It's holiday/DDoS season

  • Comment
Over the past 24 hours the Nexus sites have gone down 3 times, sometimes for as much as an hour. It's school holiday season which means it's also DDoS season, typically a time when an abnormally high amount of DDoS attacks happen (logical conclusion is...?). We're told by our hosts that we are not the target but unfortunately we're being taken down due to the attacks happening against our host's and main data centre's infrastructure. It's nice to know we're not the target, at least, but obviously it still sucks.

If you're wondering why we don't just "do something" about it. We do. We pay a lot of money (right now about $3200 a month and growing) to help against DDoS attacks, but DDoS mitigation is a bit like that scene at the end of Batman Begins where Jim Gordon is talking to batman and he's talking about escalation. "We start carrying semi-automatics, they buy automatics. We start wearing kevlar, they buy armour piercing rounds. And you're wearing a mask...". You can buy a ridiculously expensive firewall that can scrub 20GB/s of malicious traffic on your upstream, then you'll just get attacked by a bigger botnet that attacks you with 50GB/s of malicious traffic. You buy a firewall that can handle 75GB/s, they attack you with 100GB/s. And so on and so forth. And each time it gets more and more expensive to combat against. And it can get really, really expensive after a certain point.

We and our hosts continue to react to the DDoS attacks as and when they happen. If they happen while I'm at my computer then I'm updating the Nexus Twitter account to let people know about the down-time and that we're aware of it. So if you like to be kept in the loop while the sites are down then you can follow us on Twitter. We don't really use that account for anything else right now so you won't get spammed about crap you don't care about!

While the techheads work to sort this out for all of us (and this DDoS is affecting thousands of sites, so we're not the only victims) please sit tight and be patient. At the end of the day, this is one person ruining it or all of us. Well, one person, and hundreds of thousands of computer illiterate people who haven't secured their PC's/routers/Internet of Things hardware against people using their hardware as botnets. So by all means, take this time to review your own system security!

49 comments

Comments locked

A moderator has closed this comment topic for the time being
  1. evilgiraffe
    evilgiraffe
    • supporter
    • 1 kudos
    Don't want to make a new thread, and I figure this is as good a place as any for this post.
    For the last three days or so, I haven't been able to access nexusmods.com. It fails with a "no data received" error. But there's no reports of it being down, and using "is it down" type sites it seems to be accessible. Just not for me.
     
    I reinstalled Skyrim and redownloaded all my mods recently, so I'm paranoid I've been blocked for downloading ~15GB in a few hours.
    I doubt that's actually the case, but if anyone's got a better idea of why I can't access the site, I'd be happy to hear it.
     
    (and yes, using forums.nexusmods.com seems to work, even though I'd expect it to be a subpart of the same domain...)
     
    edit: So today it allowed me to view a very slow, very broken version of the page, and I figured it might be the browser. I'm using chrome, firefox is similarly not working, but Edge (yes, windows 10) actually worked fine. Has no-one else had the same problem? I don't have problems with other websites using chrome.
  2. diyeath
    diyeath
    • member
    • 9 kudos
    Logical conclusion is a bunch of angry script kiddies are using a simple program to DDoS the site, probably because they were so stupid they admitted to piracy or some nonsense and thus were banned from the site.

    Frankly, those people need to get their butts kicked. So hard they never forget the lesson: what you do on the internet is never truly anonomyous so you should treat it like you would real life.

    Bet they didn't think that nexus could track them and if actual damages were caused (provable damages) Robin could sue to shirt right off that person's back, or their parents.
    1. waluigiween
      waluigiween
      • supporter
      • 12 kudos
      We should teach them not to f*#@ with us just like the Legion did with Nipton.
    2. Voldra
      Voldra
      • member
      • 0 kudos
      what we do is truly anonymous on the internet, IF we take enough precautions and for some reason hackers are stupid enough to leave tracks. Although DDoSing is far better used for Hacktivism. While I seriously doubt that these script kiddies will be caught, but if they are, they deserve everything they get.
      anyone in most third world countries can easily ddos the shite out of most websites and face no fear of getting caught due to poor internet surveillance and security. take hackers in India for instance, they never get caught, not because they are "exceptional" (they're not), but because the cyber security department of the country is complacent.
      Rather it is just as likely that the hacker(s) responsible for our current inconvenience are from a third world country, as it is likely that they are from any developed nation.
    3. Yttri
      Yttri
      • member
      • 0 kudos
      There is no such thing as the "anonymous internet." Even understanding that TOR is more of an expense than an actual method of granting anonymity. Public keys are derived from private keys which means you CAN use brute force or databasing to derive the private key from a public key. Once you do that, no matter how many times you wrap it, your data is exposed.

      Even trying to claim "But random keys" ignores how computers work and that psuedorandom data just adds an additional level of abstraction by having a random seed and a state array. (Pure memory dumps often create sparse data, which is "weak". In some cases, you can have very predicable patterns occur with memory dump randomization which allows an attacker to easily bypass security.)

