I'm somewhat confused as to the technical details of the Oct. 21 DDoS. Dyn is a company, which according to wikipedia
is an Internet performance management company, offering products to monitor, control, and optimize online infrastructure, and also domain registration services and email products.
I'm assuming they own a popular DNS server which was attacked? I've heard two claims in the news which confuse me
- certain geographic areas were affected, namely western US and western Europe
- certain sites were affected, such as Twitter.
How could taking down a DNS server affect particular locations? Is the idea that people tend to use DNS servers geographically closest to them so it would be logical that those physically closest to the servers would be the most affected?
How could certain sites (such as Twitter) be more affected than others?
Is this likely the work of a state sponsored actor and if so, what's the point in pursuing them? It's not like North Korea's going to allow the FBI to extradite someone who attacked the US. Seriously though, are there any international bodies that could prosecute "crimes" (if it's considered one) like this?