Traderboersenboard - Das kann Internet ausgeschaltet werden (!) als Akt des Terrors bzw. der Kriegsführung

Traderboersenboard (http://www.f-tor.de/tbb/index.php)

- Politik / Wissenschaft / Weltgeschehen (http://www.f-tor.de/tbb/forumdisplay.php?f=36)

Das Internet kann ausgeschaltet werden (!) als Akt des Terrors bzw. der Kriegsführung

Das hier ist ein unglaublich erschreckender Sachverhalt: Jemand lernt gerade, welche Computer- und sonstigen Rechner-Kapazitäten es (und in welcher genauen Anwendungsstrategie) es braucht, um alle relevanten Internetknoten faktisch auszuschalten.

Dann gibt's keine Kommunikation mehr über Rechner!!!! Dann bricht unsere Wirtschaft in kurzer Zeit zusammen, da diese immer mehr von rechnergestützer Kommunikation und Datenverarbeitung (insbesondere über Cloud-Lösungen) abhängig ist.

Eine längere (Tage, Wochen) und umfangreiche Störung des Internets bringt so gut wie alle Räder zum stehen und würde zum allgemeinen Notstand der Bevölkerung führen!

Zitat:

Someone Is Learning How to Take Down the Internet
by Bruce Schneier
Hier wohl zuerst erschienen: Lawfare unter diesem Link: https://www.lawfareblog.com/someone-...-down-internet
September 13, 2016

Over the past year or two, someone has been probing the defenses of the companies that run critical pieces of the Internet. These probes take the form of precisely calibrated attacks designed to determine exactly how well these companies can defend themselves, and what would be required to take them down. We don't know who is doing this, but it feels like a large a large nation state. China and Russia would be my first guesses.

First, a little background. If you want to take a network off the Internet, the easiest way to do it is with a distributed denial-of-service attack (DDoS). Like the name says, this is an attack designed to prevent legitimate users from getting to the site. There are subtleties, but basically it means blasting so much data at the site that it's overwhelmed. These attacks are not new: hackers do this to sites they don't like, and criminals have done it as a method of extortion. There is an entire industry, with an arsenal of technologies, devoted to DDoS defense. But largely it's a matter of bandwidth. If the attacker has a bigger fire hose of data than the defender has, the attacker wins.

Recently, some of the major companies that provide the basic infrastructure that makes the Internet work have seen an increase in DDoS attacks against them. Moreover, they have seen a certain profile of attacks. These attacks are significantly larger than the ones they're used to seeing. They last longer. They're more sophisticated. And they look like probing. One week, the attack would start at a particular level of attack and slowly ramp up before stopping. The next week, it would start at that higher point and continue. And so on, along those lines, as if the attacker were looking for the exact point of failure.

The attacks are also configured in such a way as to see what the company's total defenses are. There are many different ways to launch a DDoS attacks. The more attack vectors you employ simultaneously, the more different defenses the defender has to counter with. These companies are seeing more attacks using three or four different vectors. This means that the companies have to use everything they've got to defend themselves. They can't hold anything back. They're forced to demonstrate their defense capabilities for the attacker.

I am unable to give details, because these companies spoke with me under condition of anonymity. But this all is consistent with what Verisign is reporting. Verisign is the registrar for many popular top-level Internet domains, like .com and .net. If it goes down, there's a global blackout of all websites and e-mail addresses in the most common top-level domains. Every quarter, Verisign publishes a DDoS trends report. While its publication doesn't have the level of detail I heard from the companies I spoke with, the trends are the same: "in Q2 2016, attacks continued to become more frequent, persistent, and complex."

There's more. One company told me about a variety of probing attacks in addition to the DDoS attacks: testing the ability to manipulate Internet addresses and routes, seeing how long it takes the defenders to respond, and so on. Someone is extensively testing the core defensive capabilities of the companies that provide critical Internet services.

