Quote from: mistfpga on November 15, 2012, 11:54:30 PM

Quote from: Luke-Jr on November 15, 2012, 09:41:46 PM

You cut off the end:

Quote

[Thursday, November 15, 2012] [7:59:29 AM]    jgarzik, i actually have code to ddos the entire network
[Thursday, November 15, 2012] [7:59:31 AM]    it works
[Thursday, November 15, 2012] [7:59:44 AM]    but i run out of local port numbers before i get past about 100 peers
[Thursday, November 15, 2012] [7:59:44 AM]    um
[Thursday, November 15, 2012] [7:59:45 AM]     Sad

[Thursday, November 15, 2012] [7:59:55 AM]    you can't know it works without having DDoS'd the network -.-
[Thursday, November 15, 2012] [8:00:44 AM]    Luke-Jr, well it worked against the roughly dozen bitcoin nodes i run
[Thursday, November 15, 2012] [8:00:52 AM]    scale to all connectable peers

In other words, he tested this on his own nodes.

I presume if there was anything we could do to fix it, he'd have mentioned that in private.

hang on a sec, if this is a resource exhasution, and 12 nodes made him run out of ports then this is a non issue. However he clearly states that he has tried it against at least 100 peers... and only owns a dozen or so.

I see where you are coming from luke, and I would tend to agree with you, however I find myself agreeing more with this...

Quote from: deeplink on November 15, 2012, 05:18:55 PM

But my guess is this: he has found nothing substantial and is looking for attention.

60,000 ports to take out 12 boxes? that isnt a dos, that is just being stupid. (I will have a play, and I think I am pretty sure what he claims to have found I already know... it isnt worth reporting...)

I may well be wrong, but I do not thinkso, how on earth do you run out of ports on a DDoS? on a DoS sure, but a DDoS only takes out 100 nodes? again this is a non issue. (DDoS == DISTRIBUTED Denial of Serivce, v DoS == Denail of Serivce.) - Remeber what SYN floods were actually for? 1 BTC to the person who explains first. (hint kevin mitnik got imprisoned for it) if the attack cannot involve IP spoofing then again it is a non issue. (another hint to get that 1 btc)

I have no dog in any fight that Patrick is involved with (except bitcoin in general)

Patrick, take a look at you auth code on intersango. shore your own doors before you piss in other peoples pools.

bug hugs,

disco

(re 1 btc prize, that is for the person who i deem to give the best answer. In the event of no correct answers, I will give the 1 btc to the person that got the closest. My deciscion is finial, there is no appeal.only one prize will be paid. so the total prize fund is 1 btc which can be won by 1 person only.)

Mitnick's target was an enemy's computer. He found he could gain terminal access by spoofing his IP, disguising as an actual server the terminal trusted. He used a SYN flood to disable the real server while IP-spoofing and patterns he obtained allowed him to pretend to be the server.