Welcome!

Search Authors: Elizabeth White, Carmen Gonzalez, Lori MacVittie, Liz McMillan, Shelly Palmer

Blog Feed Post

[berkman] “LOIC [low-orbit ion cannon] will tear us apart”: The impact of tool desiogn and media portrayals in the success of activist DDOS attacks

Molly Sauter [twitter:oddletters] (from Berkman and the Center for Civic Media at MIT) is giving a lunchtime Berkman talk. She’s going to focus on Operation Payback, the Dec. 2010 action by Anonymous against those financial services that cut off Wikileaks after Wikileaks made available a massive leak of State Dept. cables. Operation Avenge Assange tried to bring down the sites of those services. Molly sees this as an evolution in media activism, expanding on the use of DDOS tactics by groups in the 1990s; [DDOS = distributed denial of service: flooding a site beyond its capacity to respond, and doing so from multiple sites.]

NOTE: Live-blogging. Getting things wrong. Missing points. Omitting key information. Introducing artificial choppiness. Over-emphasizing small matters. Paraphrasing badly. Not running a spellpchecker. Mangling other people’s ideas and words. You are warned, people.

Molly begins with a simple explanation of DDOS. The flooding can come from a single computer (unlikely), via a volunteer botnet, or botnets that infect other computers; the botnets communicate with a central computer, pounding on the target until it can’t handle the traffic.

Old school activists think of DDOS as a form of censorship, and thus it is not acceptable. For many digitally-enabled activists (e.g., Electronic Disturbance Theater) DDOS is a form of disobedience. For EDT, DDOS is an auxiliary form of activism: “DDOS is something you do when you’re out on the streets so your computer can be at home protesting.” DDOS is sometimes seen as a type of sit-in, although Molly thinks this is inapt. For some, DDOS is a direct form of protest, and in others, it’s an indirect and symbolic action. Anonymous melds these approaches: influence via technology + influence via media + direct action disruption.

Electronic Disturbance Theater [EDT] used Flood Net, a tool that “hurls bits” but that also lets you send a message to show up in the target computer’s error log. Cleverly, if your issue is human rights, the log might read “Human rights is not found on this server.” But, Molly says, these logs are only read by the admin, so it’s really a way for the activist to yell something for the sake of yelling. The EDT restricted targets of Flood Net and set scheduled times. EDT open sourced it in 1999. The language on the Floor Net site is comprehensible only to people who already know about the issues, e.g., Mexican Neo-Liberalism. It is intimidating for those outside of the circle. It is also very tied to a view of activism that ties actions to individuals â?? anonymous individuals, but using Flood Net requires the action of a person.

LOIC — low orbit ion cannon— was developed maybe around 2006, and forked in 2008. By Dec. 2010, versions could run on just about anything — Windows, Mac, on mobiles, within a browser… Molly goes through the differences in the different versions of it. They let you type in a URL, set some options that are set to defaults, and then you press a button. Done! (LOIC is the boss weapon from the game Command & Conquer). The button you press in the abatishchev version is labeled “IMMA CHARGIN MAH LAZER,” a popular meme. It has the same messaging functionality as Flood Net. The default message derives from a 4chan bestiality rape meme that Molly urges us not to google. This version “is focused on the 4chan Anonymous culture set.”

She then compares this to the NewEraCracker version. Very similar. Same “Imma chargin mah lazer” meme, but the rape meme is gone. Instead, it says “u done goofed,” the popular Jessi Slaughter meme. Jessie pissed off Anonymous, so Anonymous sent lots of pizza to her house. Her father posted a defensive video that wasn’t very smart about the Net, which got widely distributed, and which contained the line “you done goofed.” This message is more confrontational than the other version which the recipient would be unlikely to understand at all. This version of LOIC also has a “fucking hive mind mode” that lets you automate the process entirely by plugging it into an IRC server to use volunteer computers [I think].

These tools, especially the second, created a community of activists, especially in hive mind mode. There are many LOIC tutorial videos on YouTube. This reaches out to new people to join, unlike EDT’s use of language that appeals only to those already in the know. Because anyone can use it, it helps Anonymous become a community of trust.

