Xbox LIVE Attack Disrupts Service, Group Threatens More For Christmas

[+Audioboxer Subscriber²]

Crappy for Live users to weather this storm, but I'm sure they'll jump back to PSN soon enough...lol.

[HawkMan]

 

 

Another thing is the FBI can't take illegal sites of it either.

 

Which I personally think is great.

 

sooo... you haven't payed much attention to the news the last few years

[xrobwx71]

Great map showing all cyber attacks and their origins.

http://map.ipviking.com/

[Torolol]

good luck dealing with chinese attackers

[DreadPirateRoberts]

sooo... you haven't payed much attention to the news the last few years

I really don't know what you mean by that.

 

If your talking about all the things on there like child porn then yeah of course that's bad but there is also a lot of good that comes out of it as well.

 

For example there was a woman in Pakistan who couldn't communicate with her family because the Taliban would have tracked her and killed her because she was important or something but then Tor came along and she couldn't be tracked so she could communicate with her family again.

 

So there is a lot of bad that comes out of being anonymous but there is also a lot of good 

[HawkMan]

the FBI have closed sown several large shadow networks in the last few years. so yea, they can.

[DreadPirateRoberts]

the FBI have closed sown several large shadow networks in the last few years. so yea, they can.

You clearly don't know what your talking about.

 

Yes they have taken down sites on Tor but it took them 3 years to take down one of them and the owner was even arrested but like 2 weeks later one of the site administrators got the site back up and now it will probably take them another 3 years to take it down once again.

 

There was another site that was taken down and the owner was never caught and he stole the site back from the FBI by the next day and that's currently up and has been since 2010.

 

If you want  to argue a point make sure you know what your talking about mate.

[Vandalsquad]

You clearly don't know what your talking about.

 

"2 weeks later one of the site administrators got the site back up and now it will probably take them another 3 years to take it down once again."

 

I don't think you know what you're talking about. You mean SR2.0 which they had infiltrated and could of taken down the first day they pleased and was taken down a year to the date? Or some darknet exploit sites the FBI couldn't give a flying about to begin with because all exploits are posted just as widely on the open net.

 

There is obviously holes in TOR that the FBI continually use to locate the actual server locations hosting these websites. This has been proved time and time again even more recently with the amount of sites seized. Are all admins arrested? No, because some have good enough ops and security measures in place to not allow them selves to be located as easily. The same methods people used before they had TOR to hide behind. It's nothing but an extra layer of security for the average consumer. 

 

Thinking lizard squad is just hiding behind TOR from their mothers basement? Nope. One thing Microsoft has proved more then capable of at over the years is dismantling these kind of bot nets, hopefully this is another one they add to the list.

[francescob]

If Microsoft bothered doing something to address the true #1 security blackhole on Windows (Java) maybe those large botnets would have never existed. Apple had the balls to kick Adobe Flash in the nuts and most websites had to adapt despite the small marketshare Apple has, why can't Microsoft do the same? Also they could have backported the system-wide SmartScreen scan on Windows 7 as well to stop all those websites hijacking web searches for popular software.

[DJGM]

If Microsoft bothered doing something to address the true #1 security blackhole

on Windows (Java) maybe those large botnets would have never existed.

 

How can Microsoft do anything about the security vulnerabilities in Java, when they have nothing to do with it?

[francescob]

How can Microsoft do anything about the security vulnerabilities in Java, when they have nothing to do with it?

They make the browser, they can block it by default for all users. I don't recall Mozilla or Google having any issue adding forced version check and click-to-play by default (feature pushed to all users) on all those annoying plugins. Mozilla went as far as turning some of the Java plugins permanently off no matter what the version (like the JDK deployment plugin). Also MS already did tighten web browser security a lot with XP SP2 and now, with java being used only on an extremely restricted number of websites, they can easily get rid of it once for all.

[DreadPirateRoberts]

I don't think you know what you're talking about. You mean SR2.0 which they had infiltrated and could of taken down the first day they pleased and was taken down a year to the date? Or some darknet exploit sites the FBI couldn't give a flying about to begin with because all exploits are posted just as widely on the open net.

 

There is obviously holes in TOR that the FBI continually use to locate the actual server locations hosting these websites. This has been proved time and time again even more recently with the amount of sites seized. Are all admins arrested? No, because some have good enough ops and security measures in place to not allow them selves to be located as easily. The same methods people used before they had TOR to hide behind. It's nothing but an extra layer of security for the average consumer. 

 

Thinking lizard squad is just hiding behind TOR from their mothers basement? Nope. One thing Microsoft has proved more then capable of at over the years is dismantling these kind of bot nets, hopefully this is another one they add to the list.

LOL of course I know that Lizard squad didn't just use Tor but I thought the guy I was telling this to didn't know much on the subject so I didn't go in depth but the sites I was talking about where Silkroad which has been taken down a number of times and I was only talking about one of them times and the second site that I was talking about was Doxbin 

[+Audioboxer Subscriber²]

Best thing for MS to do is weather the storm and say NOTHING publicly other than apologise to Live users. Same goes for us, don't interact or sling mud at the Twitter account. Lizard will get bored eventually, and move back to PSN lol. The most vocal companies and upset fans are how such scum get their kicks.

[GotBored]

Thinking lizard squad is just hiding behind TOR from their mothers basement? Nope. One thing Microsoft has proved more then capable of at over the years is dismantling these kind of bot nets, hopefully this is another one they add to the list.

