22/10/2016
If you are in the tech field, you could not miss the DDOS attack that occurred on DynDNS service. It hit the general news as well.
This caused disruption on many services that are popular in the US. Ars Technical has an article about it The novelty is that devices such as wifi routers and IP cameras and other compromised connected devices were used to create a large scale distributed attack
There was a warning: OVH, the popular French hoster was hit by such an attack a few weeks ago.
Now it reminds me the triumphant article written in 1997, "The Rise of the Stupid Network"
http://www.hyperorg.com/misc/stupidnet.html
That approach has founded and still founding the technical setup of the Internet as we know it. As a telco engineer, I believe that while it freed a lot of innovations, it is a very naive american approach.
Many network neutrality advocates also stick to this not fully understanding the consequences of their choices. For my part, I believe that network deserving massive user bases needs end to end management tools.
In the case of this attack, DNS queried with random names causing DNS provider overflooding. Good ! Then, each access provider should maintain at least a cached version of the most popular DNS zone and changes should bu pushed to them. How come that DNS queries cannot be cached locally?
More generally, network admins need to step up on all this, congregate and alter the Internet structure so legit services are declared, checked, hardened the rest of the grey or dark services can be blocked easily in case such abuse occurs.
http://arstechnica.com/security/2016/10/double-dip-internet-of-things-botnet-attack-felt-across-the-internet/
Massive attack combining compromised IoT devices, other bots cripples many sites.