83

Nick Craver mentioned this as the reason for SO being down yesterday

Nick_Craver: Load there was about a half million requests per minute (that actually got through). We're working on blocking compromised webcams now.

Any idea, what the above means and how come webcams took Stack Overflow down?

14
  • 1
    Hum, any source?
    – Tunaki
    Feb 28, 2017 at 14:01
  • 40
    What Nick describes would be a DDOS attack using compromised network-connected security cameras.
    – Martijn Pieters Mod
    Feb 28, 2017 at 14:02
  • 3
    @Tunaki: twitter.com/nick_craver/status/836389959573651456
    – Martijn Pieters Mod
    Feb 28, 2017 at 14:03
  • 12
    What @MartijnPieters said. We were (actually, still are) being attacked by a DDOS that is launched using security cameras.
    – Oded
    Feb 28, 2017 at 14:03
  • 4
    @MartijnPieters: security cameras are really great for that => because people want live streaming, they usually have plenty of bandwidth to spare :/ Mar 1, 2017 at 9:51
  • Interestingly, Amazon Video, isitdownrightnow.com and downdetector.com amongst others weren't working yesterday at around 18:00 GMT+0 Mar 1, 2017 at 10:04
  • @WilliamIsted Amazon S3 was down. Mar 1, 2017 at 10:05
  • 1
  • @PatrickHofman completely missed that, thanks for the link! I wonder if this was caused by a IoT DDOS as well. Mar 1, 2017 at 10:14
  • 1
    But why target StackOverflow? What have we done to them? Mar 1, 2017 at 10:26
  • many reasons,some do just for revenge.You also don't need to be efficient in hacking to do this.There are hitman like services available:krebsonsecurity.com/2016/09/… .This was caught now Mar 1, 2017 at 10:29
  • 11
    IoT is great: have all the PC programmers muck around with embedded systems, which they don't have a clue about. While at the same time have all the embedded programmers muck around with internet security, which they don't have a clue about. How can it possibly go wrong? But at least my fridge is connected to the internet now!
    – Lundin
    Mar 2, 2017 at 9:38
  • 3
    I love/hate the fact that so many random IoT devices now, when you boil them down, are just Linux webservers that are easy to get root on. Love it because it's hilarious and creates great stories, hate it because that's how stuff like this happens.
    – Tophandour
    Mar 2, 2017 at 20:14
  • 1
    Hey, it could be worse. Amazon S3's Virginia center went down due to "a mistyped command"... Mar 2, 2017 at 23:16

2 Answers 2

117

Black hat hackers have recently discovered the joyous existence of millions and millions of IoT devices, mostly routers and web cameras, that can be hacked and turned into a large DDOS botnet. Such networks are generally known by the malware that creates them, Mirai.

Apparently such a Mirai botnet is now being used to DDOS Stack Overflow:

Stack Overflow traffic spike during DDOS

(Source: https://twitter.com/nick_craver/status/836404479054524419)

See http://time.com/4542600/internet-outage-web-cams-hackers/ and https://www.wired.com/2016/10/internet-outage-webcam-dvr-botnet/ for some in-depth news reports on a recent high-profile DDOS attack on multiple internet services.

21
  • 45
    It's the start of machines testing the waters... Where are you John Connor!? :p Feb 28, 2017 at 14:12
  • 25
    Required related reading on Twitter: twitter.com/internetofshit
    – Pekka
    Feb 28, 2017 at 14:14
  • 4
    Let's hope this doesn't happen. Feb 28, 2017 at 20:50
  • So in layman's terms, a huge number of basic internet-capable 'computer' devices are all trying to load stackoverflow.com at the same time?
    – TylerH
    Mar 1, 2017 at 0:00
  • 3
    Yes, basically. Maybe the devices are doing something more varied, like loading many different pages, or maybe they are focused on the front page. Either way they are overwhelming the site with bogus traffic.
    – amalloy
    Mar 1, 2017 at 0:10
  • 2
    @TylerH The Internet of Things basically. The Mirai open source botnet (not kidding) simply exploits devices with bad or no security and turns them into an army for DDOS purposes. Heck, even your router might be doing it. If it can phone home (goes through the firewall) and has a security hole, it's a security threat
    – Machavity Mod
    Mar 1, 2017 at 2:56
  • en.wikipedia.org/wiki/Black_hat
    – MD XF
    Mar 1, 2017 at 3:26
  • Why do people do this? Morons. Smh. Mar 1, 2017 at 10:07
  • 7
    @LightnessRacesinOrbit, They are probably the people whose questions we downvoted and closed when they were first trying to figure out the site. I'm not saying we shouldn't, but I remember how frustrating it was.
    – Suragch
    Mar 1, 2017 at 10:36
  • 1
    In other words: DDoS Protection by CloudFlare is no protection? 180 Mbit/s isn't that much bandwidth. Mar 1, 2017 at 11:44
  • 3
    @ChristianGollhardt: Cloudflare can't operate without a public IP address to proxy for. I don't know if that IP address was revealed or not, but we can't just jump to a conclusion that DDoS Protection by CloudFlare is no protection, or even that the bandwidth graph we see here is the full extend of the incoming attack.
    – Martijn Pieters Mod
    Mar 1, 2017 at 11:57
  • 2
    @JonClements Don't joke about that! Yesterday was John Connor's birthday!
    – krillgar
    Mar 1, 2017 at 12:22
  • 4
    @ChristianGollhardt I think it's 180 MBytes/s so it's over 1 Tbps
    – Mas
    Mar 1, 2017 at 12:29
  • 4
    @Mas: Tbps? That seems to be off by a factor of 1000. Mar 1, 2017 at 20:00
  • 14
    This attack might be the work of somebody who really didn't like the new Top Nav bar. <grin>
    – T-Heron
    Mar 1, 2017 at 20:13
26

In the 80s, cyberpunk dystopian fiction had hackers take over security cameras and use it to dodge the man, be able to slip unseen by them, and track people.

In the cyberpunk dystopian present, hackers take over security cameras to get them to solve complex mathematical problems on which there are bounties (using someone else's electricity)1, and use the cameras connection to the network to repeatedly yell "hello" to another computer in a way that makes the computer confused and clogs the network pipes.2

Truth is stranger than fiction.

If you need more details, I'll be back after I take my self driving electric car3 for a drive to go for a ride on my hoverboard4 while live-streaming it using a vanity flying self-piloted robot drone5 which tracks my pocket supercomputer6 to update my personal TV channel7 which I earn beer money from; meanwhile, another robot will vacuum my floors8.


  1. Dogecoin
  2. Mirai
  3. Tesla
  4. Walmart
  5. Auto-tracking drones
  6. 1980 supercomputer
  7. YouTube
  8. Robot vacuum
1
  • 1
    (In b4 someone attempts to edit one of my own answers to change the footnote formatting to mirror what I did here.)
    – BoltClock
    Mar 2, 2017 at 15:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .