Welcome!

Microsoft Cloud Authors: Pat Romanski, Srinivasan Sundara Rajan, Glenn Rossman, Janakiram MSV, Steven Mandel

Blog Feed Post

[berkman] “LOIC [low-orbit ion cannon] will tear us apart”: The impact of tool desiogn and media portrayals in the success of activist DDOS attacks

Molly Sauter [twitter:oddletters] (from Berkman and the Center for Civic Media at MIT) is giving a lunchtime Berkman talk. She’s going to focus on Operation Payback, the Dec. 2010 action by Anonymous against those financial services that cut off Wikileaks after Wikileaks made available a massive leak of State Dept. cables. Operation Avenge Assange tried to bring down the sites of those services. Molly sees this as an evolution in media activism, expanding on the use of DDOS tactics by groups in the 1990s; [DDOS = distributed denial of service: flooding a site beyond its capacity to respond, and doing so from multiple sites.]

NOTE: Live-blogging. Getting things wrong. Missing points. Omitting key information. Introducing artificial choppiness. Over-emphasizing small matters. Paraphrasing badly. Not running a spellpchecker. Mangling other people’s ideas and words. You are warned, people.

Molly begins with a simple explanation of DDOS. The flooding can come from a single computer (unlikely), via a volunteer botnet, or botnets that infect other computers; the botnets communicate with a central computer, pounding on the target until it can’t handle the traffic.

Old school activists think of DDOS as a form of censorship, and thus it is not acceptable. For many digitally-enabled activists (e.g., Electronic Disturbance Theater) DDOS is a form of disobedience. For EDT, DDOS is an auxiliary form of activism: “DDOS is something you do when you’re out on the streets so your computer can be at home protesting.” DDOS is sometimes seen as a type of sit-in, although Molly thinks this is inapt. For some, DDOS is a direct form of protest, and in others, it’s an indirect and symbolic action. Anonymous melds these approaches: influence via technology + influence via media + direct action disruption.

Electronic Disturbance Theater [EDT] used Flood Net, a tool that “hurls bits” but that also lets you send a message to show up in the target computer’s error log. Cleverly, if your issue is human rights, the log might read “Human rights is not found on this server.” But, Molly says, these logs are only read by the admin, so it’s really a way for the activist to yell something for the sake of yelling. The EDT restricted targets of Flood Net and set scheduled times. EDT open sourced it in 1999. The language on the Floor Net site is comprehensible only to people who already know about the issues, e.g., Mexican Neo-Liberalism. It is intimidating for those outside of the circle. It is also very tied to a view of activism that ties actions to individuals â?? anonymous individuals, but using Flood Net requires the action of a person.

LOIC — low orbit ion cannon— was developed maybe around 2006, and forked in 2008. By Dec. 2010, versions could run on just about anything — Windows, Mac, on mobiles, within a browser… Molly goes through the differences in the different versions of it. They let you type in a URL, set some options that are set to defaults, and then you press a button. Done! (LOIC is the boss weapon from the game Command & Conquer). The button you press in the abatishchev version is labeled “IMMA CHARGIN MAH LAZER,” a popular meme. It has the same messaging functionality as Flood Net. The default message derives from a 4chan bestiality rape meme that Molly urges us not to google. This version “is focused on the 4chan Anonymous culture set.”

She then compares this to the NewEraCracker version. Very similar. Same “Imma chargin mah lazer” meme, but the rape meme is gone. Instead, it says “u done goofed,” the popular Jessi Slaughter meme. Jessie pissed off Anonymous, so Anonymous sent lots of pizza to her house. Her father posted a defensive video that wasn’t very smart about the Net, which got widely distributed, and which contained the line “you done goofed.” This message is more confrontational than the other version which the recipient would be unlikely to understand at all. This version of LOIC also has a “fucking hive mind mode” that lets you automate the process entirely by plugging it into an IRC server to use volunteer computers [I think].

These tools, especially the second, created a community of activists, especially in hive mind mode. There are many LOIC tutorial videos on YouTube. This reaches out to new people to join, unlike EDT’s use of language that appeals only to those already in the know. Because anyone can use it, it helps Anonymous become a community of trust.

Anonymous has also pushed DDOS as a media manipulation tactic, and used media for recruitment. Molly doesn’t know if it was a conscious decision, but DDOS ended up as a recruitment tactic.

During the four days of Operation Payback, the media coverage was very confused. For example the media weren’t sure that DDOS is illegal. (It is.) Even Gizmodo got wrong how risky DDOS is for the attacker; it wrongly claimed that the target’s log files don’t record the incoming connections during DDOS. Experienced users know to anonymize their packets, but those who came in new and used this easy-to-use tool often did not protect themselves. The Paypal 16 now under indictment were caught because PayPal stored the top 1000 IP addresses. Much of the coverage just quoted Anonymous at length. “Anonymous is a very horizontal org and there’s no press person to talk to,” but, Molly says, there was a “press IRC channel” but the media didn’t know how to use it. Some mainstream articles linked to download sites for LOIC, which may have encouraged people to download it without understanding the legality of using it.

Conclusions: “Operation Payback’s success was due to a confluence of tech, community, and news media factors. Anonymous’ use of DDOS represent an innovation in participant population and tool design. And Anonymous pushes the reframing of DDOS as a tool of media manipulation and biographical impact [how the participants think about themselves], not direct action.”

Q&A

Q: Is the paypal list public?

A: Nope.

Q: Can you bring your research up to date?

A: I’m writing my thesis now. So, no.

Q: How does being identified play into the historical mindset?

A: I got into this topic because I wanted to do my thesis on activism and anonymity. Anonymous challenges the assumption that if you’re anonymous, you’re not serious about your activism. The cultural preference for identified activism comes from the 1960s civil disobedience movement, which in turns comes from Thoreau: you break the law and accept punishment for it. But that privileges those who won’t lose their house and their family if arrested. This puts activism on the shoulders of a particular class. Anonymous disagrees. It says you can engage in civil disobedience without personal consequence.

Q: The Federalist Papers were anonymous because it implicitly was saying that the ideas are important enough not to need names attached. Anonymous not only escapes punishment, it makes it effortless â?? the amount of effort you put in is indistinguishable from that of someone whose computer was infected by a bot.

A: This is the slacktivism argument. Slacktivism challenges the expectations about what activism does. One version says you’re supposed to change something or have a solution. But slacktivism (or clicktivism) is valuable for the biographical impact.

A: Studies have looked into whether eating organic food affects your self image so that you do more, or that you merely congratulate yourself.

A: The ladder of engagement says that the big step is getting on the first rung. My view of slacktivism is that it’s widened that run. Pressing the LOIC button gets people started, and I’m in favor of people starting somewhere, when it is in a considered and useful way.

Q: How about The Jester?

A: He’s an Army veteran who explicitly aligns his morals with pro-US, anti-jihadist, anti-Anonymous DDOS. He claims to be working by himself. I don’t think his actions are ethical because they’re about silencing content. [Molly tells us that she has a presentation on DDOS ethics.]

Q: Why is “fuckng hive mind mode” a community? People are donating bandwidth. But the manual mode, where people actively decide to participate in something, is much more like people being in a community. The participants in FHHM don’t necessarily view themselves as joining in a community, although the federal govt is claiming that they are.

A: I agree. My point with FHHM was that it opens up ways of accessing that community in ways that were not possible before.

Q: LOIC is hosted at github and sourceforge, and tutorials at YouTube. Any attempts to remove?

A: LOIC and tools like it are listed as “stress-testing” tools. And it can be used that way if you aim it at your own server. It’s like a head shop selling a pipe for tobacco. During the four days of the operation, Twitter did try to shut down the Anonymous twitter account.

Q: You seem to be saying that Anonymous is becoming more respectful, shifting out of the “otherized” world of 4chan. Is there quantitative data supporting this?

A: Biella Coleman has done the most research on this. That’s where I’ve gotten my data.

Q: How many people participated?

A: It’s been downloaded hundreds of thousands of times.

Q: When an org provides a press contact, a journalist can always orient around that, bounce off of it. But Anonymous doesn’t work that way. How does Anonymous’ play affect coverage?

