LIZARD SQUAD is Back. Planning XBL Attack. "Biggest attack yet". [UP: XBL/PSN Down]

Companies can purchase DDoS mitigation services, but they're astronomically expensive. Like hundreds of thousands of dollars per attack / protection period expensive.

Giants like Amazon who almost deal exclusively online have no choice but to get it, and they have the flow of money to cover it.

This. I try explaining this to people.
It's extremely expensive for companies to handle this type of attack.
 
Why don't they just do this every day? Why are they taking days off?

I'd guess a mix of risk and cost. It's risky to keep doing the same thing, because the longer you go at it, the longer you give an investigation to try and narrow things down.

Also, it costs money to rent time on these big botnets. I seriously doubt the group in question here has their own botnet of this size (they might be trying to grow one as we speak though), so they're renting time on the control of one, to have some fun with.
 
thats easy...because nintendo ninjas

Exactly, I posted about this earlier but Nintendo goes hard when it comes to quality. Remember when Pokemon X got sold early in the shop in the UK? Nintendo tracked down every single sold unit and confiscated it.....by any means necessary.

If someone started leaking Nintendo stuff tonight, Nintendo would have them taken out by tomorrow....they dont mess around.
 
Tin foil hat time.

Lizard/Finest Squad are one in the same and they only did this because not much news happens today and they wanted the attention and glory, news has no choice.
 
Surely all of these interactions must be traceable?

To a point, but it's not that hard to try and create an anonymizing buffer between you and the action of setting the botnet in motion. All too often, attackers will have someone else initiate the attack, or purchase the time on the botnet.

Miktar reading that made my head almost explode! Lol

Sorry. :P I was trying to go for the simplest explanation possible, and ended up with a giant wall of 'tl;dr;'
 
When it comes to websites, I can see how this is an incredibly difficult problem to solve, and I'm sure I'm speaking out of naivete, but how is it that when we're dealing with a service that requires a piece of hardware to get the benefit from, that the platform holders don't just have a database of MAC addresses/serials or whatever the unique identifier is of each console in circulation, where they can make it so their servers just do not accept any traffic coming inbound other than from the consoles themselves?

Its because you can't actually differentiate between what traffic is actually coming in until you actually check it?

Imagine you live in a house and you only let in people whom you designate as friends. Unfortunately, the only way to tell if someone is your friend is they have to ring a doorbell, and you have to go up to the door, open it and physically check if they are your friend or not before you let them in.

Now, if it was normal internet traffic, you can handle this simple task fairly well.

Now if a DDOS was going on, imagine millions of people (who have no business being there) rushing to your door, and each one constantly ringing the doorbell, and you having to keep getting back up, open the damn door, and check each one.

I mean, by your example, a system is already in place like that: authetication/security certificates. But like I said, you still have to actually check each connection to even verify. A DDOS is just the massive traffic spike while the server is going crazy trying to figure out who the hell is trying to come in.
 
When exactly did these attack start? i got a new xbox this morning at 1am wich i unwrapped with the kids. So we put Assasin's creed Unity to download since it came with our bundle. Since 2am this morning to RIGHT NOW (10:38PM) and its only at 78%... how long has this ddos been happening since, cuz these install times are fucking stupid right now...

This is a digital code that we got, so no disc install.
 
I'd guess a mix of risk and cost. It's risky to keep doing the same thing, because the longer you go at it, the longer you give an investigation to try and narrow things down.

Also, it costs money to rent time on these big botnets. I seriously doubt the group in question here has their own botnet of this size (they might be trying to grow one as we speak though), so they're renting time on the control of one, to have some fun with.

Thanks for the explanations
 
Serious question:

why aren't Nintendos servers affected?

Because they don't care. If they really wanted to hit Nintendo, it would have already happened by now.

You get more attention when you hit the two most popular consoles instead of one hardly anyone owns or cares about.
 
When exactly did these attack start? i got a new xbox this morning at 1am wich i unwrapped with the kids. So we put Assasin's creed Unity to download since it came with our bundle. Since 2am this morning to RIGHT NOW (10:38PM) and its only at 78%... how long has this ddos been happening since, cuz these install times are fucking stupid right now...

Since earlier this morning....also unity is a 60GB download ...it takes time....but at78% it should have been ready to play
 
When it comes to websites, I can see how this is an incredibly difficult problem to solve, and I'm sure I'm speaking out of naivete, but how is it that when we're dealing with a service that requires a piece of hardware to get the benefit from, that the platform holders don't just have a database of MAC addresses/serials or whatever the unique identifier is of each console in circulation, where they can make it so their servers just do not accept any traffic coming inbound other than from the consoles themselves?

How would they be able to sort what's good and what's not good without first looking at each request?

Ultimately that's the issue. DDOS attacks use the very basics of a network handshake against the end users. Not much you can do besides block whole swaths which knock legitimate users offline too.
 
Man, can't log in on X1. Well, I was signed in but when I went to the store it kicked me out and signed me out, lol.

I'm really glad I never went all digital.
 
Serious question:

why aren't Nintendos servers affected?

Here's why

3ZyrrRn.png


https://twitter.com/LizardMafia/status/548254835003637761
 
Exactly, I posted about this earlier but Nintendo goes hard when it comes to quality. Remember when Pokemon X got sold early in the shop in the UK? Nintendo tracked down every single sold unit and confiscated it.....by any means necessary.

If someone started leaking Nintendo stuff tonight, Nintendo would have them taken out by tomorrow....they dont mess around.

Yeah! And Sony and Microsoft should do the same now, get Lizard Squad and put them live long in jail!!!
 
This must be terrible for new users who got an Xbox One for christmas. The day one update is mandatory to even get the console working, and the bundles only include digital games.

One year after the release, why can't the HDD come with the mandatory update installed so people at least can play offline?
 
Like what is said above, it is very difficult to trace these attacks back to the origin. This group will get caught though because they're not hiding in the shadows, they want attention. They're extorting people for money and services, they eventually will feel unstoppable and will slip up. That is pretty much how anyone in that type of scene gets caught, they will get too comfortable and either will log into something without using a decent VPN and boom they're caught.

It won't be overnight but they will slip up and will be caught, best advice now is to ignore them and do something else (easier said than done for most people)
 
So I've spent most of the day on Wii U and local multiplayer....

but I can't even get on Twitch while XBL is down? Thats silly. At least Sunset Overdrive can be played offline.
 
Top Bottom