BR Forums Feedback

Avinash R · Post by **Avinash R** » 19 Dec 2008 13:52

Rahul M wrote:big boss tells us these from outside India. also, these are under control of the guilty party which is how things work in DDOS, not necessarily doing it on their own.

Now that it has been confirmed it's a Ddos attack, time to switch over to a host that offers protection from ddos or install anti-ddos software on the server.

and if possible confirm if this attack originated from panda land.

krishnan · Post by **krishnan** » 19 Dec 2008 14:07

Anti-DDOS software? Wish it was that easy

Post by **webmaster** » 19 Dec 2008 18:50

Hi Guys,

Just to confirm as Rahul has said the server on which this site runs has been a target of DDOS (distributed denial of service) attacks, as with most DDOS attacks the attacking hosts are mostly compromised (zombie) hosts which have been infected with some form of remote agents which respond to the commands from a master host(s).

The attack method is fairly simple you get all your zombie hosts to attack the server at once thereby overwhelming the server’s resource and hence denying legitimate traffic to the site. Whilst you can filter the offending IP addresses it’s only a matter of time for a whole range of new IP addresses are used for the attack – hence a better solution is needed namely firewalls which fend off DDOS type of attacks.

We are working with our hosting provider to resolve the issue in the mean time please bear with us.

Regards,
Seetal

enqyoob · Post by **enqyoob** » 20 Dec 2008 06:24

Re-Lie-Able sources tell me that this is because 147,000,000 Pakis are browsing the "Indian Response to Terrorism" thread trying to see when they should go into their Bunkers-e-Hawaee-Bum, but they are only able to browse the pictures at the Khabar dhaga since 146,999,990 are illiterate and the others are hackers.

Avinash R · Post by **Avinash R** » 20 Dec 2008 10:34

krishnan wrote:Anti-DDOS software? Wish it was that easy

This is what i was talking about. Complete solution. h/w and s/w combined to stop script kiddies from using lame tools to ddos sites.

http://www.riorey.com/products.php

krishnan · Post by **krishnan** » 20 Dec 2008 10:45

That is the responsibility of the hosting companies. There is nothing we can do but to suggest those products to them. And its not really a software, it something like a firewall kind of hardware, sitting between the webserver and the outside world

Hariprasad · Post by **Hariprasad** » 20 Dec 2008 17:23

Couldn't access BR forums for two days till now

. I need my fix constantly

p_saggu · Post by **p_saggu** » 20 Dec 2008 17:43

I'm reporting in to confirm that I did not succumb to withdrawl from the 12 hourly dose. I really have to tell you I felt as if something was missing.

Great to be back !!!

p_saggu · Post by **p_saggu** » 20 Dec 2008 17:44

Even you tube is off line most of the last two days.

karan_mc · Post by **karan_mc** » 20 Dec 2008 20:51

p_saggu wrote:Even you tube is off line most of the last two days.

even there it was Pakistani hand

Pakistan move knocked out YouTube - CNN.com

http://www.cnn.com/2008/WORLD/asiapcf/0 ... n.youtube/

krishnan · Post by **krishnan** » 20 Dec 2008 21:20

karan_mc wrote:
p_saggu wrote:Even you tube is off line most of the last two days.

even there it was Pakistani hand

Pakistan move knocked out YouTube - CNN.com

http://www.cnn.com/2008/WORLD/asiapcf/0 ... n.youtube/

Interesting, the page is gone now.

anishns · Post by **anishns** » 20 Dec 2008 22:38

Hello Seetal,

Please look into the following link for employing DDoS protection with worm like characteristics.

http://www.secureworks.com/research/threats/ddos/

The good thing about this is that it can be deployed at the OS level and has been fairly successful in not just dropping bad hosts but also causing CPU peaking on the infected hosts

Other things that can be done are Apache mod_DOSevasive and a software firewall for linux called APF (Advance Policy Firewall)

Good Luck!

webmaster wrote:Hi Guys,

Just to confirm as Rahul has said the server on which this site runs has been a target of DDOS (distributed denial of service) attacks, as with most DDOS attacks the attacking hosts are mostly compromised (zombie) hosts which have been infected with some form of remote agents which respond to the commands from a master host(s).

The attack method is fairly simple you get all your zombie hosts to attack the server at once thereby overwhelming the server’s resource and hence denying legitimate traffic to the site. Whilst you can filter the offending IP addresses it’s only a matter of time for a whole range of new IP addresses are used for the attack – hence a better solution is needed namely firewalls which fend off DDOS type of attacks.

We are working with our hosting provider to resolve the issue in the mean time please bear with us.

Regards,
Seetal

Jaspreet · Post by **Jaspreet** » 21 Dec 2008 04:53

Ladies and Gentlemen of the Forum,
In order to get our daily fix if the forum goes down again, I created an alternate for you at http://groups.google.com/group/bharat-rakshak.

In case there's another disruption, please go there and post away.

Muppalla · Post by **Muppalla** » 21 Dec 2008 06:16

EDITED

Jagan · Post by **Jagan** » 21 Dec 2008 07:45

i fear that all data of IDF might have be deleted by hackers ,open source forum scripts are more easy prey for hackers is br forum secure enough ?

DDOS does not delete the data. if it was similar attack as on BR it shouldnt affect their archives. Even otherwise you would expect any webbie to have periodic backups that can be restored.

krishnan · Post by **krishnan** » 21 Dec 2008 08:53

It wasnt a DOS/DDOS. It was more than that

niran · Post by **niran** » 21 Dec 2008 14:41

I have read some place, there is a trace back SW which will do
some unpleasant things to the attacking computer BIOS
forcing the owner to buy a new hardware. counter attack
is allowed, no?

Hiten · Post by **Hiten** » 21 Dec 2008 17:46

krishnan wrote:
Interesting, the page is gone now.

Here is the cached version

Pakistan move knocked out YouTube

krishnan wrote:It wasnt a DOS/DDOS. It was more than that

If you are living in India, then your problem is compounded by this

Strange coincidence - BRF gets DDOSed the day undersea cables snap

krishnan · Post by **krishnan** » 21 Dec 2008 18:39

karan_mc wrote:
p_saggu wrote:Even you tube is off line most of the last two days.

even there it was Pakistani hand

Pakistan move knocked out YouTube - CNN.com

http://www.cnn.com/2008/WORLD/asiapcf/0 ... n.youtube/

Its an old news.

krishnan · Post by **krishnan** » 21 Dec 2008 18:40

Hiten wrote: If you are living in India, then your problem is compounded by this

I teach English at a high school in Sisaket. The last few days our connections have been very, very slow. Yesterday, when I was trying to teach some students how to use Limewire to download movies and songs, the connection seemed to be nearly non-existent. We thought that maybe the wire to our building had been damaged.
Les Blane, Sisaket, Thailand

When did they make it legal to download movies and songs from p2p network

Sid · Post by **Sid** » 21 Dec 2008 18:47

Hiten wrote:
krishnan wrote: Interesting, the page is gone now.
Here is the cached version
Pakistan move knocked out YouTube
krishnan wrote:It wasnt a DOS/DDOS. It was more than that
If you are living in India, then your problem is compounded by this
Strange coincidence - BRF gets DDOSed the day undersea cables snap

As mentioned by Webmaster/Admins site was under DoS attack, who have better picture of what happened and were informed the same by hosting providers. In case of such network disruption (which u reported) IT companies and hosting sites keep backup providers too which will offer service but at a lower bandwidth until primary provider is back online. But sites do not slip into network blackout.

And don't get so worked up over JF-17 defacement on Wikipedia. Just because someone winked here does not mean you can spill your frustration on whole BR. There is a a lot of propaganda information on that page too, i wonder where you can register your protest for that.

