PDA

View Full Version : The man who 'nearly broke the internet'



xtrapsp
05-21-2013, 09:15 AM
http://static.guim.co.uk/sys-images/Guardian/About/General/2013/5/20/1369052141633/Sven-Olaf-Kamphuis-008.jpg

Sven Olaf Kamphuis, taken from his Facebook page. Photograph: Guardian
The day Sven Olaf Kamphuis parked his huge orange Mercedes van with its German numberplates outside Bar Javis, in the Catalan town of Granollers, the owner's son snapped a picture with his mobile phone.

"Not a lot happens in this street," Maria Cruz, the bar's owner, explained. "And it was so huge, with all those funny antennas and solar panels poking out of the roof, that it blocked the light to the bar."

Even stranger was the 35-year-old Dutch man who parked it in this narrow street after renting a small attic flat with windows made of glass blocks in the poorer end of this nondescript town 15 miles from Barcelona.

Even on hot early summer days, Kamphuis wore a woollen hat. And he spoke no Spanish, answering "yes, yes" in English to everything people from this friendly neighbourhood said to him.


Sven's van
Kamphuis, 35, is one of the most controversial characters in the murky world of spam and hacking – deemed the internet's public enemy number one by some, though others believe his reputation has been blown out of proportion by the grandstanding of his foes.

Capable of rigging up sophisticated computer systems anywhere, including the back of a van, he allegedly masterminded a flurry of March internet attacks that the security company CloudFlare claimed "almost broke the internet", plunging the world into digital darkness. When Spanish and Dutch police arrested him they found the flat occupied by a tangle of cables and computer gear. A copy of the science fiction writer Neal Stephenson's Quicksilver lay on the unmade bed.

Kamphuis displayed a Napoleonic sense of grandeur. "He claimed he had diplomatic status," said the Spanish police officer who led the operation, but asked not to be named. "He said he was the telecommunications minister and foreign minister of a place called the Cyberbunker Republic. He didn't seem to be joking."

"The request to arrest him came from the Netherlands," said the police officer, who heads the cybercrime unit in Barcelona. "But Britain, the United States and Germany were all affected by the massive denial of service attacks that he launched.

"The van was fitted out as a mobile office from which he could launch his attacks. Amongst other things we found the IP addresses of his targets and that is part of the evidence we are sending to the Netherlands."

Kamphuis has yet to be tried, but Spanish police believe they know his modus operandi. "He brought together hackers from around the world to launch the attacks. It is obviously not all over yet, because the Dutch have been under attack again in recent days – presumably as revenge by his friends.

"Some of them have networks of zombie computers, having spread viruses that let them control others people's computers. They all agree to launch the attack and they do millions of requests to the server at the same time."

The result was what the New York Times called an attack of previously "unknown magnitudes", producing a 300bn-bits-per-second data stream that targeted the British and Swiss-based anti-spam operator Spamhaus and its allies. This had reportedly blacklisted his CB3ROB/Cyberbunker company, which claims its servers are housed in an old Nato nuclear bunker near Rotterdam, for hosting hundreds of spam and malware websites. Kamphuis happily claimed to be punishing Spamhaus for "abusing their influence".

"Nobody ever deputised Spamhaus to determine what goes and does not go on the internet," he told the New York Times in an angry message. He later denied involvement. "We want to be absolutely clear that the DDoS [distributed denial of service] attacks are not and have not ever been orchestrated within CB3ROB/CyberBunker, nor are they conducted under the supervision of Sven," he wrote on his Facebook page.

But the huge number of spammers he hosts has led even hacktivists sympathetic to his pro-Pirate party, Anonymous and Julian Assange's stance to question his real activities.

Several other mysteries remain. If this was one of the most successful spammers in history, why was he living in a squalid flat and a camper van?

"If you get paid a few cents for each spammed email and you send out million emails every day, then you can make a lot of money," said the Spanish police chief.

Kamphuis certainly did not behave like a criminal on the run. "He seemed too relaxed to be a crook," said Cruz. "And he certainly didn't hide away. He had even written his name on the letterbox."

"He wasn't really trying to hide," agrees the Spanish police chief. "I think he thought that we wouldn't track the attacks to him or that we would leave him alone because he was not attacking Spanish targets."

His attacks were widely reported to have slowed the entire internet down, but internet speed trackers such as Internet Traffic Report barely registered a blip.

