plain DoS'd then they wouldn't respond and no-one (apart from anyone who knows the IP of the sites they go on) would be able to do anything.....apart from the USA who can pull all the international lines and run on their own, again unless it was a DDoS in which case that may not help either because the attack would be coming form inside the USA as well.....but this is all hypothetical rambling, its not like i was actually going to try it
even then, if the lower DNS servers don't get a response, their not exactly just going to throw out their DNS records are they ?

So what would have thought would happen is that some pages wouldn't work because the DNS would no longer have the right ip, but most of the Internet would still be fine
Unless of course the core DNS servers were off for like a month, or a year
For eg, a site like bit tech - i think they have probably only ever had 1 ip, unless it changes there shouldn't be a problem
randosome is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT. The time now is 00:27.
Powered by: vBulletin Version 3
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.