Hiten · Post by **Hiten** » 21 Dec 2008 22:57

krishnan wrote:
Hiten wrote: If you are living in India, then your problem is compounded by this

I teach English at a high school in Sisaket. The last few days our connections have been very, very slow. Yesterday, when I was trying to teach some students how to use Limewire to download movies and songs, the connection seemed to be nearly non-existent. We thought that maybe the wire to our building had been damaged.
Les Blane, Sisaket, Thailand
When did they make it legal to download movies and songs from p2p network

It is perfectly legal to distribute multimedia content in any manner deemed suitable if it is being released under CCL

Jagan · Post by **Jagan** » 22 Dec 2008 01:56

Hiten wrote:
Strange coincidence - BRF gets DDOSed the day undersea cables snap

apparently three major forums , the other two being IDF and WAB were DDOSed at the same time. WAB decided it had enough of India-Pak discussions. Following notice put up by the webmaster

Unfortunately over the past couple of days we have been hit by denial-of-service attacks. We've been caught in the middle of a cyberwar being fought between Indians and Pakistanis. For the time being, the South Asian Defense Topics section has been closed down. Please direct any questions you may have regarding this decision to me via private message. We ask that discussion of all issues regarding the Indian-Pakistani conflict take place on venue other than WAB.

Jagan · Post by **Jagan** » 22 Dec 2008 05:30

cleaned up

Sathish_A · Post by **Sathish_A** » 22 Dec 2008 14:54

Admins,

It seems after facing DDos the admin and webmaster at IDF accidentally posted their whole SQL database file in zip format.

Which was downloaded by deaf and dumb forum piglets, those morons are having a field day with this data, which has email, passwords, login names, IPs and they want to use this to maximise the damage. Poor souls...don't know how many are going to lose their email IDs forever.

I wonder how admins were so careless....please make sure such a thing never happens in BRF. Seems they are planning something on 1st of 2009

HariC · Post by **HariC** » 22 Dec 2008 19:51

Sathish_A wrote:Admins,

It seems after facing DDos the admin and webmaster at IDF accidentally posted their whole SQL database file in zip format.

Which was downloaded by deaf and dumb forum piglets, those morons are having a field day with this data, which has email, passwords, login names, IPs and they want to use this to maximise the damage. Poor souls...don't know how many are going to lose their email IDs forever.

I wonder how admins were so careless....please make sure such a thing never happens in BRF. Seems they are planning something on 1st of 2009

So lets make it clear - the Packees DID NOT hack the forum. They are dumb enough script kiddies who can do at the most dos attacks. we give them too much credit calling them 'hackers'

Too bad IDF scored a self-goal. shouldnt be too dificult to upload an index.htm file - is it?

krishnan · Post by **krishnan** » 22 Dec 2008 20:30

I dont think IDF came under any DDOS. It was hacked

Rahul M · Post by **Rahul M** » 22 Dec 2008 20:37

not hacked. DDOS. their server admin left the DB back-up file public while trying to restart..

p_saggu · Post by **p_saggu** » 22 Dec 2008 20:41

Hey identity protection is a very important issue for posters here. Hope adminullahs are very obsessive about guarding identities of the posters.

Is it possible for IP adressess and therefore my location to be traced by chin-paks if I post on BRF?

karan_mc · Post by **karan_mc** » 22 Dec 2008 21:55

Real shocker that members detail of IDF is now open ,my god even i was a member there some little years ago other then my email i donot think they can find much may be ip also ,i though srirangan who runs the forum was some programmer if i remember correctly he told me he was a php programmer very irresponsible job by the admin there

karan_mc · Post by **karan_mc** » 22 Dec 2008 22:25

just downloaded that sql file to see if any of my information has been leaked was not surprised to find some pm and my email address and ip ,but i am at relive since i donot use that email nor the service provider and it seems now that most of the crap are a year old my ip shown is of bharti which i switched over to bsnl 14 months ago ,they are celebrating has have digged gold but i think they have digged shit

anishns · Post by **anishns** » 22 Dec 2008 22:30

Chankian logic would have been to upload the backup with a bunch of viruses

But, oh well

Shivani · Post by **Shivani** » 22 Dec 2008 22:42

Rahul M wrote:their server admin left the DB back-up file public while trying to restart

I know it is just horrible to find humour in the travails of the weak and the handicapped, but...

p_saggu: Do not rely on others to protect your privacy.

