‹ BackHN Continuity

Thread

Three Days in August: What a DDoS Attack Exposed in Our Network

19 points · 25 comments · nine_ch

  1. jareklupinski · · focus · HN ↗
    > There was no unauthorised access and no compromised systems. This was an overload attack, not an intrusion.

    "AI said it's all good. There are no attackers within our walls."

    1. nine_ch · · focus · HN ↗

      [dead]

    2. ErroneousBosh · · focus · HN ↗
      I sometimes work on a system so byzantine and poorly-documented with so many horribly obsolete systems - they have Windows XP machines all over the place - that there's no way it hasn't been popped.

      I think it's safe though.

      I think various groups have popped it, taken a look around with growing expressions of horror on their faces, and gotten back out as quickly as they could. Nah man, no way, not touching that, don't want my prints on this particular gun, there's no way this is legitimately how they've left it, this has to be some kind of a setup.

      1. BLKNSLVR · · focus · HN ↗
        Security by obsolescence layered with security by complexity.
        1. jareklupinski · · focus · HN ↗
          it's not enough to salt your hash; you must mold your Swiss Cheese
          1. ErroneousBosh · · focus · HN ↗
            It's encrypted using SHA-255; in theory half as secure as SHA-256 but in practice they spend ten times long trying to work out why nothing is working properly.
            1. jareklupinski · · focus · HN ↗
              you can fit 255 into a byte tho, giving you room to do more encryption
              1. ErroneousBosh · · focus · HN ↗
                Being semiserious I do wonder how hardcore you could do encryption in 8-bit processors. Like, how hard would it be to keep "nation state" level cracking out of your private messages for a week or so?

                You could probably generate elliptic curve keys pretty effectively even with an Apple II, at least enough that you'd have to throw a couple of dozen Israels worth of intelligence agency at it to pop it.

        2. cube00 · · focus · HN ↗
          Enterprise security in depth.
    3. [deleted] · · focus · HN ↗

      [deleted]

Open on Hacker News to reply ↗

Unofficial Hacker News client; not affiliated with Y Combinator.