Who would do this? It doesn't seem like something an activist, criminal, or researcher would do. Profiling core infrastructure is common practice in espionage and intelligence gathering. It's not normal for companies to do that. Furthermore, the size and scale of these probes—and especially their persistence—points to state actors. It feels like a nation's military cybercommand trying to calibrate its weaponry in the case of cyberwar. It reminds me of the U.S.'s Cold War program of flying high-altitude planes over the Soviet Union to force their air-defense systems to turn on, to map their capabilities.

What can we do about this? Nothing, really. We don't know where the attacks come from. The data I see suggests China, an assessment shared by the people I spoke with. On the other hand, it's possible to disguise the country of origin for these sorts of attacks. The NSA, which has more surveillance in the Internet backbone than everyone else combined, probably has a better idea, but unless the U.S. decides to make an international incident over this, we won't see any attribution.

But this is happening. And people should know.

About Bruce Schneier:

Zitat:

I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998. I write books, articles, and academic papers. Currently, I'm the Chief Technology Officer of Resilient, an IBM Company, a fellow at Harvard's Berkman Center, and a board member of EFF.

zitiert aus: https://www.schneier.com/essays/arch...learning_.html

Massive Internet Outage Could Be a Sign of Things to Come

Hackers have shown how they could take down the Internet.
by Jamie Condliffe, October 21, 2016,
https://www.technologyreview.com/s/6...hings-to-come/

DYN: http://dyn.com/about/

Zitat:

The Dyn attack was clearly more than a test, and its severity certainly fits with Schneier’s hypothesis that someone, somewhere is trying to learn how to cause widespread disruption. The question of who is behind attacks like this, though, remains unanswered. Criminals are unlikely to be motivated by such attacks, as there’s little to gain from them other than widespread disruption. That lends some weight to Schneier’s suggestion that a large nation state, such as China or Russia, could be developing large-scale DDoS capabilities. Though it’s impossible to say for sure.

Zitat:

But as the Dyn incident reveals, it still takes time for DNS hosts to recover from attacks. If hackers were to take down several servers at once, the effect could be even more pronounced—a threat that could yet be realized.

Internet outage takes down Twitter, Netflix, PayPal and many of the web's most visited websites

Services like PlayStation Network were caught up in the problems
Andrew Griffin, Tim Walker | @_andrew_griffin | 21.10.2016
http://www.independent.co.uk/life-st...-a7374506.html

Zitat:

A major Internet outage affected many of the world's biggest online firms on Friday, with websites including Twitter, Netflix, Spotify, Reddit, PayPal and eBay down for long stretches. Other services such as PlayStation Network also appeared to be hit by the outage. Google and Facebook were unaffected.

The widespread disruption was the result of a coordinated assault on some of the underlying infrastructure that powers the Internet. Dyn, one of several companies responsible for hosting the crucial web directory known as the Domain Name System (DNS), suffered a sustained so-called “distributed denial of service” (DDoS) attack, leading many people intermittently to lose access to specific sites or to the Internet entirely.

Zitat:

A DDoS attack means hackers hijack vast numbers of internet-connected devices to swamp a victim’s website with so much junk traffic that it is unable to cope. Dyn, based in New Hampshire, said the attack began shortly after 12pm BST. Twitter, Netflix et al were not directly targeted, but the attack on Dyn – which reportedly serves around 30 Fortune 500 companies – affected users’ access to those sites.

Zitat:

“This was not your everyday DDoS attack,” he told the newspaper, whose own website was affected by the incident. “The number and types of attacks, the duration of attacks and the complexity of these attacks are all on the rise,” Mr York warned.{Kyle York = Dyn’s chief strategist}

Zitat:

While DDoS attacks “do not cause permanent damage,” Mr Orans explained, they can temporarily affect communications, sow a sense of chaos and in some cases cause economic effects, for example by attacking retailers during a sale season. “It’s a temporary disruption to make a point,” he said. “But it’s highly inconvenient.” {Lawrence Orans = a research vice president at Gartner specialising in web security and DDoS attacks}

Zitat:

Security intelligence firm Flashpoint reports that the botnet is composed, at least in part, of internet of things devices infected by Mirai malware (see IoT Botnets: There Will Be Pwnage).