Some point to publicity-seeking grandstanding by CloudFlare, an internet security company called in to protect Spamhaus. It claimed this was "the DDoS [attack] that almost broke the internet".

"The record-breaking attacks were initially directed at Spamhaus infrastructure such as websites, mailservers and nameservers. Then, over the course of the following two weeks, the attacks escalated to targeting Spamhaus's supporting networks and services including various internet exchanges," Spamhaus's British founder Clive Linford said on his blog, describing the attacks that started in the middle of March. "While the DDoS caused disruptions to our organisation and its hosts and partners, the flow of the Spamhaus anti-spam data that protects over 1.7bn mailboxes worldwide was never interrupted."

Kamphuis was last week taken to the Netherlands – a country that recently announced plans to let police hack into computers located abroad, installing spyware, reading emails and deleting files. He is being held in jail while investigators decide what charges to bring.

A spokesman for the Dutch public prosecutor's office said he would appear before a court in Rotterdam again this week to have bail conditions reviewed after the "unprecedented heavy attacks" on Spamhaus and its partners in the US, Netherlands and Great Britain.

-source http://www.guardian.co.uk/technology/2013/may/20/man-accused-breaking-the-internet

Sawyer
05-21-2013, 10:57 AM
How do you DDOS the entire world?

Wu-Tang Clan
05-21-2013, 11:43 AM
How do you DDOS the entire world?

With a computer of course. LOL I'm pulling your leg.

I agree with you, how do you DDOS the whole world? They would have to DDOS every website ever created- and that is a beepload of URLs. Every server, website, and ISP would have to be down for this to be successful and to me thats just too much work to be accomplished in enough time for it not to be stopped. After a couple hundred thousand popular websites the world would know what's going on and some part of the government would put a lot of power into stopping it. I just don't see the internet blacking out unless some master internet server which ruled all of the others were to exist.

Are the movie rights available?

[XoL]
05-21-2013, 03:15 PM
With a computer of course. LOL I'm pulling your leg.

I agree with you, how do you DDOS the whole world? They would have to DDOS every website ever created- and that is a beepload of URLs. Every server, website, and ISP would have to be down for this to be successful and to me thats just too much work to be accomplished in enough time for it not to be stopped. After a couple hundred thousand popular websites the world would know what's going on and some part of the government would put a lot of power into stopping it. I just don't see the internet blacking out unless some master internet server which ruled all of the others were to exist.

Are the movie rights available?

Take it lol, make the next best movie :)

senrath
05-21-2013, 03:16 PM
My first thought upon seeing this guy's picture:
https://www.youtube.com/watch?v=bG0xRNDCnM8

(Well, almost. I couldn't find a good clip of the original scene.)

Kevin
05-21-2013, 03:25 PM
A few people think a DDOS attack can't be done against the whole world on any reasonable scale and that the concept is complete fallacy. However, it's not. Everyone is at least sort of familiar with a DNS server I think, and that's a good place to start for this. A DNS server helps every computer take an ip address and convert it to a name (and more commonly, vice versa). That's how http://google.com actually reaches google, through a DNS server that tells you the IP address.

Well where do the DNS servers get their information from? They get it from the root servers. There are known, dedicated servers all over the world which are basically the source for the entire internet (a little more detail can be read here: http://blog.icann.org/2007/11/there-are-not-13-root-servers/ ). This is a decent number in the hundreds. However, hundreds of computers are a fairly small amount to force under a DDOS attack, and by doing so, the average of the entire internet's speed can be brought down, and with enough force... Crashed. Will a full crash like that ever happen? Probably not, as it would take serious combined effort that would have to circumvent most DDOS protection. However, it is possible.

Hazzah
05-21-2013, 07:31 PM
That Unibrow is AMAZING. Wish I had one.

Itankbots
05-24-2013, 04:29 AM
That Unibrow is AMAZING. Wish I had one.

^ first thing i thought

slushpuppy
05-24-2013, 06:46 AM
if people can remember phone numbers.. then ipv4 addresses shouldn't be a problem. fuck dns!

Raiden702
05-25-2013, 04:40 PM
Databases+ a search engine type of bug is all they probably had to do to find that many.

This dude needs some tweezers for his eyebrows.

acow
06-04-2013, 01:57 AM
that's really strange tbh.
would think he wants more attention, but he already had it.

happy hippo
06-14-2013, 06:18 AM
i believe in the Eventual Technological Takeover Of the internet,its only a matter of time before a super nerd is forged In the Searing fires of a Thousand Burning CPU'S