{"id":55778,"date":"2020-01-28T00:00:00","date_gmt":"2020-01-27T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel"},"modified":"2020-02-18T14:03:55","modified_gmt":"2020-02-18T11:03:55","slug":"kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","title":{"rendered":"Zakladatel spole\u010dnosti DDoS ochrany p\u0159iznal, \u017ee sama spou\u0161t\u011bla DDoS \u00fatoky","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Zakladatel
\nDo roku 2016 se vDos stal nejpopul\u00e1rn\u011bj\u0161\u00edm na sv\u011bt\u011b slu\u017ebou pro objedn\u00e1n\u00ed DDoS \u00fatok\u016f.<\/i><\/p>\n

Pokud se v\u011b\u0159it teori\u00edm spiknut\u00ed, antivirusov\u00e9 spole\u010dnosti samy \u0161\u00ed\u0159\u00ed viry a slu\u017eby ochrany proti DDoS \u00fatok\u016fm tyto \u00fatoky iniciuj\u00ed. Samoz\u0159ejm\u011b, \u017ee jsou to v\u00fdmysly\u2026 nebo ne?<\/p>\n

16. ledna 2020 Feder\u00e1ln\u00ed obvodn\u00ed soud v New Jersey uznal vinn\u00fdm<\/a><\/noindex> 22let\u00e9ho Takera Prestona, obyvatele m\u011bsta Macon, st\u00e1t Georgia, v jednom z bod\u016f obvin\u011bn\u00ed, konkr\u00e9tn\u011b \"po\u0161kozen\u00ed chr\u00e1n\u011bn\u00fdch po\u010d\u00edta\u010d\u016f prost\u0159ednictv\u00edm p\u0159enosu programu, k\u00f3du nebo p\u0159\u00edkazu\". Taker je spoluzakladatel spole\u010dnosti BackConnect Security LLC, kter\u00e1 nab\u00edzela ochranu proti DDoS \u00fatok\u016fm. Mlad\u00fd podnikatel se nedok\u00e1zal udr\u017eet od poku\u0161en\u00ed pomst\u00edt se neochotn\u00fdm klient\u016fm.
\n<\/a><\/noindex>
\nSmutn\u00fd p\u0159\u00edb\u011bh Takera Prestona za\u010dal v roce 2014, kdy hacker-teenager spolu se sv\u00fdm p\u0159\u00edtelem Mar\u0161alem Webbem zalo\u017eil spole\u010dnost BackConnect Security LLC, od n\u00ed\u017e se pozd\u011bji odd\u011blila BackConnect, Inc. V z\u00e1\u0159\u00ed 2016 se tato firma proslavila<\/a><\/noindex> b\u011bhem operace k uzav\u0159en\u00ed slu\u017eby vDos, kter\u00e1 byla v t\u00e9 dob\u011b pova\u017eov\u00e1na za nejpopul\u00e1rn\u011bj\u0161\u00ed na sv\u011bt\u011b slu\u017ebu pro objedn\u00e1n\u00ed DDoS \u00fatok\u016f. Spole\u010dnost BackConnect \u00fadajn\u011b sama \u010delila \u00fatoku p\u0159es vDos \u2014 a provedla neobvyklou \"protikampa\u0148\", kdy\u017e z\u00edskala 255 IP adres protivn\u00edka prost\u0159ednictv\u00edm BGP p\u0159epaden\u00ed.<\/a><\/noindex> (BGP hijacking). Prov\u00e1d\u011bn\u00ed takov\u00e9ho \u00fatoku na ochranu vlastn\u00edch z\u00e1jm\u016f vyvolalo v komunit\u011b informa\u010dn\u00ed bezpe\u010dnosti rozporn\u00e9 n\u00e1zory. Mnoz\u00ed pova\u017eovali, \u017ee BackConnect p\u0159ekro\u010dila meze povolen\u00e9ho.<\/p>\n

Jednoduch\u00e9 BGP p\u0159epaden\u00ed se prov\u00e1d\u00ed ozn\u00e1men\u00edm ciz\u00edho prefixu jako sv\u00e9ho. Uplinky\/p\u00edry jej p\u0159ij\u00edmaj\u00ed a za\u010d\u00edn\u00e1 se \u0161\u00ed\u0159it po s\u00edti. Nap\u0159\u00edklad v roce 2017 \u00fadajn\u011b v d\u016fsledku selh\u00e1n\u00ed softwaru \"Rostelecom\" (AS12389) za\u010dal oznamovat prefixy<\/a><\/noindex> Mastercard (AS26380), Visa a n\u011bkter\u00fdch dal\u0161\u00edch finan\u010dn\u00edch organizac\u00ed. P\u0159ibli\u017en\u011b takto fungovala spole\u010dnost BackConnect, kdy\u017e expropriovala IP adresy od bulharsk\u00e9ho hostitele Verdina.net.<\/p>\n