Zitat:

The problem is compounded by the burgeoning number of internet-connected devices that continue to be built, for which security seems to be an afterthought. Indeed, security experts say that numerous internet-connected devices - ranging from routers and smart TVs to refrigerators and security cameras - will often be connected to the internet by consumers and then forgotten about, unless they somehow fail. Furthermore, many manufacturers fail to get security updates into consumers' hands, or release any patches at all, often preferring instead to simply ship a newer type of product.

Quelle: Mirai Botnet Pummels Internet DNS in Unprecedented Attack
Mathew J. Schwartz (euroinfosec) • October 22, 2016, http://www.bankinfosecurity.com/mira...-attack-a-9477

##########

Zitat:

Bad news: A hacker has released source code for malware that can be used to automatically find and hack internet of things devices that use default accounts and passwords, then use them to launch distributed denial-of-service attacks. Numerous Linux-based routers, security cameras and digital recorders, among other devices, are at risk and have been compromised in this manner to unleash record-breaking attacks (see Hacked IoT Devices Unleash Record DDoS Mayhem).

Quelle: http://www.databreachtoday.com/blogs...os-army-p-2267
########################################

Digital Attack Map - Top daily DDoS attacks worldwide
http://www.digitalattackmap.com/#ani...17095&view=map
###########################################

https://images-eu.ssl-images-amazon....1400g144dL.jpg https://images-eu.ssl-images-amazon....1Ujl3ysXnL.jpg

Who Shut Down the Internet Friday?

Oct 21 2016, 7:21 pm ET, by Robert Windrem, Ken Dilanian, Tom Winter and William M. Arkin (Richard Greenberg and Pete Williams contributed to this report.)
http://www.nbcnews.com/news/us-news/...friday-n671011

Zitat:

Cyber experts and intelligence officials told NBC News it was too early to determine who was responsible for the cyber attacks that caused massive internet outages across the U.S. Friday, with some saying their analysis pointed to Russia and others saying it could just be "internet vandalism."

Zitat:

Officials said the attacks were largely aimed at internet infrastructure linked to one company rather than specific websites. Nearly all of those attacked were clients of Dyn, a firm that provides domain name system services and other internet infrastructure services. However, according to one official, there was also targeting of some individual websites.

Zitat:

A senior intelligence official told NBC News that the current government assessment is that the attacks were a "classic case of internet vandalism," and did not appear to be state-sponsored or directed.

But two other senior intelligence officials told NBC News that while forensics on the attacks are far from complete, initial analysis points to the attacks being "Russian in origin" -- based on the methods and magnitude.

Zitat:

Shawn Henry, chief security officer of the cybersecurity firm Crowdstrike, (...) said what was most ominous about the attacks is that they reveal that the U.S. is seriously vulnerable to cyber attack: "This demonstrates the fragility of the network and infrastructure."

Zitat:

Andrew Komarov of InfoArmor told NBC News he didn't see any sign of Russian involvement at all, whether state or private. He noted that the botnet used in the attack, "Mirai," was developed by an English speaker and that he had found no link between "Mirai" and the Russians, who have their own much more sophisticated methods.

He said the attacks seemed more consistent with the methods used by the hacking group known as Lizard Squad, two of whose members, both teens, were arrested earlier this month in the U.S. and the Netherlands and charged in connection with DDoS attacks.

Zitat:

A senior federal law enforcement official confirmed that the attacks used a botnet exploiting the internet of things, and that the FBI is investigating. The official said federal law enforcement had not yet made a determination about who launched the attack and why.

###############################################

Oct 21, 2016 4:54 pm|Oct 21, 2016 5:25 pm, Wyatt Swain
New World Hackers Taking Credit For Massive DDoS Attack

Zitat:

A group called the New World Hackers have taken credit for the largest DDoS attack in United States history, knocking out huge sites like Twitter, GrubHub, Spotify, and many other insanely popular websites. Although it has yet to be confirmed that the New World Hackers are actually responsible for the attack, an article on a pro-Anonymous blog site called AnonIntelGroup.com has an interview with the group that’s live now. The article is called “Twitter down ? It’s not the Russians …It’s The New World.”