A: The media doesn’t know how to deal with orgs like Anon and Occupy. They just speak with random people, none of who speak for the org (because no one does). The opening of the press IRC channel was great, for those who found it. It let the press engage at length. But Anon is usefully weird, and thus hard for the media.

Q: [me] So, will LOIC tear us apart? Civil disobedients accept consequences in part to raise the bar so that people don’t too easily break the law. LOIC lowers that bar. If Anon were attacking services that you like, would you be as sanguine?

LOIC isn’t much used now because it’s dangerous, and there are new tools. It’s hard to take down a site.

Q: As the tools get better?

A: Permanent arms race.

Q: Arrest of Sabu?

A: It won’t kill Anonymous.

Read the original blog entry...

More Stories By David Weinberger

David is the author of JOHO the blog (www.hyperorg.com/blogger). He is an independent marketing consultant and a frequent speaker at various conferences. "All I can promise is that I will be honest with you and never write something I don't believe in because someone is paying me as part of a relationship you don't know about. Put differently: All I'll hide are the irrelevancies."

@ThingsExpo Stories
Smart Cities are here to stay, but for their promise to be delivered, the data they produce must not be put in new siloes. In his session at @ThingsExpo, Mathias Herberts, Co-founder and CTO of Cityzen Data, will deep dive into best practices that will ensure a successful smart city journey.
Businesses are struggling to manage the information flow and interactions between all of these new devices and things jumping on their network, and the apps and IT systems they control. The data businesses gather is only helpful if they can do something with it. In his session at @ThingsExpo, Chris Witeck, Principal Technology Strategist at Citrix, will discuss how different the impact of IoT will be for large businesses, expanding how IoT will allow large organizations to make their legacy ap...
Adobe is changing the world though digital experiences. Adobe helps customers develop and deliver high-impact experiences that differentiate brands, build loyalty, and drive revenue across every screen, including smartphones, computers, tablets and TVs. Adobe content solutions are used daily by millions of companies worldwide-from publishers and broadcasters, to enterprises, marketing agencies and household-name brands. Building on its established design leadership, Adobe enables customers not o...
SYS-CON Events announced today that Numerex Corp, a leading provider of managed enterprise solutions enabling the Internet of Things (IoT), will exhibit at the 19th International Cloud Expo | @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Numerex Corp. (NASDAQ:NMRX) is a leading provider of managed enterprise solutions enabling the Internet of Things (IoT). The Company's solutions produce new revenue streams or create operating...
24Notion is full-service global creative digital marketing, technology and lifestyle agency that combines strategic ideas with customized tactical execution. With a broad understand of the art of traditional marketing, new media, communications and social influence, 24Notion uniquely understands how to connect your brand strategy with the right consumer. 24Notion ranked #12 on Corporate Social Responsibility - Book of List.
Just over a week ago I received a long and loud sustained applause for a presentation I delivered at this year’s Cloud Expo in Santa Clara. I was extremely pleased with the turnout and had some very good conversations with many of the attendees. Over the next few days I had many more meaningful conversations and was not only happy with the results but also learned a few new things. Here is everything I learned in those three days distilled into three short points.
Major trends and emerging technologies – from virtual reality and IoT, to Big Data and algorithms – are helping organizations innovate in the digital era. However, to create real business value, IT must think beyond the ‘what’ of digital transformation to the ‘how’ to harness emerging trends, innovation and disruption. Architecture is the key that underpins and ties all these efforts together. In the digital age, it’s important to invest in architecture, extend the enterprise footprint to the cl...
Why do your mobile transformations need to happen today? Mobile is the strategy that enterprise transformation centers on to drive customer engagement. In his general session at @ThingsExpo, Roger Woods, Director, Mobile Product & Strategy – Adobe Marketing Cloud, covered key IoT and mobile trends that are forcing mobile transformation, key components of a solid mobile strategy and explored how brands are effectively driving mobile change throughout the enterprise.
In his general session at 18th Cloud Expo, Lee Atchison, Principal Cloud Architect and Advocate at New Relic, discussed cloud as a ‘better data center’ and how it adds new capacity (faster) and improves application availability (redundancy). The cloud is a ‘Dynamic Tool for Dynamic Apps’ and resource allocation is an integral part of your application architecture, so use only the resources you need and allocate /de-allocate resources on the fly.
