Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Saturday, 9 December, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

Facebook denies DDoS attack

by The Gurus
January 27, 2015
in Editor's News
Facebook thumbs down
Share on FacebookShare on Twitter

Just after 6am this morning, Facebook as well as photo sharing site Instagram suffered outages, leading to speculations of a hack. Amidst the droves that took to Twitter to complain about the outage, the infamous hacking group Lizard Squad also tried to lay claim to the attack, stating: “Facebook, Instagram, Tinder, AIM, Hipchat #offline #LizardSquad”.
 
However, Facebook denied that it was an attack in a statement that read: “This was not the result of a third party attack” and that the outage “occurred after we introduced a change that affected our configuration systems”.
 
Adam Winn- Product Manager- OPSWAT said Facebook’s statement was highly credible given that “the outage was late-night Pacific time. If things were happening in California, 11:10pm is a very reasonable hour for system maintenance. In the past, Facebook has had maintenance from midnight to 2am.”
 
“The outage was global and simultaneous. IE: Only the most well-crafted DDoS would shut down all these affected services, all across the globe, at the same instant,” he continued. “That type of monumental effort would have come with much louder bragging by Lizard Squad.” In addition, “the duration of the outage was a very round number. That’s often a strong indicator that the root cause was a configuration with some TTL or other required time interval to propagate and repair.”
 
According to Guillermo Lafuente, security consultant for MWR InfoSecurity, it is more plausible that a technical fault led to the outage rather than a DDoS attacks since “a DDoS attack would have made Facebook and all other websites completely unreachable rather than being accessible with an error message displayed.
 
“As Facebook uses several datacenters around the world, a DDoS attack would be more likely to affect users of a particular region. In this case, the issue affected all users around the world, which further supports Facebook claims that the problem was a configuration issue caused by their own engineers.”
 
Amichai Shulman, CTO Imperva, surmised that the outage occurred due to an overflow in the time register. “We have seen in the past small, overlooked software glitches who took down large networks,” he said. These are usually related to a register or counter kept in smaller memory storage than required. Because of the wide spread of this I’d guess it has to do with some register that keeps time that overflowed.”
 
It was not only Facebook that was affected, Instagram, Tinder, AIM, Hipchat and MySpace were also down. Lafuente attributed this to the fact that these sites “rely on Facebook to provide their services. Therefore an issue with Facebook services would affect all the sites.”
 
As far as Lizard Squad is concerned, Lafuente said, “even if at a latter point it is proven that they were lying, they already have achieved what they were looking for: publicity. As more and more hacking groups compete for fame it is likely that we will see more often this kind of situations.”
 
“People will continue to take credit for hacks so long as there’s no downside,” continued Winn. “Somewhere between Pascal’s Wager and catch-22, Lizard Squad takes credit for an apparent attack when the only group who can discredit them would have to do so by revealing their own mistakes.”
 
 
TK Keanini, CTO at Lancope hopes that this incident shows how complicated the process of attribution really is in the Internet age.  “On one end of the spectrum, we have bad actors hid
ing and evading detection and on the other hand stepping out and claiming responsibility for incidents they were not a part of,” he said.  Given that Facebook is on record claiming it was in internal glitch, I’m going with that story.”
 
“With the massive scale of users, data, and activity on Facebook, I’m surprised that these errors don’t happen more often.  Facebook hires and retains the top talent in the industry but we are all human and sometimes mistakes happen.  This mistake was detected quickly and the outage was limited which is all one can hope for when handling exceptions,” Keanini concluded.
 

FacebookTweetLinkedIn
Tags: DDoSFacebookLizard
ShareTweet
Previous Post

Google defends decision not to patch the Jelly Bean WebView vulnerability

Next Post

Give01Day partners with Cyber Streetwise to offer Cyber Essentials certification to UK charities

Recent News

New Synopsys Report Reveals Application Security Automation Soars

December 5, 2023
Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

December 5, 2023
Centripetal real logo

Centripetal Announces Partnership With Tiger to Provide Cybersecurity Innovation to the UK Market

December 7, 2023
Google bins inactive accounts

Google bins inactive accounts

December 1, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information