Do not give your work/official email address while registering. (Change now).
Do not save messages in PM inbox/outbox. Delete them immediately after reading.
Do not reveal personal details to anonymous people over the internet. This means no article submission to BRM either!

That's sufficient for protecting privacy. Everything else (your posts) is in public domain already.

Rahul M · Post by **Rahul M** » 23 Dec 2008 02:15

Shivani wrote:
[*]Do not reveal personal details to anonymous people over the internet. This means no article submission to BRM either![/list]
.......

now, now, do people really need to invent such creative excuses to NOT submit articles to BRM ?

apart, BRM article submission does not endanger personal details anymore than posting on BR does.

Hey identity protection is a very important issue for posters here. Hope adminullahs are very obsessive about guarding identities of the posters.

Is it possible for IP adressess and therefore my location to be traced by chin-paks if I post on BRF?

we are. how many IP addresses and locations of your fellow members do you know ?
then why should the pakis do any better ?

Shivani · Post by **Shivani** » 23 Dec 2008 09:10

Rahul M wrote: do people really need to invent such creative excuses to NOT submit articles to BRM ?
BRM article submission does not endanger personal details anymore than posting on BR does.

For me it is a valid concern. Rather, it was. I do not see the reason why any person should require my name and address to publish an article on a website.

brmsrr.blogspot.com wrote:

We must have your real name and contact information in your email for all submissions. You may prefer a pen-name (BRF handle) on informal articles, but SRR peer-reviewed articles must have real names and contact info.

I had composed one article for BRM in August but chose not to reveal private information. If I was living alone it probably might not have mattered, but when you have kids you have to be much more careful. I would prefer that people cannot track me down to my home given the 'nonconformist' nature of my thoughts.

HariC · Post by **HariC** » 24 Dec 2008 02:30

turns out IDF was getting bad press because their service provider screwed up

http://img510.imageshack.us/img510/5667 ... iontl1.jpg

kidoman · Post by **kidoman** » 24 Dec 2008 17:13

Guys, I am really pissed off today.
The ba$tard$ in PDF have got hold of the IDF owner's phone no,facebook profile and mail id.They are troubling him like anything..
IDF is down for more than 9 days now..
Cant we do anything for our fellow Indians??
If we all cant , atleast suggest me something so that i can do something..

Yogi_G · Post by **Yogi_G** » 24 Dec 2008 18:32

kidoman wrote:Guys, I am really pissed off today.
The ba$tard$ in PDF have got hold of the IDF owner's phone no,facebook profile and mail id.They are troubling him like anything..
IDF is down for more than 9 days now..
Cant we do anything for our fellow Indians??
If we all cant , atleast suggest me something so that i can do something..

Facebook and mail can be fixed but not very sure of the phone number. That can be trouble....Maybe he can note down caller ID and share the numbers with us and we can start reverse-psycho calls to the numbers, we can split numbers between us and then turn on the heat as a group....

5 calls for every one call made by them...

Sathish_A · Post by **Sathish_A** » 24 Dec 2008 19:07

Count me in...bhailog

I am sitting in a den of leading telecom giant and can make the life of these paki scums in UK to eat their own $hit....

HariC · Post by **HariC** » 24 Dec 2008 19:41

Do it legally. put them in the "Visas to be revoked" list.

report all Stalking calls and incidents to the UK Cyber Stalking Reportline

https://www.wiredsafety.org/forms/stalking.html

Hire a lawyer, send the website domain owners a legal notice

If the calls are coming from the US, do the same - find out the appropriate authorities and report them.

I do have to say one thing - do everything professionally, you are more likely to be taken seriously. The rant on the website by the webmaster gautam represents a childish mentality. Instead of the rant - imagine if a formal message was posted saying that "we are tracking IPs, we are contacting webhosts, we are contacting local authorities" - the piggies would have chickened out.