Thursday, October 31, 2013

The ultimate guide to preventing DNS-based DDoS attacks


When it comes to DNS, Cricket Liu literally wrote the book. He has co-authored all five editions of O'Reilly's "DNS and BIND" book, which is generally regarded as the definitive guide on all things relating to the Domain Name System. Cricket is currently chief infrastructure officer at Infoblox.


DNS is clearly a critical component of computer networking, but there are times when these tools can be used for malfeasance. In this week's New Tech Forum, Cricket takes a look at the growing problem of DNS-based DDoS attacks and how to deal with them. -- Paul Venezia


DNS-based DDoS attacks: How they work and how to stop them
The DNS-based DDoS (distributed denial-of-service attack) has become one of the most common destructive attacks on the Internet. But how do they work? And what can we do to defend against them?


In this article, I'll describe how DDoS attacks both exploit and target DNS infrastructure. I'll also show you what you can do to protect yourself and others.


The big spoof
Generating a DDoS attack using DNS infrastructure is remarkably simple: The attackers send queries to name servers across the Internet, and those name servers return responses. Instead of sending the queries from their own IP addresses, though, the attackers spoof the address of their target -- which could be a Web server, a router, another name server, or just about any node on the Internet.


Spoofing DNS queries is particularly easy because they are usually carried over UDP (the connectionless User Datagram Protocol). Sending a DNS query from an arbitrary IP address is about as simple and has roughly the same effect as writing someone else's return address on a postcard.


Spoofing queries isn't enough to incapacitate a target, though. If the responses to those queries were no larger than the queries themselves, an attacker would do just as well to flood the target with spoofed queries. No, to maximize the damage to the target, each query should return a very large response. It turns out that's very easy to instigate.


Since the advent of EDNS0, a set of extensions to DNS introduced back in 1999, UDP-based DNS messages have been able to carry lots of data. A response can be as large as 4,096 bytes. Most queries, on the other hand, are fewer than 100 bytes in length.


Once upon a time, it was relatively difficult to find a response that large in the Internet's namespace. But now that organizations have begun deploying DNSSEC, the DNS Security Extensions, it's much easier. DNSSEC stores cryptographic keys and digital signatures in records in the namespace. These are positively enormous.


Source: http://www.infoworld.com/t/security/the-ultimate-guide-preventing-dns-based-ddos-attacks-229790?source=rss_infoworld_blogs
Related Topics: Walking Dead Season 4   Preachers of LA   Wojciech Braszczok   new orleans saints   Cecily Strong  

Search for dark matter comes up empty so far

In this Oct. 29, 2013 photo, physicist Dan McKinsey of Yale University explains an experiment being conducted deep in an abandoned gold mine in Lead, S.D., to search for elusive and mysterious dark matter. In an announcement released Wednesday, Oct. 30, 2013, scientists at the Sanford Underground Research Facility say they found absolutely no evidence of dark matter in what is the most technologically advanced Earth-based search for the material that has mass but cannot be seen. They’ll keep looking for another year, but scientists were not optimistic about finding dark matter with the current setup and are already planning to build a more sensitive experiment on the site. (AP Photo/Rapid City Journal, Kristina Barker)







In this Oct. 29, 2013 photo, physicist Dan McKinsey of Yale University explains an experiment being conducted deep in an abandoned gold mine in Lead, S.D., to search for elusive and mysterious dark matter. In an announcement released Wednesday, Oct. 30, 2013, scientists at the Sanford Underground Research Facility say they found absolutely no evidence of dark matter in what is the most technologically advanced Earth-based search for the material that has mass but cannot be seen. They’ll keep looking for another year, but scientists were not optimistic about finding dark matter with the current setup and are already planning to build a more sensitive experiment on the site. (AP Photo/Rapid City Journal, Kristina Barker)







In this Tuesday, Oct. 29, 2013 photo, is monitoring equipment at the Large Underground Xenon Experiment at Sanford Underground Research Facility deep in an abandoned gold mine in Lead, S.D. Scientists in the experiment to search for elusive and mysterious dark matter announced Wednesday the experiment found absolutely no evidence of dark matter in what is the most technologically advanced Earth-based search for the material that has mass but cannot be seen. They’ll keep looking for another year, but scientists were not optimistic about finding dark matter with the current setup and are already planning to build a more sensitive experiment on the site. (AP Photo/Rapid City Journal, Kristina Barker)







