Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Senn Typhos]

Well yeah, the games are a different story, and they all have their own incarnation of Pyramid Head. But in the movie, specifically, I think he's a weirdly benevolent entity. I mean, as benevolent as he can be, being based solely on violent revenge and, rippin' people's skin off and whatnot.

Other iterations of PH are all subject to their own debate.

[Vincent Pryce]

I honestly think the only reason he makes an appearance in the movie that is loosely based on the first Silent Hill game is the fact of the nerdrage from casual Silent Hill fans if he wouldn't have been included in it. And as such there is no actual deepness to it besides how deep his massive blade cuts, but I guess it is fun to speculate still

PS. It's always about penis, and it's never lupus.

[Myrhial Arkenath]

Kyoko, I mean that more generally: complex attacks are cool to come up with (or, in my case, detect), but most scenarios don't need them. It's not a question of whether Lulzsec can do more, but whether (almost) anybody needs to do more.

It's also far more embarrassing for a victim to be taken down / get compromised by a simply strategy like SQL injection. Protecting your input fields and checking all incoming data, plus filtering out html characters goes a long way. But oh no, it requires effort.

Often, it is also a case of sheer incompetence. No offence to anyone, but a lot of people claim they can program and do all the other stuff like security, and believe everything Google tells them about it. Like this time a colleague told me that the javascript checks we had on input fields disabled injection. Yeah, guess what happens if I turn javascript off. Oh hey it still lets me submit this. Oh look I just found a flaw in your code. *SIGH* Sorry, going off on a bittervet rant here.

And then there is the case of negligence. Outdated systems, or companies who have grown so big they don't even know what they are running anymore or what "that box" over there does. Heard a great story recently about an unused phone server which was still connected to the network and had been taken over to serve in a botnet, which was found out when the botnet was used to take down other machines in the network it lived in, likely to expand that very net. Yeah, sorry, bittervet, back to my corner with me.

PS: For what it's worth, I don't approve of the whole data stealing thing. That's effing lame. But I do think that sometimes you need to really take out a server to get the effect that people go and take their security serious. v0v Not what LulzSec is about, the whole "for the lulz" thing is totally meh. But in the end they may contribute to something positive, in their unique way.

[BloodBird]

The sinking of the HMS Titanic contributed positively to the ship-building industry and the ways people viewed that need for ugly life-boats blocking that wonderful view. Among many things.

A sad fact of human existence is, we don't ofthen fix shit we are convinced isn't broken until it breaks by blowing up in faces, by then it's usually way to late for whomsoever owned the faces it blew up in.

[Mithfindel]

The thing is, DDoS isn't a "hack" you really can defend against. Well sure, you can invest on routers that filter out the traffic or more hardware for the front-end servers, but then again, it might be possible to flood the trunks connecting your datacenters to the Internet. In EVE terms, DDoS (Distributed Denial of Service) attack isn't a director-level spy or an account takeover. It's a group blobbing with the goal of crashing a node. Most commonly with bots. The solution to "better servers" is having a bigger blob of bots.

The EVE login server - or most login servers, really - are not designed to handle very high peak loads. The usual peak load experienced is a few thousand people contacting the server over a few minutes after downtime or so. With a botnet, you could make that many thousands connecting multiple times a second over an extended period of time. If you scale hardware to deal with that, it's like buying a Ferrari for getting to work fast (on a zone with 60 km/h limit). Allegedly, battle.net has been hit in the past and wasn't having trouble, but that said, Blizzard's systems are designed to handle an order of magnitude or two higher amount of traffic.

[Victoria Stecker]

It would seem that these bastards have now hit my work. <.<   >.>

Actually, no they haven't, but our network drives are down, and that basically means that the quotations dept (me and a couple other people) can't do our jobs. At all. Period.

Hurrah for work-sanctioned goofing off time. Off to TV Tropes we go!

[Casiella]

DDOS mitigation providers exist, usually in the form of services from tier 2 ISPs. We use them, and quite successfully.

[Aria Jenneth]

Well yeah, the games are a different story, and they all have their own incarnation of Pyramid Head.

Far as I'm aware, it's just "2." He's a fairly specific incarnation of a specific character's specifically fucked-up headspace.

Did I mention he rapes monsters? No?