      BUT, it is even easier just to check for traffic data. You may only be requesting uplink, but you'll still generate far more traffic in a particular area at a specific time than is recorded as the norm. A person who moves around an area thinking he is smart is equally stupid given he likely moves in a circular pattern centric about his residence.

      This means that if someone wants to know what you, in particular, are doing; nothing is going to stop that person.


      Why doesn't this go to court? Because us American's are Computer Illiterates and don't understand any of this. Do you know how hard they had to fight just to get DNA evidence accepted in courts? Fingerprints? Let alone that we're acting like government spying is worse than corporate spying and these methods of destroying the illusion of anonymity would cause major issues.



      I would also add that "Hactivism" doesn't exist. DDoS, in all forms, is for little kids. It is akin to standing outside your "target" and throwing eggs.

      Can you cause financial damage? Yep.
      Can you upset the people running the buisness? Yep.
      Can you even get people to talk about it? Yep.

      But will ANYONE give a crap about you, your goals, or even understand WHY you're doing it? Nope.


      Even "real" hacking doesn't clean the term, given the government using hacking to find pedophiles is "bad" but a citizen wearing a mask and acting like a hooligan doing the same is "good."


      Is spying right or wrong, make up your mind.


    4. pyroriot57
      pyroriot57
      • member
      • 2 kudos
      best comment ive seen all day @waluigiween
    5. FightThePowah
      FightThePowah
      • member
      • 0 kudos
      Despite your enthusiasm, whoever these people are, aren't directly attacking this site. Only indirectly. They probably don't know what the nexus is or don't care about it.
  3. Thaiauxn
    Thaiauxn
    • supporter
    • 426 kudos
    If you have that kind of tech power and use it to suppress bad people, you're a hero. If you do it for s#*! - what does that make you? When we find you, what should we do to you?
     
    I think Ddos attacks and the like are a very good example of why it's bad to let your disenfranchised youth go completely without any direction or available social services. You have to have a moderate income to sustain a botnet. Even just a laptop will do, but it takes time and patience. Anybody willing to go through that level of work would be awesome if they had some direction and a job that needs solving. Find them. Put them to work. Inspire them. Give them a reason to wake up in the morning.
    1. Skyrabbit
      Skyrabbit
      • supporter
      • 6 kudos
      Good point, well made.
    2. fallout31961
      fallout31961
      • premium
      • 0 kudos
      Now your talking ! This Damn common-core education system is so into dumbing down the kids, that they actually come up to me now and ask me why are they teaching us so poorly.

      This generation of kids really needs what you just stated beyond anything that most realize !
    3. SeedReaper
      SeedReaper
      • premium
      • 3 kudos
      this is why we need an upvote button for comments on this site.
    4. Cactuar512
      Cactuar512
      • supporter
      • 1 kudos
      fallout31961, your post is hilariously ironic. You should re-evauate your own intelligence before talking politics or condemning an entire generation.
    5. jacksin125
      jacksin125
      • member
      • 0 kudos
      Actually, he is completely right about the common core. One of the lowest grade tests left half the kids crying in misery because if they clicked a wrong button it led them to an 8th grade test. They would still try to complete it, because they thought they would get in trouble if they didn't, but they had absolutely no idea how to answer the question. In a lot of the tests it was nearly impossible to find many of the places to answer the questions. Even better, there was a question that asked you to find the comma that was in the wrong place, and EVERY SINGLE COMMA was in the wrong place. The spelling and grammar (or, as it was spelled in the test, grammer) made the test look like it was written by a Somalian 14 year old. The tests were actually only suitable for people 1 or 2 grades below the test takers, but the test takers generally had to skip 5-10 percent of the questions because they couldn't figure out where the answer box was, or the correct answer wasn't an option in the multiple choice. Then you could move on to the fact that the common core has been trying to lower the difficulty of all grades, so non-core 3th or 4th grade is the equivalent of common core 5th grade. I could quite understand why a child would ask a teacher why they were being taught so poorly. Schools should be more mentally stimulating, being as around 70% of kids are smarter than 50% of adults.
      Yes, that was a long-winded lecture.
    6. CoreParad0x
      CoreParad0x
      • premium
      • 1 kudos
      I agree with fallout31961 and Thaiauxn.

      The school system, at least here in the US, is a joke. I'm 27, and I don't remember it being particularly good when I was in it. I remember when I lived in Florida and went to a charter school, that was pretty good, challenging, then we had to move in 12th grade to Virginia. The school was extremely easy, I had to retake the state test and I felt like I was back in middle school. It was on the computer, and heck I was even able to find a way to cheat on it (not that I even needed to). My AP computer science class went from having actual lectures, projects, etc to being just "Here's this book, copy all the code from the book to the IDE and compile it." No lectures, no teaching, just busywork. I knew more than everyone (read: Two people) in that Virginia AP comp-sci class because the only thing they did was copy out of a book. No actual drive to learn the stuff, or expand.