 

How are Microsoft more than capable at dismantling these kinds of botnets? I'm genuinely curious as lizard squad seem to have taken down microsoft and XBL servers more than a handful of times. Also because of the nature of botnets being malware infected computers which are being controlled in one way or another for these types of attacks which makes it very difficult to protect yourself/your servers/other online services against it as the I.P addresses aren't going to have the same origin, nor be similar to each other and blocking the i.p addresses would result in blocking innocent victims of malware/trojans. If the botnet is big enough it doesn't even need to use a backdoor port or query the servers it can take down servers or make them un-accessible just by overloading them via regular access means.

[DrunknMunky Veteran]

How are Microsoft more than capable at dismantling these kinds of botnets? I'm genuinely curious as lizard squad seem to have taken down microsoft and XBL servers more than a handful of times. Also because of the nature of botnets being malware infected computers which are being controlled in one way or another for these types of attacks which makes it very difficult to protect yourself/your servers/other online services against it as the I.P addresses aren't going to have the same origin, nor be similar to each other and blocking the i.p addresses would result in blocking innocent victims of malware/trojans. If the botnet is big enough it doesn't even need to use a backdoor port or query the servers it can take down servers or make them un-accessible just by overloading them via regular access means.

 

Microsoft have taken down some very high profile botnets over the years. If anyone is capable of doing it, they are.

 

Taking down a particular botnet is only part of the problem though. Catching the culprits is the real end goal

[spenser.d]

How are Microsoft more than capable at dismantling these kinds of botnets? I'm genuinely curious as lizard squad seem to have taken down microsoft and XBL servers more than a handful of times. Also because of the nature of botnets being malware infected computers which are being controlled in one way or another for these types of attacks which makes it very difficult to protect yourself/your servers/other online services against it as the I.P addresses aren't going to have the same origin, nor be similar to each other and blocking the i.p addresses would result in blocking innocent victims of malware/trojans. If the botnet is big enough it doesn't even need to use a backdoor port or query the servers it can take down servers or make them un-accessible just by overloading them via regular access means.

 

http://www.theverge.com/2013/11/14/5104122/microsoft-cybercrime-center-redmond

[123456789A]

Great map showing all cyber attacks and their origins.

http://map.ipviking.com/

 

Microsoft should just launch a nuclear missile at whatever this 1800 Software site is.

[Mr. Gibs]

Great map showing all cyber attacks and their origins.

http://map.ipviking.com/

It's not showing all cyber attacks.

Those are honeypots, basically fake servers that IPViking has set up that pretend to be something they aren't. This is just tracking the attacks against those fake servers, not against the real ones.

[Beyond Godlike]

They better not hit Heroes of the Storm.  I may have to angrily tweet at them and show them who's boss.

[GotBored]

http://www.theverge.com/2013/11/14/5104122/microsoft-cybercrime-center-redmond

They opened a cyber crime investigation wing.. No where does it say they did anything about botnets from your source.

[MikeChipshop Member]

Best thing for MS to do is weather the storm and say NOTHING publicly other than apologise to Live users. Same goes for us, don't interact or sling mud at the Twitter account. Lizard will get bored eventually, and move back to PSN lol. The most vocal companies and upset fans are how such scum get their kicks.

 

Exactly. Ignore the boring twats and you take away their ego payment.

[Skiver Veteran]

They opened a cyber crime investigation wing.. No where does it say they did anything about botnets from your source.

 

Read again;

 

 

 

Microsoft is unveiling a new Cybercrime Center that?s designed to battle malware, botnets, and other internet crime. The new futuristic facility has been built at the company?s Redmond headquarters as an area to combine Microsoft?s researchers, security experts, and lawyers into a central location. Microsoft has been tackling cybercrime for years, including efforts to take down various botnets, but the new secured facility takes things a step further.

 

This then links to the following article;

 

 

Kelihos botnet suspect 'surprised and shocked' at Microsoft accusations

Kelihos, a network of compromised machines, used to send over 3.8 million spam emails a day at its peak, and Microsoft alleges that Sabelnikov used malware to control and operate the botnet, tricking random web users into joining the network unwittingly. 

 

Unless I am missing someone's point here, both articles refer to MS investigating botnets. 

[GotBored]

Read again;

 

 

This then links to the following article;

 

 

Unless I am missing someone's point here, both articles refer to MS investigating botnets. 

 

All they did was allege that a guy named Sabelnikov (Some russian guy who used to work with an anti-virus company) coded the malware that created the Kelihos botnet and was using the botnets for attacks and such. As for Sabelnikov he was cleared and then a private settlement was made by Microsoft because they wrongly accused him publicly.

[Skiver Veteran]

All they did was allege that a guy named Sabelnikov (Some russian guy who used to work with an anti-virus company) coded the malware that created the Kelihos botnet and was using the botnets for attacks and such. As for Sabelnikov he was cleared and then a private settlement was made by Microsoft because they wrongly accused him publicly.

Maybe so, but like I say, unless I am miss-understanding your point (highly likely) you stated;

 

 

 

They opened a cyber crime investigation wing.. No where does it say they did anything about botnets from your source. 

 

Both articles clearly show they are actively targeting Botnets. Specific cases that have gone through as a success, I will give you, It just seemed like you were suggesting they were doing nothing at all.

[GotBored]

Maybe so, but like I say, unless I am miss-understanding your point (highly likely) you stated;

 

 

Both articles clearly show they are actively targeting Botnets. Specific cases that have gone through as a success, I will give you, It just seemed like you were suggesting they were doing nothing at all.

 

I wasn't suggesting they weren't trying, I was merely stating that they have achieved nothing which would suggest that Microsoft are somehow more than capable of dismantling botnets.