In this Oct. 29, 2013 photo, a 6-foot-tall titanium tank is filled with almost a third of a ton of liquid xenon at the Large Underground Xenon Experiment at Sanford Underground Research Facility deep in an abandoned gold mine in Lead, S.D. Scientists in the experiment to search for elusive and mysterious dark matter announced Wednesday, Oct. 30, 2013, the experiment found absolutely no evidence of dark matter in what is the most technologically advanced Earth-based search for the material that has mass but cannot be seen. TheyĆ¢€™ll keep looking for another year, but scientists were not optimistic about finding dark matter with the current setup and are already planning to build a more sensitive experiment on the site. (AP Photo/Rapid City Journal, Kristina Barker)







(AP) — Nearly a mile underground in an abandoned gold mine, one of the most important quests in physics has so far come up empty in the search for the elusive substance known as dark matter, scientists announced Wednesday.

But physicists on the project were upbeat, saying they had developed a new, more sensitive method of searching for the mysterious material that has mass but cannot be seen. They planned to keep looking.

"This is just the opening salvo," said Richard Gaitskell of Brown University, a scientist working on the Large Underground Xenon experiment, or LUX, the most advanced Earth-based search for dark matter. A detector attached to the International Space Station has so far failed to find any dark matter either.

The researchers released their initial findings Wednesday after the experiment's first few months at the Sanford Underground Research Facility, which was built in the former Homestake gold mine in South Dakota's Black Hills.

With more than 4,800 feet of earth helping screen out background radiation, scientists tried to trap dark matter, which they hoped would be revealed in the form of weakly interacting massive particles, nicknamed WIMPS. The search, using the most sensitive equipment in the world, is looking for the light fingerprint of a WIMP bouncing off an atomic nucleus of xenon cooled to minus 150 degrees.

But nothing has been found. The team will continue looking for another year and plans to build a more sensitive experiment on the site, using a bigger tank of xenon. Scientists involved in the experiment said it had eliminated some theoretical candidates for dark matter, and there are many more theoretical models to search for.

"The short story is that we didn't see dark matter interacting, but we had the most sensitive search for dark matter ever performed in the world," said Daniel McKinsey, a physicist at Yale University.

The LUX experiment was 20 times more sensitive than any previous experiments, scientists said. The proposed next experiment would be 1,000 times more sensitive still.

The lab, in a bright, clean space at the end of an old mining tunnel filled with pipes and electric cables, is reached by a 10-minute ride in an elevator that once carried miners. Gaitskell and McKinsey said the experiment has far less radiation interference from cosmic rays than any other dark-matter lab.

Essentially, scientists are searching for something they are fairly sure exists and is crucial to the entire universe. But they do not know what it looks like or where to find it. And they are not sure if it is a bunch of light particles that weakly interact or if it is more like a black hole.

"It's ghost-like matter," McKinsey said.

Researchers "are really searching in the dark in a way," said Harvard University physicist Avi Loeb, who is not part of the LUX team. "We have no clue. We don't know what this matter is."

Even more so than the recently discovered Higgs boson, dark matter is central to the universe.

About one-quarter of the cosmos is comprised of dark matter — five times that of the ordinary matter that makes up everything we see. Dark matter is often defined by what it isn't: something that can be seen and something that is energy.

Scientists are pretty sure dark matter exists, but they are not certain what it is made of or how it interacts with ordinary matter. It is considered vital to all the scientific theories explaining how the universe is expanding and how galaxies move and interact.

"We know there's stuff out there that is something else, and that makes these searches hugely important because we know we are missing most of the universe," said Neal Weiner, director of the Center for Cosmology and Particle Physics at New York University, who was not part of the search.

The lack of success could mean the instruments are inadequate, Gaitskell and McKinsey said.

Or, considering the lack of knowledge about what dark matter really is, "perhaps we're going in the wrong direction," Loeb said.

___

Borenstein reported from Washington. He can be followed at http://twitter.com/borenbears .

Chet Brokaw can be followed at http://twitter.com/ChetBrokaw .

___

Online:

Sanford lab: http://sanfordlab.org

Associated PressSource: http://hosted2.ap.org/APDEFAULT/b2f0ca3a594644ee9e50a8ec4ce2d6de/Article_2013-10-30-Dark%20Matter%20Search/id-0b3fa999d7a84bf396d97c93df52027c
Category: lauren conrad   christopher columbus   Ink Master   bob newhart   nadal  

The Dark Mail Alliance Wants to Reinvent Email as We Know It

The Dark Mail Alliance Wants to Reinvent Email as We Know It

In the wake of the Edward Snowden leaks, we've seen at least two encrypted email services close shop in the face of government scrutiny. They're not giving up on the mission, however. In fact, these freedom fighters now say they're coming back twice as strong and twice as committed to shutting out the NSA.