Gener\u00e1ln\u00ed \u0159editel BackConnect Bryant Townsend se potom obhajoval.<\/a><\/noindex> v\u00a0newsletter NANOG pro poskytovatele s\u00edt\u00ed. \u0158ekl, \u017ee rozhodnut\u00ed za\u00fato\u010dit na adresn\u00ed prostor nep\u0159\u00edtele nebylo snadn\u00e9, ale jsou p\u0159ipraveni n\u00e9st odpov\u011bdnost za sv\u016fj \u010din: \u201eA\u010dkoli jsme m\u011bli mo\u017enost skr\u00fdt sv\u00e9 \u010diny, c\u00edtili jsme, \u017ee by to bylo \u0161patn\u00e9. Str\u00e1vil jsem hodn\u011b \u010dasu p\u0159em\u00fd\u0161len\u00edm o tomto rozhodnut\u00ed a o tom, jak negativn\u011b by se mohlo odrazit na spole\u010dnosti a na mn\u011b v o\u010d\u00edch n\u011bkter\u00fdch lid\u00ed, ale nakonec jsem ho podpo\u0159il.\u201c<\/p>\n

Jak se uk\u00e1zalo, BackConnect ji\u017e d\u0159\u00edve pou\u017eil BGP-hijacking a spole\u010dnost m\u00e1 obecn\u011b temnou minulost. Je t\u0159eba poznamenat, \u017ee BGP-hijacking nen\u00ed v\u017edy pou\u017e\u00edv\u00e1n zlobiv\u00fdmi \u00famysly. Brian Krebs p\u00ed\u0161e<\/a><\/noindex>, \u017ee s\u00e1m pou\u017e\u00edv\u00e1 k ochran\u011b p\u0159ed DDoS slu\u017eeb spole\u010dnosti Prolexic Communications (nyn\u00ed sou\u010d\u00e1st Akamai Technologies). To pr\u00e1v\u011b vymyslelo, jak vyu\u017e\u00edt BGP hijack k ochran\u011b p\u0159ed DDoS \u00fatoky.<\/p>\n

Pokud se ob\u011b\u0165 DDoS \u00fatoku obr\u00e1t\u00ed na Prolexic o pomoc, posledn\u011b jmenovan\u00e1 p\u0159esm\u011brov\u00e1v\u00e1 IP adresy klienta na sebe, co\u017e j\u00ed umo\u017e\u0148uje analyzovat a filtrovat p\u0159\u00edchoz\u00ed provoz.<\/p>\n

Jeliko\u017e BackConnect poskytoval DDoS ochrann\u00e9 slu\u017eby, byla provedena anal\u00fdza, kter\u00e9 z BGP-hijacking\u016f lze pova\u017eovat za legitimn\u00ed v z\u00e1jmu jejich klient\u016f a kter\u00e9 vypadaj\u00ed podez\u0159ele. P\u0159i tom se zohled\u0148uje doba trv\u00e1n\u00ed uchv\u00e1cen\u00ed ciz\u00edch adres, jak \u0161iroce byl ciz\u00ed prefix inzerov\u00e1n jako sv\u016fj, jestli existuje potvrzen\u00e1 dohoda s klientem atd. Z tabulky je z\u0159ejm\u00e9, \u017ee n\u011bkter\u00e9 \u010diny BackConnect vypadaj\u00ed velmi podez\u0159ele.<\/p>\n

\"Zakladatel<\/a><\/noindex><\/p>\n

Z\u0159ejm\u011b n\u011bkdo z po\u0161kozen\u00fdch podal \u017ealobu na BackConnect. V p\u0159izn\u00e1n\u00ed Prestona (pdf)<\/a><\/noindex> nen\u00ed uvedeno jm\u00e9no spole\u010dnosti, kterou soud uznal jako po\u0161kozenou. Ob\u011b\u0165 v dokumentu je ozna\u010dena jako Victim 1<\/i>.<\/p>\n

Jak bylo zm\u00edn\u011bno d\u0159\u00edve, vy\u0161et\u0159ov\u00e1n\u00ed aktivit BackConnect za\u010dalo po hacknut\u00ed slu\u017eby vDos. Tehdy se stala zn\u00e1m\u00e1 jm\u00e9na<\/a><\/noindex> administr\u00e1tor\u016f slu\u017eby, stejn\u011b jako datab\u00e1ze vDos, v\u010detn\u011b registrovan\u00fdch u\u017eivatel\u016f a z\u00e1znam\u016f o klientech, kte\u0159\u00ed platili vDos za prov\u00e1d\u011bn\u00ed DDoS \u00fatok\u016f.<\/p>\n