Quelle: http://coed.com/2016/10/21/new-world...updates-facts/

##################################################
Twitter down ? It’s not the Russians …It’s The New World

Zitat:

After this mornings twitter outage. We were able to contact the New World Hackers. We had a quick Q&A .

Last year you guys hit BBC as a test of power . What made you guys decide to hit twitter and other services this time?

We have an annual power test each year and this is actually against Russia. Testing power is the key . Like that we see how much bandwidth each attack outputs…

How big is your botnets?

Our botnet is a supercomputer botnet consisting of over 100,000 iot devices.

http://i1.wp.com/www.anonintelgroup....?fit=512%2C512

Zitat:

What motivated this most recent show of force?

It’s for the good.. Russia is pretty much saying they are better than the U.S by hacking into everything attempting to start a war. We will show them a war.
Do you feel that people underestimate you guys?

Overall we feel that everyone underestimates us and doubts our possibility until they see it for themselves.

Do you guys worry about the amount of attention this is bringing?

We do worry about the amount of attention it brings, we don’t want federal agents on our ass. That’s why we are in Russia..

How do you think Russia would respond after performing an attack of this magnitude?

Russia should respond, but fuck them all. Our message to the world is stay educated.

What’s your message to the world?

Stay Educated.

Quelle für beide obigen Zitate und die Grafik: October 21, 2016 http://www.anonintelgroup.com/2016/1...the-new-world/
################################################
Offenbar eine humoristisch gemeinte Seite, um den Punkt rüberzubringen: https://www.newworldhackers.com/
################################################

Internet Vandalism: Motif and Responsibility

Zitat:

Anonymous is a collective entity. Originating as an Internet meme on an imageboard, it represented the concept of many online community users simultaneously existing as an community hivemind. It is also generally considered to be a blanket term for members of certain Internet subcultures, a way to refer to the actions of people in an environment where their actual identities are not known and preferred not to be known.

Ordinary people can typically gain direct power by acting collectively. Historically, because large groups of people have been able to bring about dramatic and sudden social change in a manner that bypasses established due process, they have also provoked controversy.

In real life, their actions have been coined as “flash mob.” A group of people who assemble suddenly in a deliberately public place to perform an unusual and sometimes seemingly pointless act for a brief time, then disperse.

Often for the purposes of entertainment and/or satire.

The appeal of anarchy:

Tim Berners-Lee, the Web’s inventor, is reported to have said,

“Now we come… to the Web. Links don’t work. Email messages are misspelled. Discussion boards devoted to medical matters of life and death contain claims so false that they’d be funny if they weren’t so dangerous. The site that downloaded in a second an hour ago now takes five minutes. The link you thought would take you to pictures of endangered species instead sinks you into a porno site that sproutes new windows like poison ivy. Where’s perfection when we need it?

The imperfection of the Web isn’t a temporary lapse; it’s a design decision. It flows directly from the fact that the Web is broken on purpose.”

Collective Intelligence, or Hivemind for the better/worse

Marvin Minsky’s Society of Mind and the no-central editor in charge policy of the open sourced internet encyclopedia, called Wikipedia, are examples.

Quelle: https://ludussodalitas.wordpress.com...esponsibility/

Alle unten gezeigten Zitate stammen aus dieser Quelle:
Attacks on the internet keep getting bigger and nastier

By BREE FOWLER, Last Updated: Saturday, October 22, 2016
http://www.baynews9.com/content/news...d_nastier.html

Zitat:

Members of a shadowy hacker group that calls itself New World Hackers claimed responsibility for the attack via Twitter, though that claim could not be verified. They said they organized networks of connected devices to create a massive botnet that threw a monstrous 1.2 trillion bits of data every second at Dyn's servers. Dyn officials wouldn't confirm the figure during a conference call later Friday with reporters.

