Lizard Squad selling DDos software for $5.99

[Statboy]

http://www.pcmag.com/article2/0,281...5E763A7EF14B0F47B8D61B0E96?mailing_id=1138831
First off how the hell is this legal? Does anybody else think these guys are criminal scum that need to be thrown in prison for a very long time?

 

[Geoff]

I'm pretty sure this ISN'T legal. And yeah, they should be thrown in prison considering the damage they have already caused. The FBI reportedly are investigating it.

 

[lonesome killer]

People who do this type of stuff are trolls. Ignore them and they'll stop. They got the whole Internet talking and therefore are winning.

 

[Reechard]

While I agree that it sucks, I must say it's refreshing to have a small group of people bring a few of these corporate giants to their knees with very little effort. We've reached a point where these people have become very complacent about security because "We're huge, therefore we're untouchable", and proving them wrong is kinda nice. Sony has had 2 or 3 *enormous* security breaches in the past few years, and while yes, these guys are doing something illegal and should be held accountable, I feel like there are some big business types that also need to be held accountable for their gross negligence. These attacks pretty much just kept the security issues of these companies in the light rather than allowing them to be swept under the rug with the previous ones.

 

[lonesome killer]

All they did was DDOS attack Playstation Network and Xbox Live over the Christmas day. They had them both down for around 24-48 hours. That's hardly a security threat. And the only real way to be more defensive against DDOS is to have ddos protection software/hardware and maybe more servers. That exra cost is going to be put on the consumer. These attacks are nothing but poor attempts of attention seeking whores. They promised to stop the attacks if a certain # of people subscribed to their Twitter page, but when that number was met they didn't stop. It's just childish behavior is all.

 

[Statboy]

I feel like there are some big business types that also need to be held accountable for their gross negligence.

This isn't the way to hold business accountable. Google for many years has had some of the shittest security around, so I held them accountable by downloading google blocking apps, blocking ads when I had to use google, and generally avoided the use of google as much as possible. The city of LA fired google and ripped up a contract (to use google cloud to store data) about 3-4 years ago due to google's lack of security. That is how you hold businesses accountable, we can't as a society accept criminal/attention seeking behavior simply because we have no sympathy for the victim.

 

[VintagePC]

All they did was DDOS attack Playstation Network and Xbox Live over the Christmas day. They had them both down for around 24-48 hours. That's hardly a security threat. And the only real way to be more defensive against DDOS is to have ddos protection software/hardware and maybe more servers. That exra cost is going to be put on the consumer. These attacks are nothing but poor attempts of attention seeking whores. They promised to stop the attacks if a certain # of people subscribed to their Twitter page, but when that number was met they didn't stop. It's just childish behavior is all.

DDoS protection is VERY difficult. It can't be done effectively in software on the target (those packets are STILL hogging all your bandwidth), and the problem with doing it in hardware is very similar, unless you're high up in the chain (e.g. at an ISP) where you can make use of such hardware to filter and discard packets/IP ranges before they clog the narrower bandwidth links of the "last mile". Even then... the sheer volume of it is often a problem... and why the primary solution is often just to nullroute the IP - which means legitimate users are also blocked.

 

[lonesome killer]

DDoS protection is VERY difficult. It can't be done effectively in software on the target (those packets are STILL hogging all your bandwidth), and the problem with doing it in hardware is very similar, unless you're high up in the chain (e.g. at an ISP) where you can make use of such hardware to filter and discard packets/IP ranges before they clog the narrower bandwidth links of the "last mile". Even then... the sheer volume of it is often a problem... and why the primary solution is often just to nullroute the IP - which means legitimate users are also blocked.

I don't know much about networking, you explained it better than me. A lot of gaming forums are full of gamers mad at Microsoft and Sony for not fixing their problem during the holidays. They don't understand that the only way to fix this problem is to either block a whole section of IPs or have some kind of unreasonable amount of network securities, and those would cost tons of money. And no matter how much you may think Microsoft or Sony loves their gamers, in the end it boils down to $$$ and corporations don't like spending $$$. They pass on as much of the costs to the consumers as they can.

