EVE General Discussion

If the new expansion included content that was massively hurting the Goons, I could see them trying something like this to extort CCP.

But there is nothing in the expansion like that. You may say "Tech!" except the goons have said many times that although they are exploiting the current Tech situation, that situation should not exist.

There is the possibility it was just an attempt to get credit card numbers, or identity theft of some sort, or to get account details so assets could be drained for RMT.

There seem to be a lot of misconceptions. Let me clear this up, considering I know how a DDoS works, and understand what CCP said in their post.

Someone found a vulnerability in CCP's servers. This doesn't mean they were able to gain access, or compromise the system. Vulnerabilities like that are pretty rare when you have a development team that knows what they're doing. Instead, what this most likely means, is they found a way to make CCP's servers do excessive amounts of work. They then either used a single computer, or multiple computers, to repeatedly send the data to CCP's servers that would make them do excessive amounts of work. This resulted in a Denial of Service.

Think of it in terms of a website, as it's a bit easier that way. Imagine you found a page on a website that took forever to load, and while loading slowed the entire website down. Now imagine if you had control of thousands of computers, and commanded all of those computers to request that page over and over again. The effect would be that the website would go offline under the load while trying to process all of those requests.

CCP took the servers offline to ensure no further vulnerabilities had been found/exploited. This is precautionary, and a smart move on their part. It doesn't mean the attacker actually gained any access though.

Yes I do. As stated the whole idea behind a DDOS is to flood a server with "white noise" exploiting a vulnerability in a servers ability to process incoming traffic. Which then is almost always followed with a attempt to access information within a server. This is why anytime time a DDOS attack occurs the servers are taken down, to prevent access as well as do a sweep of the system to see if anything has been compromised.

DOS attacks are rarely used nowadays just to deny service, pretty much anytime a DOS attack occurs you can assume they are doing so to try and gain access.

They are distinct, but almost always used in conjunction with one another.

Yes I do. As stated the whole idea behind a DDOS is to flood a server with "white noise" exploiting a vulnerability in a servers ability to process incoming traffic. Which then is almost always followed with a attempt to access information within a server. This is why anytime time a DDOS attack occurs the servers are taken down, to prevent access as well as do a sweep of the system to see if anything has been compromised.

DOS attacks are rarely used nowadays just to deny service, pretty much anytime a DOS attack occurs you can assume they are doing so to try and gain access.

They are distinct, but almost always used in conjunction with one another.

Throw everyone in jail, that way we will be sure the guilty have been punished.