Zitat:

According to a report from the cybersecurity firm Verisign, the largest DDoS attack perpetrated during the second quarter of this year peaked at just 256 billion bits per second.

A huge September attack that shut down of security journalist Brian Krebs' website clocked in at 620 billion bits per second. Research from the cybersecurity firm Flashpoint said Friday that the same kind of malware was used in the attacks against both Krebs and Dyn.

Lance Cottrell, chief scientist for the cybersecurity firm Ntrepid, said while DDoS attacks have been used for years, they've become very popular in recent months, thanks to the proliferation of "internet of things" devices ranging from connected thermostats to security cameras and smart TVs. Many of those devices feature little in the way of security, making them easy targets for hackers.

The power of this kind of cyberattack is limited by the number of devices an attacker can connect to. Just a few years ago, most attackers were limited to infecting and recruiting "zombie" home PCs. But the popularity of new internet-connected gadgets has vastly increased the pool of potential devices they can weaponize. The average North American home contains 13 internet-connected devices , according to the research firm IHS Markit.

Since the attacks usually don't harm the consumer electronics companies that build the devices, or the consumers that unwittingly use them, companies have little incentive to boost security, Cottrell said.

Zitat:

WHAT'S BEHIND THE ATTACKS

Like with other online attacks, the motivation behind DDoS attacks is usually mischief or money. Attackers have shut down websites in the past to make political statements. DDoS attacks have also been used in extortion attempts {Erpressungsversuche}, something that's been made easier by the advent of Bitcoin.

For its part, a member of New World Hackers who identified themselves as "Prophet" told an AP reporter via Twitter direct message exchange that collective isn't motivated by money and doesn't have anything personal against Dyn, Twitter or any of the other sites affected by the attacks. Instead, the hacker said, the attacks were merely a test, and claimed that the next target will be the Russian government for committing alleged cyberattacks against the U.S. earlier this year.

"Twitter was kind of the main target. It showed people who doubted us what we were capable of doing, plus we got the chance to see our capability," said "Prophet." The claims couldn't be verified.

The collective has in the past claimed responsibility for similar attacks against sites including ESPNFantasySports.com in September and the BBC on Dec. 31. The attack on the BBC marshalled half the computing power of Friday's attacks.

Zitat:

"Prophet" told the AP that his group actually had stopped its attacks by Friday afternoon, but that others, including members of the hacker collective known as Anonymous, had picked up where they left off. Anonymous didn't respond to a request for comment via Twitter.

Zitat:

Meanwhile not much is required in the way of resources or skill to mount a botnet attack, he {Lance Cottrell, chief scientist for the cybersecurity firm Ntrepid} said, adding that would-be attackers can rent botnets for as little as $100. Cottrell said the long-term solution lies in improving the security of all internet-connected devices.

Wie abscheulich arrogant diejenigen Leute von Gruppen wie "New World Hackers" sind, die sich dieser Möglichkeiten bedienen, um völlig egoistisch, undemokratisch und unrechtmäßig Millionen von Menschen essentiell zu beeinträchtigen! Und dann noch praktisch ohne wirklich inhaltliche/politische Aussage, ohne Debatte, sondern nur die Sabotage! :wut:

Einen Staat als Auslöser/Ursache halte ich selber für wenig plausibel: Viel zu riskant wären die Implikationen, wenn das öffentlich würde. Die NSA hätte mit ihren Möglichkeiten (Überwachung des kompletten Mailverkehrs und ggf. des Telefonverkehrs) eine staatliche Beziehung mit Sicherheit entdeckt. Das hätte bei dieser Größenordnung des Angriffs dann entsprechende Anschuldigen auslösen müssen, da es sich dann faktisch um einen kriegerischen Akt gehandelt hätte (nicht nur um ein Kavaliersdelikt, bei dem man beide Augen zudrückt, weil man derartig ja auch selber unterwegs ist).

Insbesondere der letzte Artikel oben deutet ja an, dass hier inzwischen eine Technik vorliegt, die von gut qualifizierten und vernetzten Hackern - nach entsprechender Vorbereitung - angewandt werden kann.