      The school system gives you no reason to actually want to go. Yeah some of the stuff you learn is interesting, but for the most part it's not. Most of the time you seem to get teachers who have too many students, not enough time to actually come up with compelling course material, etc. You literally have no other drive, short of whatever you come with, aside from getting grades and passing these stupid state tests.
    7. Jaximus420
      Jaximus420
      • BANNED
      • 0 kudos
      luld :^)
  4. LivingSamosa
    LivingSamosa
    • premium
    • 0 kudos


     
    Well if it's DDoSing, aren't those kids technically smart? ;3
     


     
    Not really, preforming a DDoS (DoS if it's from a single PC) is extreme simple, once you know a little about batch files you can easily make one, I've made several (to help my minecraft server test for attacks). Other than that there's a simple 12 Kb program called LOIC in which you enter the URL or preferably the IP of the website you want to DoS, you can control the number of packets to send per second, weather you want replies to your packets and much more. A crude term for people who use LOIC and other programs is 'Script Kiddie' as in someone who does no hard work and uses scripts made by professional penetration testers or black/grey hats.
    It's people like these guys who basically destroyed the name of hackers and hacking. I have respect for hacktivists but for blackhats who use their skill for the 'lulz' or to steal money etc. that's just wrong.
  5. Vesuvius1745
    Vesuvius1745
    • supporter
    • 15 kudos
    Do you know what site(s) ARE being attacked, and why? Usually such a concentrated effort isn't arbitrary.
  6. jeremy2396
    jeremy2396
    • member
    • 0 kudos
    I would thoughtfully compare these malicious people who attack such a good family as we; to the current masked bandits and murderers in the middle-east who I won't even benefit with a title or name.

    Their (so far) unidentified cowardice is something that will return to haunt not just their conscience but perhaps and hopefully their sleep or sharply on the highway's fast lane one day.

    Know this that even somewhere in this digital world ..... YOU WILL make a serious and stupid mistake and be dealt with!
  7. FurAfterDark
    FurAfterDark
    • member
    • 31 kudos
    Who would DDoS a modding community? isn't that kinda an oxymoron move? o.o
    1. Madcat221
      Madcat221
      • premium
      • 838 kudos
      Petulant little twerps do it. Particularly ones who wanted to turn this place into their own personal playground but were denied.

      If you run across anyone elsewhere on the 'Net that claims they were banned from the Nexus network "for no reason", ask their handle and search that forum to see the "no reason".
    2. FurAfterDark
      FurAfterDark
      • member
      • 31 kudos
      Well i mean technically taking down the entire site would effect the modders and people just want to download mods more than anyone else so that kinda seems selfish to do that
    3. Setekh79
      Setekh79
      • supporter
      • 19 kudos
      Dumb kids with nothing else to do with their lives, that's who.
    4. FurAfterDark
      FurAfterDark
      • member
      • 31 kudos
      Well if it's DDoSing, aren't those kids technically smart? ;3
    5. krisser143
      krisser143
      • premium
      • 70 kudos
      @FurAfterDark
      No, they just download a dDoS program that uses other already-hacked computers to dDoS
    6. hammhome
      hammhome
      • member
      • 1 kudos
      @FurAfterDark, yeah, technically, but those are just book smarts. They do not know anything about the consequences of their actions. Also, I realize I sound like an idiot for saying "book smarts", but it seemed like the right word.
    7. PoobahGorg
      PoobahGorg
      • supporter
      • 1 kudos
      It doesn't so much take smarts to DDoS someone. It takes money. So figure it's folks who are trying to extort money from a site (in this case, probably someone else who hosts with the same provider the Nexus uses was the intended victim, this site just happened to be there). Or someone with some (one assumes ill-gotten) cash to blow to rent the services of a botnet.

      The folks who "own" those botnets build them via malware. Some of them doubtless put a fair bit of time, money and effort into compromising thousands of non-secure PCs. Jerks (or sometimes even governments) pay them to take down certain sites.
    8. Arkanix117
      Arkanix117
      • member
      • 0 kudos
      that's two words >_>
  8. Hutchy01
    Hutchy01
    • member
    • 1 kudos
    It's a shame what's happening but thanks for including the batman scene ... one of the best in the trilogy.
  9. MotoSxorpio
    MotoSxorpio
    • premium
    • 192 kudos


    how about a button for donations? we all love the nexus and we would like to keep it healthy and running at at its best the website surely deserves it


    Here's where you "donate" to Nexus to keep it healthy and running....: http://forums.nexusmods.com/index.php?/store/category/1-premium-membership/
  10. SteveOwnsMC132
    SteveOwnsMC132
    • member
    • 0 kudos
    is there a way to track ip's that are ddosing you? pretty confident there is one. well if you do find the ip of the guy ddosing you then i dont think he will have his internet back for a year or two, as long as you post it here, which i think is illegal