[192503] in North American Network Operators' Group
Re: Spitballing IoT Security
daemon@ATHENA.MIT.EDU (Eric S. Raymond)
Sun Oct 30 01:59:39 2016
X-Original-To: nanog@nanog.org
Date: Sun, 30 Oct 2016 01:59:05 -0400
From: "Eric S. Raymond" <esr@thyrsus.com>
To: "Ronald F. Guilmette" <rfg@tristatelogic.com>
In-Reply-To: <27204.1477804758@segfault.tristatelogic.com>
Reply-To: esr@thyrsus.com
Cc: nanog@nanog.org
Errors-To: nanog-bounces@nanog.org
Ronald F. Guilmette <rfg@tristatelogic.com>:
>
> In message <20161030044342.GA18488@thyrsus.com>,
> "Eric S. Raymond" <esr@thyrsus.com> wrote:
>
> >Ronald F. Guilmette <rfg@tristatelogic.com>:
> >> Two kids with a modest amount of knowledge
> >> and a lot of time on their hands can do it from their mom's basement.
> >
> >I in turn have to call BS on this. If it were really that easy, we'd
> >be inundated by Mirais -- we'd have several attacks a *day*.
>
>
> You need to get out more.
>
> http://www.nab.org/cybersecurity/Verisign-report-ddos-trends-Q22016.pdf
>
> It *is* happening every day. You just don't hear about it on CNN because
> a "little" 80Mbps DDoS isn't even worthy of a headline anymore, even
> though such an attack could CRUSH a local bank, and even many regional
> banks into utter oblivion.
>
> Now, where did I put those bitcoins... It's ransom time!
Don't change the subject. An effective DDoS against any single site is, though
concerning, not a Mirai-class event. The difference matters, and you shouldn't
be pretending it does to score rhetorical points.
--
<a href="http://www.catb.org/~esr/">Eric S. Raymond</a>