Was mir Sorgen macht ist Vorstellung, dass eines (vermutlich noch entfernten) zukünftigen Tages einige Leute aus der Menge "der wütenden Verlierer der Globalisierung" mit dem "gesellschaftlichen System" ganz brechen und sich dann in Kleingruppen organisieren, um später dann solche Attacken durchzuführen. Das könnten z. B. sein:

Trump-Anhänger,
Leute der Tea-Party Bewegung,
Anhänger der AfD und diverser sonstiger extremer Gruppen im In- und Ausland
Anhänger sonstiger abgedrehter Splittergruppen,
oder sonstige Leute, die einfach wütend sind und es allen zeigen wollen, diesem ganzen System.

Irgendwann (in hoffentlich fernerer Zukunft) könnten diese Leute tatsächlich gewinnen, weil die ganze Internetstruktur auf zentrale Infrastrukturpunkte angewiesen ist, die zu schützen zukünftig nicht mehr wirtschaftlich zu machen sein wird, wenn die Angriffsstärke immer größer würde (Internet of Things). Dann nämlich, wenn die Feuerkraft dieser praktisch kostenlos bereitstehenden Botnets aus dem "Internet of Things" diejenige Bandbreite der Ausweichstrategien übertrifft, welche die Angriffsopfer wirtschaftlich aufzubauen und zu betreiben in der Lage sind.

Was etwas Hoffnung gibt: Es braucht sicherlich sehr gut qualifizierte und vernetzte Hacker und eine sicherlich nicht-triviale Vorbereitung, um solche immer größeren Botnets zu bauen u. zu steuern. Leute, die das können, gehören sicherlich nicht zu den prinzipiellen Verlierern, sondern - ganz im Gegenteil - sollten hochbezahlte Jobs in der Industrie innehaben oder als gut verdienende Berater unterwegs sein.

An der Stelle müsste man ja sonst unterstellen, dass solche Hochqualifizierte irgendwie "den Glauben verloren haben", das "System hassen" und nun offenbar recht hirnlose Anarchie klasse finden. Ohne irgendeinen religiös motivierten Fanatismus erscheint das wenig plausibel - und Hochqualifizierte sind grundsätzlich wohl am wenigsten empfänglich für Fanatismus!

Ich schätze daher aus dem, was ich bislang gelesen habe, dass es wohl nicht viele Leute gibt, die das (als staatsunabhängige Hacker) machen können und wollen.
Aber: Es reichen wohl bereits "überschaubar viele" Leute (10-25 gut qualifizierte und vernetzte Hacker ?), um so etwas zu veranstalten wie letzten Freitag....

Was allerdings auch wieder beunruhigt ist der Umstand, dass derzeit dadurch das kommerzielle Internet noch schneller in die Arme von ganz wenigen US-Firmen getrieben wird und man denen dann auch noch viel Geld wird bezahlen müssen: Google und andere große US-Internetfirmen dürften ihre gigantische Infrastruktur als kostenpflichtigen Service anbieten, um kommerzielle Homepages gegen solche Attacken zu schützen. "Google Ideas has launched a new initiative, Project Shield, to use Google's infrastructure to support free expression online by helping independent sites mitigate DDoS attack traffic." Das Angebot: https://projectshield.withgoogle.com/public/
Die Botnets vom "Internet of Things" könnten irgendwann in (fernerer?) Zukunft wohl auch die Ressourcen von Google & Co. überfordern (bezogen auf individuelle kommerzielle Homepages von Firmen), aber bis dahin dauert das wohl noch.

Jene gut qualifizierten und vernetzten Hacker könnten durch solche Aktivitäten also auf kurze Sicht eher das Gegenteil von dem erreichen, was sie vermutlich erreichen wollen: Das große weite Internet hängt dann noch stärker von ganz wenigen US-Unternehmen ab als jetzt schon, die damit dann noch größere Gewinne machen. Das Internet würde dann noch stärker US-dominiert sein.