2018/08/08 - DDoS Attack!

As if we didn’t know.
I do remember B-R as well, even though TAPI seems to have the memory of a goldfish, and was stuck out of a gate for over 2 hours whilst goons could move in and out whenever they wanted and for those that had been there this was yet another “server victory” as the one brewing today.
looks like the Chinese from serenity that quited altogether have more brains than us.

Very convenient DDoS attacks, always in Goon’s favor :sunglasses:

Kenshin, the greatest cyber anarchists the black hand never had!

And what was the benefit for goons in it?

No, you asserted it. Proof is something completely different. To prove it you need to provide links to the announcements and documented evidence that such and such was going on at that time. Without it, you are merely guessing and making assertions. And to definitely prove it was XYZ acting, you need access to data CCP is not likely giving you.

I have no love for Goons or NC. While some argue that it might be CCPs programming issue and are blaming it on a DDoS attack to cover their bums, it is not outside the history of EVE players to do or plan to do things outside the game to gain an upper hand… like cutting the power at a players home. A DDoS attack is simpler and less traceable.

It could have been CFC, it could have been NC, it could have been someone angry at either party for not being in their respective alliances, it could have been an upset bot farmer who wanted to ruin the fun of other players, etc, etc, etc…

But without proof, there is nothing but guesses, slander, and silly comments. But then that would not be these forums here, would it?

Man yall hyping this fight up like a mother……

just put the damn stream up… put up the damn twitch link so everyone can watch this go down…ccp i know you’re drooling right now while watching pretty sunsets of the Icelandic bay, waiting for this and the finale to game of thrones like i am…clock is ticking

o7

1 Like

One day we will have a “mysterious DDoS attack” and we all wake up in the goons alliance.

1 Like

To start with, what is a DDOS? Distributed Denial of Service.

How does it work? In a nutshell, you get a farm of compromised devices, and they spam connections/traffic to the server as hard and fast as they can.

An analogy, imagine you’re a librarian (the server). Normally, people come in and make their inquiries of you. There’s a decent number of people, but nothing overwhelming.

DDOS happens, and now all of a sudden there are thousands of people all start making inquiries all at once. So you answer someone, only to find they’re already asking you another question. And another, and another.

Backing out of that analogy, a DDOS consumes resources that were intended for players, in a way that they were not intended to be consumed. When one of the zombies attacks, it’s not even waiting for the server to answer before it sends more input to the server.

It used to just be botnets of computers. But these days, with the advent of exceedingly unsecure IOT devices, even your smart tv can be participating in the attack. Or you smart phone, your smart watch, your smart toaster, even smart light bulbs could be attackers.

What can be done to mitigate this? With limited success you can observe the “etiquette” of the client, and then if it turns out it’s being too aggressive, start preventing connections from that IP altogether.

You can use proxies to validate that the communication is what it should be, and not just random noise.

The only sure-fire way to mitigate it, however, is to simply increase the resources you have so that you’re able to respond to legitimate communication amid the junk.

The downside to all of this is you’ve got a 100% chance of impacting legitimate users. IP addresses are not unique. IPv4 has a little under 4.3 billion IP addresses, and a decent chunk of them aren’t even usable for this purpose (used for other purposes such as pre-NAT allocation, local subnets, multicast, etc). Your ISP will invariably aggregate your traffic with a massive number of other people. Insofar as the internet is concerned, your IP is the same as thousands of others. Having public reserved IPs is a thing, but 99.99% chance you won’t have one unless you’re paying extra for it.

TLDR, there’s precious little CCP can do to mitigate a DDOS. This is true for literally every other service on the internet.

10 Likes

So long story short, how much free SP do we get?

2 Likes

CCP is actually doing something about it. They let their traffic run through a DDoS mitigation specialist. This is a company with a huge Internet connection and they filter the network traffic live and “scrub” it, meaning, they toss out all, which looks suspicious. This is why many people today could stay in the game and haven’t even noticed the attack.

So :+1: for CCP’s effort against these odds.

5 Likes

I’ve been a member with this Community for over 10 years now and quite frankly I don’t recall these issues ever happening last year or any other year prior to 2018.

Obviously something was recently changed in the game code that is allowing it to happen.

Or you know. DDoS attacks have more vectors with all the smart devices now and vastly greater connections than they used to with all the improved home internet. Just a thought.

4 Likes

That’s likely the biggest factor. Considering who today has got a mobile phone, basically every kid now, and people often don’t know that it has anti-virus software for mobile phones and for a very good reason.

2 Likes

Bigger problem will be “smart” devices (made by dummies) which don’t even have basic security.

3 Likes

Well, it does appear that the Keepstar is still being contested:

I am still not able to log in without a VPN which is limited in my case.

use a Australian node no issues what so ever here

I dunno, but based on the delay for the March SP, it’ll likely not be here till Christmas, so don’t hold your breath.

Orrrr… there’s more and more hacking and DDOSing and all that sort of stuff going on out in the wider internet these days. In the wake of the 2016 election scandal here in the US, these things now get more press coverage, more attention… that just encourages groups that do this stuff to do more of it. They love the attention. They’re trolls on a grand stage.

With an ever growing amount of machines connected to the internet, with a business practise of throwing things out before the competition does, no matter the security flaws, there are also far more possibilities now.

2 Likes