Tuesday, June 14, 2011

EVE: SKY IS FALLING

Is Eve Online under siege?!

Si riporta il contenuto dell'articolo di ars technica sui Lulzsec a firma Peter Bright: "Lulz Security, the hacking group apparently motivated by nothing more than their desire to laugh at the mayhem they cause, has had a busy day in an event they called Titanic Takeover Tuesday. Taking a break from their dumps of user data and server break-ins, today saw the group perform a bunch of distributed denial of service attacks against a range of targets.

First up—and still only intermittently available at the time of writing—was gaming magazine The Escapist, with no apparent reason for the attack. LulzSec boasted that taking down the site required just 0.4 percent of its DDoS capacity.

Next in line were the login servers for the game EVE Online. The effect of this attack was to bring down the EVE Online website at the same time, though LulzSec insists that this was not the actual target. In response to the DDoS, CCP Games, makers of EVE, have taken all their systems offline, for fear that they might be hacked. The company has also issued a statement to assure customers that their personal information remains secure.

The third target—and the only one for which the group has offered a rationale beyond "lulz"—is an IT security company named Finfisher. Their site was taken down, briefly, because "apparently they sell monitoring software to the government or some shit like that."

Gamers were once more in the crosshairs with the fourth target; more login servers, this time for Minecraft. Just as with EVE Online, going after the login servers also took out the game's website.

The pattern was repeated for the fifth target; login servers for the game League of Legends were knocked offline, a move which also brought down the game's website.

The result of all this? Lot of enraged gamers complaining about the downtime, and hence, many lulz for Lulz Security. Going after gaming targets hasn't made the group universally popular; posters on 4chan's /b/ forum, who might normally be sympathetic to lulz-motivated shenanigans, attempted to hunt LulzSec down. LulzSec dismissed the "/b/tards" as "damn furries," saying that they were the cream of the /b/ crop from 2005, distancing themselves from the /b/tards of today.
"

Dal sito di EvE:
"At 17:00 UTC today, CCP became aware of a distributed denial-of-service attack (DDoS) against the EVE Online cluster and web servers.

Our policy in such cases is to mobilize a taskforce of internal and external experts to evaluate the situation. At 17:55 UTC, that group concluded that our best course of action was to go completely offline while an exhaustive scan of our entire infrastructure was executed.

While some may feel that such a drastic reaction was not warranted, it is always our approach to err on the side of caution in order to ensure the best possible service for our players and the security of their personal, billing and account information.

We understand the effect this disruption has had for our players and apologize for not having been able to explain fully to the community what was going on. In these cases it can often be counterproductive to containment to give out information while we are in the process of evaluating the scope of any potential problem.

Our taskforce concluded at 22:05 that neither the game servers nor the CCP infrastructure had been breached. Further, we can also confirm that no personal details such as users’ credentials or credit card numbers were exposed through this incident.

The servers were brought back online at 23:00 and we will continue to monitor the situation closely.

Again, we sincerely apologize for this disruption.

Regards,

Jón Hörðdal

Chief Operating Officer
"

UPDATE: Shortly after service was restored to the EVE Online Tranquility server, the CCP Security Task force became aware of ongoing traffic flooding which prompted them to take the server offline. At 00:30 UTC, Tranquility was brought online again and is being closely monitored. Please be advised that we are prepared to take the server offline again if warranted. We thank you again for your patience and apologize for any inconvenience and sincerely thank you for your continued patience.



Ogni commento appare superfluo.