Read more...


    






Source: http://feeds.gawker.com/~r/gizmodo/full/~3/5sxJYQixjBc/the-dark-mail-alliance-wants-to-reinvent-email-as-we-kn-1455074428
Tags: Nina Davuluri   Nothing Was The Same Leak   Nokia   Dedication 5   green bay packers  

Kristin Cavallari, Jay Cutler expecting 2nd baby

FILE - This April 12, 2012 file photo shows Kristin Cavallari at the Conde Nast Traveler Hot List Party at The Presidential Suite of Hotel Bel-Air in Los Angeles. Cavallari and her Chicago Bears quarterback husband Jay Cutler are expecting their second baby. The 26-year-old former star of MTV’s “Laguna Beach” and “The Hills” confirmed the news Wednesday, Oct. 30, 2013, on Twitter. The couple have a 14-month-old son and were married last June in Nashville, Tenn. (AP Photo/Danny Moloshok, File)







FILE - This April 12, 2012 file photo shows Kristin Cavallari at the Conde Nast Traveler Hot List Party at The Presidential Suite of Hotel Bel-Air in Los Angeles. Cavallari and her Chicago Bears quarterback husband Jay Cutler are expecting their second baby. The 26-year-old former star of MTV’s “Laguna Beach” and “The Hills” confirmed the news Wednesday, Oct. 30, 2013, on Twitter. The couple have a 14-month-old son and were married last June in Nashville, Tenn. (AP Photo/Danny Moloshok, File)







NEW YORK (AP) — Kristin Cavallari and her Chicago Bears quarterback husband Jay Cutler are one step closer to having their own football team.

Cavallari is pregnant with their second baby. The 26-year-old former star of MTV's "Laguna Beach" and "The Hills" confirmed the news Wednesday on Twitter. She wrote: "We are so excited for Camden to be a big brother!"

Camden is the couple's 14-month-old son.

Cavallari and Cutler were married last June in Nashville, Tenn.

The family splits their time between Nashville and Chicago.

Associated PressSource: http://hosted2.ap.org/APDEFAULT/4e67281c3f754d0696fbfdee0f3f1469/Article_2013-10-30-People-Kristin%20Cavallari/id-e79ccd56c8dc4f8a82ebdab5261bfe88
Tags: Red Sox Score   david cassidy   Xbox One Release Date   lindsay lohan   Hunter Hayes  

LeAnn Rimes' invasion of privacy suit dismissed




FILE - In this July 1, 2013 file photo, Leann Rimes performs at the Friend Movement Anti-Bullying Benefit Concert at the El Rey Theatre, in Los Angeles. Los Angeles court records show a judge on Monday, Oct. 28, 2013, dismissed an invasion of privacy lawsuit filed by Rimes against two women she claimed illegally recorded a phone conversation with her and posted it online. (Photo by John Shearer/Invision/AP, file)






LOS ANGELES (AP) — An invasion of privacy lawsuit that LeAnn Rimes filed against two Northern California women has been dismissed.

Los Angeles court records show the actress-singer's suit against Kimberly Smiley and her daughter Alexis Smiley was dismissed Monday. The dismissal prevents Rimes from re-filing the case.

Rimes sued the women in August 2012 claiming they recorded a phone conversation with her and posted it online. She said the recording damaged her reputation and relationships, and caused her emotional distress.

Kimberly Smiley denied wrongdoing in an interview after the suit was filed.

Steve White, an attorney representing the Smileys, says the two sides resolved their differences and he could not comment further.

Rimes' lawyer, Larry Stein, was not immediately available to comment.

Source: http://news.yahoo.com/leann-rimes-invasion-privacy-suit-dismissed-211430198.html
Category: miss america   nadal   Manny Diaz   Allegiant Air   Desiree And Chris  

Wednesday, October 30, 2013

O2 vs Vodafone vs Three vs EE: Which UK iPad Air or iPad mini carrier should you choose?

2013 iPad guide: How to choose between O2, Vodafone, Three and EE, and a popular MVNO alternative.