Tyto z\u00e1znamy uk\u00e1zaly, \u017ee jeden z \u00fa\u010dt\u016f na webu vDos byl otev\u0159en na e-mailov\u00e9 adresy spojen\u00e9 s dom\u00e9nou, kter\u00e1 je registrov\u00e1na na jm\u00e9no Takera Prestona. Tento \u00fa\u010det inicioval \u00fatoky na velk\u00e9 mno\u017estv\u00ed c\u00edl\u016f, v\u010detn\u011b mnoha \u00fatok\u016f na s\u00edt\u011b vlastn\u011bn\u00e9 Fond svobodn\u00e9ho software<\/a><\/noindex> (FSF).<\/p>\n

V roce 2016 b\u00fdval\u00fd administr\u00e1tor FSF uvedl, \u017ee neziskov\u00e1 organizace v ur\u010dit\u00e9m okam\u017eiku zva\u017eovala spolupr\u00e1ci s BackConnect, a \u00fatoky za\u010daly t\u00e9m\u011b\u0159 okam\u017eit\u011b pot\u00e9, co FSF ozn\u00e1mila, \u017ee bude hledat jinou firmu na ochranu p\u0159ed DDoS.<\/p>\n

Podle Podle<\/a><\/noindex> Ministerstvu spravedlnosti USA za tento bod obvin\u011bn\u00ed hroz\u00ed Takeru Prestonovi trest odn\u011bt\u00ed svobody a\u017e na 10 let a pokuta a\u017e 250 000 $, co\u017e je dvakr\u00e1t v\u00edce, ne\u017e celkov\u00fd zisk nebo ztr\u00e1ta z trestn\u00e9ho \u010dinu. Rozsudek bude vynesen 7. kv\u011btna 2020.<\/p>\n

\nGlobalSign p\u0159edstavuje \u0161k\u00e1lovateln\u00e9 PKI \u0159e\u0161en\u00ed pro organizace jak\u00e9hokoli velikosti. \"Zakladatel<\/a><\/noindex>
\nV\u00edce informac\u00ed: +7 (499) 678 2210, sales-ru@globalsign.com.
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a 2016 \u0433\u043e\u0434\u0443 vDos \u0441\u0442\u0430\u043b \u0441\u0430\u043c\u044b\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u043c \u0432 \u043c\u0438\u0440\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u043c \u0434\u043b\u044f \u0437\u0430\u043a\u0430\u0437\u0430 DDoS-\u0430\u0442\u0430\u043a \u0415\u0441\u043b\u0438 \u0432\u0435\u0440\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0438\u044f\u043c \u0437\u0430\u0433\u043e\u0432\u043e\u0440\u0430, \u0442\u043e \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 \u0441\u0430\u043c\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u0432\u0438\u0440\u0443\u0441\u044b, \u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 DDoS-\u0430\u0442\u0430\u043a \u0441\u0430\u043c\u0438 \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0438 \u0430\u0442\u0430\u043a\u0438. \u041a\u043e\u043d\u0435\u0447\u043d\u043e, \u044d\u0442\u043e \u0432\u044b\u0434\u0443\u043c\u043a\u0438\u2026 \u0438\u043b\u0438 \u043d\u0435\u0442? 16 \u044f\u043d\u0432\u0430\u0440\u044f 2020 \u0433\u043e\u0434\u0430 \u0424\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043e\u043a\u0440\u0443\u0436\u043d\u043e\u0439 \u0441\u0443\u0434 \u041d\u044c\u044e-\u0414\u0436\u0435\u0440\u0441\u0438 \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0432\u0438\u043d\u043e\u0432\u043d\u044b\u043c 22-\u043b\u0435\u0442\u043d\u0435\u0433\u043e \u0422\u0430\u043a\u0435\u0440\u0430 \u041f\u0440\u0435\u0441\u0442\u043e\u043d\u0430 (Tucker Preston), \u0436\u0438\u0442\u0435\u043b\u044f \u0433\u043e\u0440\u043e\u0434\u0430 \u041c\u0435\u0439\u043a\u043e\u043d\u0430, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-55778","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Spole\u010dnost zab\u00fdvaj\u00edc\u00ed se ochranou p\u0159ed DDoS sama spou\u0161t\u011bla DDoS \u00fatoky, p\u0159iznal jej\u00ed zakladatel | ProHoster","description":"Do roku 2016 vDos.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u043e \u0437\u0430\u0449\u0438\u0442\u0435 \u043e\u0442 DDoS \u0441\u0430\u043c\u0430 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0430 DDoS-\u0430\u0442\u0430\u043a\u0438, \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0435\u0451 \u043e\u0441\u043d\u043e\u0432\u0430\u0442\u0435\u043b\u044c | ProHoster","og:description":"\u041a 2016 \u0433\u043e\u0434\u0443 vDos.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kompaniya-po-zashhite-ot-ddos-sama-zapuskala-ddos-ataki-priznal-eyo-osnovatel","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-27T21:00:00+00:00","article:modified_time":"2020-02-18T11:03:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"55778","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:02:37","updated":"2022-09-28 16:22:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=55778"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/55778\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=55778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=55778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=55778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}