 

[Arron Dominion]

Surprised with the doxing of Lizard Squad that they are still a thing.

There are much better ways than DDOSing for the lols to stick it to corporate entities. It also makes it very frustrating for people that legitimately enjoy the services that get DDOS'd (take what happened to Xbox Live and PSN recently. Personally couldn't play Destiny for the first time during the holidays in downtime due to this).

Also those tools are not legal, so hopefully that paper trail will get dumb people trying to buy the tool, and Lizard Squad in the end.

 

[English]

Don't even get me started on doxing. What another horrible and immoral act that is now becoming common place and accepted among internet users.

 

[Reechard]

Yeah.... Doxing is pretty much pure evil. There's no excuse for that, it's like putting a hit out on someone.

I'd like to further clarify that Microsoft and Sony are at (or should be at, if they aren't) the *highest* tier of bandwidth available. If a DDoS is able to take it down, it is purely because they have a crappy infrastructure. We deal with medium DoS attacks regularly at my company, and they really don't effect the whole network until they're enormous. If we had the resources available to Sony and Microsoft, it wouldn't be an issue.

I'd like to reinforce this idea by mentioning that these same people pulled the same kind of attack on Steam yesterday. It's been reported that 1 server kinda went "hrrrnghh" for about 15 minutes before its firewall caught up and it was fine too.

I'd also like to rebut the "LA fired Google" thing... I don't *care* if one giant corporation fired another giant corporation. This was about a small group of 10 or 15 people causing major grief for a couple of giant corporations with *NO* effort. This is equivalent to people putting a cow on the roof of the high school. It shows the administration that there are real problems that need solutions, and that their security is lax and complacent. We need things like this to happen from time to time, or something legitimately bad is going to end up happening.

tl;dr

 

[Statboy]

UPDATE: The FBI is has also caught up to "Ryan," though sources differ on whether "Ryan" was arrested or merely questioned. Lizard Squad wrote on its Twitter account at 6:13 pm EST on December 31 that "Ryan was arrested for being caught with his massive amount of laundered carder money while he was hopping countries."

This was added onto the end of a news article about the British member of lizard squad ( being caught (Ryan is Finnish). "Massive amount of laundered carder money" that's not some pranking kid, they also cost these companies that they hit hundreds of millions in lost revenue and damages. These people are criminal scum. Also LA isn't a corporation, they're a government entity, dealing with large amounts of money does not make you a corporation, though apparently that's all it takes for people to jump to the conclusion that you're evil.

 

[VintagePC]

Yeah.... Doxing is pretty much pure evil. There's no excuse for that, it's like putting a hit out on someone.

I'd like to further clarify that Microsoft and Sony are at (or should be at, if they aren't) the *highest* tier of bandwidth available. If a DDoS is able to take it down, it is purely because they have a crappy infrastructure. We deal with medium DoS attacks regularly at my company, and they really don't effect the whole network until they're enormous. If we had the resources available to Sony and Microsoft, it wouldn't be an issue.

I'd like to reinforce this idea by mentioning that these same people pulled the same kind of attack on Steam yesterday. It's been reported that 1 server kinda went "hrrrnghh" for about 15 minutes before its firewall caught up and it was fine too.

I'd also like to rebut the "LA fired Google" thing... I don't *care* if one giant corporation fired another giant corporation. This was about a small group of 10 or 15 people causing major grief for a couple of giant corporations with *NO* effort. This is equivalent to people putting a cow on the roof of the high school. It shows the administration that there are real problems that need solutions, and that their security is lax and complacent. We need things like this to happen from time to time, or something legitimately bad is going to end up happening.

tl;dr

Soooo.... how much you wanna bet Microsoft is running windblows server?