If you're in the UK with eyes on a new cellular iPad Air or Retina iPad mini, the decision on which carrier to go with is more difficult than ever. This time around 4G LTE is a factor, with three of the four big carriers having recently flipped the switch, with one more to come before the end of the year. As such, getting the most bang for your buck while accessing this superfast mobile data on your new iPad is likely top of the agenda. But it doesn't end there.

Let's take a look at what's on offer from the big four.

O2 vs EE vs Vodafone vs Three - The big four

As with the recent iPhone 5s and iPhone 5c launch, 4G LTE is the hot property in deciding where to go with your devices. If you want LTE out of the box, then Three can be discounted immediately. Three will be getting it, but not until December when the rollout will finally begin. That said, Three is notorious for offering great value for money on data allowances, and the HSPA+ offered currently will in places match the LTE offered by rival carriers for download speed.

O2 and Vodafone are still in the early stages of their respective rollouts, so for anyone serious about 4G right now, EE is the best looking option. Of the big four carriers, only O2 at the moment seems to have no plans to offer the iPad Air at launch. No pricing for subsidized models is available at the time of writing, but we'll update as and when that information becomes available.

The MVNO way

Perhaps not something that immediately springs to mind, but beyond the main four carriers there is still chance to get some data for your new iPad Air. Probably the most popular – and worth considering – is GiffGaff. And, while the selection of plans is limited, there's still a chance to get a decent bucket of data for not a lot of money. And, since it runs on the O2 network, the signal should be pretty good.

The best option for prospective iPad Air buyers is the £12.50 per month 'Gigabag,' which offers 3GB of mobile data. There are options at 500MB and 1GB for £5 and £7.50 per month respectively, but for not a lot more cash you get a decent extra chunk of data. If you're buying your new iPad from Apple, this option is absolutely worth considering.

The only real drawback; in the event of issues, you won't have as easy access to customer service as you would with the major carriers. GiffGaff has a big community focus, but the lack of high street stores could deter many.

Network availability

Beyond just thinking about the financial side, there's coverage to take into account. After all, there's little point paying out if you're not going to be getting what you're paying for. Generally the big four all have excellent coverage nationwide, with the usual blackspots to be expected. The best thing to do is to check out the coverage maps at the links below for each of them.

Who should get their iPad on Three?

If you don't mind waiting for LTE, Three is well worth a look. The HSPA+ offered by Three is more than competitive in terms of download speeds when compared to LTE enabled competitors, and is definitely to be considered by the data hungry iPad owner.

Who should get their iPad on EE?

Anyone who wants LTE, in more locations, now. EE has more coverage than the other LTE enabled carriers by far, and has even started rolling out double-speed data in certain locations such as London and Birmingham. The network that came together as a combined effort of Orange and T-Mobile has solid signal over most of the UK, and also has a decent reputation for working indoors.

Who should get their iPad on Vodafone?

At this point, the strongest argument is that if the signal in your area is strongest on Vodafone, then go with them. Their LTE offering is still in its infancy, and Vodafone traditionally hasn't been as price competitive as some of the other carriers. Long serving customers and folks who enjoy the best signal are best suited to Vodafone.

Who should get their iPad on O2?

As with Vodafone, O2 has a 4G LTE network currently in its infancy. The good news is that the spectrum used for it will work better indoors, so as it rolls out that might be something to consider. The main issue currently is that O2 has no apparent plans to sell subsidized iPads, so this one is strictly for those buying from Apple. For now.

Still undecided?

If you're still not sure about which UK carrier to get for your iPad Air or iPad mini jump into our iPad discussion forums and the best community in mobile will happily help you out, or hey, maybe Wi-Fi-only is good enough for you. Let know in the comments - which one did you go with and why?


    






Source: http://feedproxy.google.com/~r/TheIphoneBlog/~3/PY8qSk3WWZA/story01.htm
Similar Articles: dracula   tommy morrison  

Around the Web…

Wednesday’s riveting reads are just waiting for a click: Hilaria Baldwin: Alec and I dated for six weeks before our first kiss — Beach Six secrets to your child’s Halloween happiness — Just the Facts, Baby Swaddling babies could cause hip problems, says orthopedic surgeon — BBC How to throw a cute and creative candy […]Source: http://feeds.celebritybabies.com/~r/celebrity-babies/~3/0xgyXHU6JnQ/
Similar Articles: Jimmy Graham   Ios 7 Release Date