As ridesharing competitors and enhanced services increase, notable changes are occurring in the transportation model. Despite the cost-effective means and flexibility of ridesharing, both drivers and users will need to be aware of the connected environment and how it will impact the ridesharing experience. In his session at @ThingsExpo, Timothy Evavold, Executive Director Automotive at Covisint, will discuss key challenges and solutions to powering a ride sharing and/or multimodal model in the a...
In this strange new world where more and more power is drawn from business technology, companies are effectively straddling two paths on the road to innovation and transformation into digital enterprises. The first path is the heritage trail – with “legacy” technology forming the background. Here, extant technologies are transformed by core IT teams to provide more API-driven approaches. Legacy systems can restrict companies that are transitioning into digital enterprises. To truly become a lea...
SYS-CON Events announced today that Roundee / LinearHub will exhibit at the WebRTC Summit at @ThingsExpo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. LinearHub provides Roundee Service, a smart platform for enterprise video conferencing with enhanced features such as automatic recording and transcription service. Slack users can integrate Roundee to their team via Slack’s App Directory, and '/roundee' command lets your video conference ...
Web Real-Time Communication APIs have quickly revolutionized what browsers are capable of. In addition to video and audio streams, we can now bi-directionally send arbitrary data over WebRTC's PeerConnection Data Channels. With the advent of Progressive Web Apps and new hardware APIs such as WebBluetooh and WebUSB, we can finally enable users to stitch together the Internet of Things directly from their browsers while communicating privately and securely in a decentralized way.
"My role is working with customers, helping them go through this digital transformation. I spend a lot of time talking to banks, big industries, manufacturers working through how they are integrating and transforming their IT platforms and moving them forward," explained William Morrish, General Manager Product Sales at Interoute, in this SYS-CON.tv interview at 18th Cloud Expo, held June 7-9, 2016, at the Javits Center in New York City, NY.
A strange thing is happening along the way to the Internet of Things, namely far too many devices to work with and manage. It has become clear that we'll need much higher efficiency user experiences that can allow us to more easily and scalably work with the thousands of devices that will soon be in each of our lives. Enter the conversational interface revolution, combining bots we can literally talk with, gesture to, and even direct with our thoughts, with embedded artificial intelligence, wh...
What are the new priorities for the connected business? First: businesses need to think differently about the types of connections they will need to make – these span well beyond the traditional app to app into more modern forms of integration including SaaS integrations, mobile integrations, APIs, device integration and Big Data integration. It’s important these are unified together vs. doing them all piecemeal. Second, these types of connections need to be simple to design, adapt and configure...
What happens when the different parts of a vehicle become smarter than the vehicle itself? As we move toward the era of smart everything, hundreds of entities in a vehicle that communicate with each other, the vehicle and external systems create a need for identity orchestration so that all entities work as a conglomerate. Much like an orchestra without a conductor, without the ability to secure, control, and connect the link between a vehicle’s head unit, devices, and systems and to manage the ...
The Jevons Paradox suggests that when technological advances increase efficiency of a resource, it results in an overall increase in consumption. Writing on the increased use of coal as a result of technological improvements, 19th-century economist William Stanley Jevons found that these improvements led to the development of new ways to utilize coal. In his session at 19th Cloud Expo, Mark Thiele, Chief Strategy Officer for Apcera, will compare the Jevons Paradox to modern-day enterprise IT, e...
SYS-CON Events announced today that Commvault, a global leader in enterprise data protection and information management, has been named “Bronze Sponsor” of SYS-CON's 19th International Cloud Expo, which will take place on November 1–3, 2016, at the Santa Clara Convention Center in Santa Clara, CA. Commvault is a leading provider of data protection and information management solutions, helping companies worldwide activate their data to drive more value and business insight and to transform moder...
What does it look like when you have access to cloud infrastructure and platform under the same roof? Let’s talk about the different layers of Technology as a Service: who cares, what runs where, and how does it all fit together. In his session at 18th Cloud Expo, Phil Jackson, Lead Technology Evangelist at SoftLayer, an IBM company, spoke about the picture being painted by IBM Cloud and how the tools being crafted can help fill the gaps in your IT infrastructure.