I found this rather scary video in youtube, that takes DOS to a whole new level, by making it look like coming from multiple sources. As a counter measure to Rsnake (Robert Hansen) slowloris.py script, this vulnerability mainly in Apache web servers, is addressed by limiting the number of concurrent connection from a single source done in the Apache configuration file.
just imagine these two combined:
1- PyLoris can utilize SOCKS proxies and SSL connections, and can target protocols such as HTTP, FTP, SMTP, IMAP, and Telnet; when correctly configured, it use low bandwidth, making it possible for a single machine to bring a server down
2- Tor protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody watching your Internet connection from learning what sites you visit, and it prevents the sites you visit from learning your physical location. Tor works with many of your existing applications, including web browsers, instant messaging clients, remote login, and other applications based on the TCP protocol.
Is there any way to detect such a denial of service
any suggestion or discustion is highly encourged