Just because 12-20 year olds can own 3,000 computers in a weekend doesn't make them "Security Experts" it just proves that they have the resources available to re-distribute given software with plenty of documentation.. the authors of all these bots give these kids all the resources they need to form a botnet and launch any form of DDoS attack they choose.. without even needing to know how the attack works, or much else. "Krashed" was not one of the sharpest tools in the shed, niether was "Emp". Both were just people who had access to public software and spent all thier time using it.. these tools were given to them and they used them for thier "evil" purposes. theres quite a few other people out there with these botnets, so i seriously doubt that this is a problem that will be rectified anytime soon. i personally report all denial of service attacks i recieve to my web server. maybe if internet service providers paid more attention to these abuse e-mails, they could rectify the situations, for example. last ddos i got was ~90mbps and was originating from 217 hosts, of all 217 hosts i had 1 reply with an actual investigation response, not just a standard "this is an automated response, your e-mail has been placed in our bitbucket". the thing about DDoS attacks are people think its no big deal. when in reality it takes people many hours of work to do investiagtiona and/or cleanup.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/9411/28182#28182