Discuss mailing list

["Alex M (Coyo)" <coyo AT darkdna.net>]

On 06/11/2013 01:22 AM, Julian DeMarchi wrote:
> On 06/11/2013 04:20 PM, Alex M (Coyo) wrote:
> > On 06/11/2013 01:17 AM, Julian DeMarchi wrote:
> > > On 06/11/2013 04:13 PM, Quinn Wood wrote:
> > > > Perhaps instead of making claims that a zone won't be used for
> > > > anything than attacks backed on its name, folks should perform
> > > > heuristics checks on, I don't know, the actual zone.
> > > >
> > > > Any Tom, Dick, or Harry can register stopddos.est and pop the same
> > > > records into it.
> > >    dig ddostheinter.net ANY
> > >
> > > ;; MSG SIZE  rcvd: 8290
> > >
> > > This forces TCP.
> > >
> > > ]$ dig ddostheinter.net +short | wc -l
> > > 511
> > >
> > > Why would someone have 511 A records for @....
> > What would be the point of forcing a dns query to use TCP? What would an
> > adversary gain?
> TCP takes more overhead then UDP. It's also the increased packet size.
> More wham value...

So wait a minute, this domain is serious?

Why would anyone pay money to host a server specifically for DDOSing people?