Linked by David Adams on Tue 28th Jun 2011 15:35 UTC, submitted by HAL2001
Thread beginning with comment 478955
To view parent comment, click here.
To read all comments associated with this story, please click here.
To view parent comment, click here.
To read all comments associated with this story, please click here.
sagum,
"If you look at the LOIC that the anonymous group use, they target a website to request pages that take up vast amounts of resources, be it memory, server side scripting or database load."
"In this instance, just a few people (sometimes even 1 person) can take down a website simply because of bad code."
Believe me when I say that I'm a huge advocate of running efficient code. However you have to admit that depleting the server of resources by running useless (yet valid+legal) queries is not nearly the same thing as taking over the server through a security vulnerability.





Member since:
2006-01-23
There's no connection between bandwidth limitations and data security. If you can't keep up with the attacker/botnet, then your dead. It doesn't indicate anything about bad security practices.
Except these recent DDoS attacks haven't been just about raw fragmented packets hitting the server with more bandwidth then the server can handle.
If you look at the LOIC that the anonymous group use, they target a website to request pages that take up vast amounts of resources, be it memory, server side scripting or database load.
An example would be searching in the help section of a website and searching for a common word, or even letter such as 'a' and the search results taking several seconds per request due to high CPU time or Database load on the servers. In this instance, just a few people (sometimes even 1 person) can take down a website simply because of bad code.