Linked by David Adams on Tue 28th Jun 2011 15:35 UTC, submitted by HAL2001
Thread beginning with comment 478913
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.
MORB,
"They do have a point, though. All those companies that got hacked had crappy security yet are always demanding personal information from their customers to use their products."
In so far as the data breaches expose a vulnerability which the company then fixes, then yes the company's security could benefit in the long term. There's nothing like an attack to raise awareness. However in context of the piece quoted, the vendor specifically mentions that DDoS encourage better data security, which is idiotic.
There's no connection between bandwidth limitations and data security. If you can't keep up with the attacker/botnet, then your dead. It doesn't indicate anything about bad security practices.
...in context of the piece quoted, the vendor specifically mentions that DDoS encourage better data security, which is idiotic.
There's no connection between bandwidth limitations and data security. If you can't keep up with the attacker/botnet, then your dead. It doesn't indicate anything about bad security practices.
There's no connection between bandwidth limitations and data security. If you can't keep up with the attacker/botnet, then your dead. It doesn't indicate anything about bad security practices.
Except these recent DDoS attacks haven't been just about raw fragmented packets hitting the server with more bandwidth then the server can handle.
If you look at the LOIC that the anonymous group use, they target a website to request pages that take up vast amounts of resources, be it memory, server side scripting or database load.
An example would be searching in the help section of a website and searching for a common word, or even letter such as 'a' and the search results taking several seconds per request due to high CPU time or Database load on the servers. In this instance, just a few people (sometimes even 1 person) can take down a website simply because of bad code.





Member since:
2005-07-06
They do have a point, though. All those companies that got hacked had crappy security yet are always demanding personal information from their customers to use their products.
People should be happy that those security holes weren't found first by more malicious people than lulzsec.