Timeline for Can a DDoS attack yield any information?
Current License: CC BY-SA 3.0
30 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 15, 2016 at 9:29 | comment | added | SomeoneSomewhereSupportsMonica | DDoS is generally considered one specific attack - point lots of traffic, from lots of sources, at one server. DoS is a big class of attacks that stop things working - it's asking "Is there anything I can do that both takes down a service and tells me stuff". That's a massive amount of info. | |
| Aug 15, 2016 at 9:26 | comment | added | paparazzo | @SomeoneSomewhere Really Distributed would be the difference in getting closed? Ironic this is about denial of service. | |
| Aug 15, 2016 at 9:21 | comment | added | SomeoneSomewhereSupportsMonica | @Paparazzi Because if you include all attacks that deny service, then the post would probably be (rightfully) closed for being 'too broad'. | |
| Aug 15, 2016 at 9:16 | comment | added | paparazzo | @SomeoneSomewhere OK. If the question is about gaining information what is the purpose of limiting to DDoS? | |
| Aug 15, 2016 at 9:13 | comment | added | SomeoneSomewhereSupportsMonica | @Paparazzi DoS includes other, more sophiscated attacks than 'hammer the server until it fails' - ping of death, for an old example. While it's certainly possible to send enough traffic from one location to crash it, saying 'DDoS' makes it clear that you're talking about brute force traffic. | |
| Aug 15, 2016 at 9:04 | history | protected | Rory Alsop♦ | ||
| Aug 15, 2016 at 7:25 | answer | added | NoBugs | timeline score: 0 | |
| Aug 15, 2016 at 6:52 | comment | added | Criticizing Israel not allowed | Yes, it reveals the amount of resources the server has (approximately). | |
| Aug 14, 2016 at 7:29 | answer | added | Alex Bodnya | timeline score: 0 | |
| Aug 13, 2016 at 18:25 | answer | added | Aurand | timeline score: 1 | |
| Aug 12, 2016 at 19:47 | answer | added | coteyr | timeline score: 3 | |
| Aug 12, 2016 at 17:32 | comment | added | paparazzo | Why do you limit this to DDoS? The question seems to apply to DoS in general. | |
| Aug 11, 2016 at 18:27 | answer | added | paparazzo | timeline score: 0 | |
| Aug 11, 2016 at 16:58 | comment | added | Dubu | Since your question seems not limited to remote attacks: Does MAC flooding count? | |
| Aug 11, 2016 at 13:43 | comment | added | Matt Lyons-Wood | You're not worried about the 2016 Australian Census are you? :P | |
| Aug 11, 2016 at 13:27 | answer | added | Dennis Jaheruddin | timeline score: 2 | |
| Aug 11, 2016 at 13:03 | vote | accept | KosugiNinja | ||
| Aug 11, 2016 at 6:36 | comment | added | Pierre.Sassoulas | Yes, theoretical ...but it could happen :) | |
| Aug 11, 2016 at 3:56 | answer | added | pipe | timeline score: 10 | |
| Aug 10, 2016 at 20:39 | comment | added | Thomas | @Pierre.Sassoulas Hopefully the server uses constant-time comparisons to avoid leaking information... wait, who am I kidding? | |
| Aug 10, 2016 at 20:16 | answer | added | user6698139 | timeline score: -3 | |
| Aug 10, 2016 at 16:29 | history | tweeted | twitter.com/StackSecurity/status/763412055705673728 | ||
| Aug 10, 2016 at 15:57 | comment | added | Pierre.Sassoulas | This is theoretical but if you ddos a server, the time it takes to handle a request become mesurable over a network, and if you know that the server is checking password character by character you can then know if the first characters of the password you tried are the rigth one because the server now takes longer to answer. | |
| Aug 10, 2016 at 15:24 | answer | added | John Smith | timeline score: 2 | |
| Aug 10, 2016 at 14:35 | answer | added | H. Idden | timeline score: 14 | |
| Aug 10, 2016 at 10:59 | comment | added | Bergi | A DoS attack does bring up edge cases (a crash being a just-over-the-edge case), which should not but may reveal information not accessible otherwise. | |
| Aug 10, 2016 at 9:43 | answer | added | Rory Alsop♦ | timeline score: 85 | |
| Aug 10, 2016 at 7:30 | review | First posts | |||
| Aug 10, 2016 at 7:37 | |||||
| Aug 10, 2016 at 7:29 | history | edited | Anders | CC BY-SA 3.0 |
deleted 32 characters in body
|
| Aug 10, 2016 at 7:28 | history | asked | KosugiNinja | CC BY-SA 3.0 |