But in the movie, specifically, I think he's a weirdly benevolent entity. I mean, as benevolent as he can be, being based solely on violent revenge and, rippin' people's skin off and whatnot.

Other iterations of PH are all subject to their own debate.

That would be quite the twist, if true. I'll have to see the movie and get back to you.

[Borza]

I'll never be impressed by these types. Like I said, breaking stuff for the sake of breaking stuff is a pretty weak lifestyle.

Not to discredit the threat. I'm just not gonna make a terror alert for punks. vOv

I have no respect for anyone using the term "lulz", let alone a group putting it in their name.

[Louella Dougans]

it is just another form of feudalism. Just like stone/egg/brick throwing gangs of yobs.

serfs (those without the technical knowledge) have their possessions, livelihoods, health, or even life, destroyed by their feudal overlords, whose only concerns are whether or not things are "funny". The victims are also to blame for their own misfortune too.

the law? pfft. conscience ? pfft. morality ? pfft.

There was mention of the NHS, and how they did not assault it. The amount of "lols" generated would have been lower than they would have liked. "People" would still have laughed, but the numbers who laughed would have been too low.

Just like pushing over gravestones, or painting slogans on people's houses.

Court of public opinion. If people laugh in sufficient numbers, it's acceptable behaviour. If they thought there would be enough people laughing at damaging the NHS websites, then why wouldn't they damage it ?

not pro-free speech either. If they don't like what you have to say, you don't get to say it. Tyranny by other means.

See it everywhere. A video of a person being run over by a train? "Lol, pwnt". No empathy.

it is a big de-humanising routine.


Same things as why people stab other people in  the street, or attack websites. "I don't know why I did it. I think I was bored."

vOv

[Mithfindel]

DDOS mitigation providers exist, usually in the form of services from tier 2 ISPs. We use them, and quite successfully.

CCP is peered with a few top-level providers, so plain amount of pipe isn't - or at least shouldn't be - a concern. Of course, then it just comes to filtering etc., but for nets massive enough, this just moves the bottleneck elsewhere. (Though yes, this will be of immense help when you can whitelist/prioritize clients which are already connected to the server, and just need to filter the rest for flooding and/or improper packets.)

[Casiella]

Right, we use mitigation services that focus on "cleaning" the incoming traffic. I was skeptical but it's worked for us, at least.

[Senn Typhos]

That pic makes me laugh every time I see it and I know it shouldn't...

[Wanoah]

Could be more incoming:

http://www.rockpapershotgun.com/2011/06/15/new-lulzsec-attacks-on-wow-newerth-eve/

Yesterday’s denial of service attacks on Minecraft, Eve Online and League of Legends do not appear to be the end of hacker collective Lulzsec’s attempts to force online games offline. Heroes of Newerth’s login server was named a victim around an hour ago, shortly followed by the group declaring its intention to target Eve again tonight. That may of course be a double-bluff, but keep it in mind if you’re intending to play tonight.

Then, just moments ago, they stated that they were now rerouting calls to their ‘requests’ phone number to World of Warcraft’s customer support line. They claim their line, alleged by some to be a premium rate number, receives between 5 and 20 calls a second at present. Whether this signals an impending attack on WoW itself remains to be seen, but the group currently appear to be focusing efforts on phone rerouting.

[Seriphyn]

it is just another form of feudalism. Just like stone/egg/brick throwing gangs of yobs.

serfs (those without the technical knowledge) have their possessions, livelihoods, health, or even life, destroyed by their feudal overlords, whose only concerns are whether or not things are "funny". The victims are also to blame for their own misfortune too.

the law? pfft. conscience ? pfft. morality ? pfft.

There was mention of the NHS, and how they did not assault it. The amount of "lols" generated would have been lower than they would have liked. "People" would still have laughed, but the numbers who laughed would have been too low.

Just like pushing over gravestones, or painting slogans on people's houses.

Court of public opinion. If people laugh in sufficient numbers, it's acceptable behaviour. If they thought there would be enough people laughing at damaging the NHS websites, then why wouldn't they damage it ?

not pro-free speech either. If they don't like what you have to say, you don't get to say it. Tyranny by other means.

See it everywhere. A video of a person being run over by a train? "Lol, pwnt". No empathy.

it is a big de-humanising routine.


Same things as why people stab other people in  the street, or attack websites. "I don't know why I did it. I think I was bored."

vOv