Anonymous has also pushed DDOS as a media manipulation tactic, and used media for recruitment. Molly doesn’t know if it was a conscious decision, but DDOS ended up as a recruitment tactic.

During the four days of Operation Payback, the media coverage was very confused. For example the media weren’t sure that DDOS is illegal. (It is.) Even Gizmodo got wrong how risky DDOS is for the attacker; it wrongly claimed that the target’s log files don’t record the incoming connections during DDOS. Experienced users know to anonymize their packets, but those who came in new and used this easy-to-use tool often did not protect themselves. The Paypal 16 now under indictment were caught because PayPal stored the top 1000 IP addresses. Much of the coverage just quoted Anonymous at length. “Anonymous is a very horizontal org and there’s no press person to talk to,” but, Molly says, there was a “press IRC channel” but the media didn’t know how to use it. Some mainstream articles linked to download sites for LOIC, which may have encouraged people to download it without understanding the legality of using it.

Conclusions: “Operation Payback’s success was due to a confluence of tech, community, and news media factors. Anonymous’ use of DDOS represent an innovation in participant population and tool design. And Anonymous pushes the reframing of DDOS as a tool of media manipulation and biographical impact [how the participants think about themselves], not direct action.”

Q&A

Q: Is the paypal list public?

A: Nope.

Q: Can you bring your research up to date?

A: I’m writing my thesis now. So, no.

Q: How does being identified play into the historical mindset?

A: I got into this topic because I wanted to do my thesis on activism and anonymity. Anonymous challenges the assumption that if you’re anonymous, you’re not serious about your activism. The cultural preference for identified activism comes from the 1960s civil disobedience movement, which in turns comes from Thoreau: you break the law and accept punishment for it. But that privileges those who won’t lose their house and their family if arrested. This puts activism on the shoulders of a particular class. Anonymous disagrees. It says you can engage in civil disobedience without personal consequence.

Q: The Federalist Papers were anonymous because it implicitly was saying that the ideas are important enough not to need names attached. Anonymous not only escapes punishment, it makes it effortless â?? the amount of effort you put in is indistinguishable from that of someone whose computer was infected by a bot.

A: This is the slacktivism argument. Slacktivism challenges the expectations about what activism does. One version says you’re supposed to change something or have a solution. But slacktivism (or clicktivism) is valuable for the biographical impact.

A: Studies have looked into whether eating organic food affects your self image so that you do more, or that you merely congratulate yourself.

A: The ladder of engagement says that the big step is getting on the first rung. My view of slacktivism is that it’s widened that run. Pressing the LOIC button gets people started, and I’m in favor of people starting somewhere, when it is in a considered and useful way.

Q: How about The Jester?

A: He’s an Army veteran who explicitly aligns his morals with pro-US, anti-jihadist, anti-Anonymous DDOS. He claims to be working by himself. I don’t think his actions are ethical because they’re about silencing content. [Molly tells us that she has a presentation on DDOS ethics.]

Q: Why is “fuckng hive mind mode” a community? People are donating bandwidth. But the manual mode, where people actively decide to participate in something, is much more like people being in a community. The participants in FHHM don’t necessarily view themselves as joining in a community, although the federal govt is claiming that they are.

A: I agree. My point with FHHM was that it opens up ways of accessing that community in ways that were not possible before.

Q: LOIC is hosted at github and sourceforge, and tutorials at YouTube. Any attempts to remove?

A: LOIC and tools like it are listed as “stress-testing” tools. And it can be used that way if you aim it at your own server. It’s like a head shop selling a pipe for tobacco. During the four days of the operation, Twitter did try to shut down the Anonymous twitter account.

Q: You seem to be saying that Anonymous is becoming more respectful, shifting out of the “otherized” world of 4chan. Is there quantitative data supporting this?

A: Biella Coleman has done the most research on this. That’s where I’ve gotten my data.

Q: How many people participated?

A: It’s been downloaded hundreds of thousands of times.

Q: When an org provides a press contact, a journalist can always orient around that, bounce off of it. But Anonymous doesn’t work that way. How does Anonymous’ play affect coverage?

A: The media doesn’t know how to deal with orgs like Anon and Occupy. They just speak with random people, none of who speak for the org (because no one does). The opening of the press IRC channel was great, for those who found it. It let the press engage at length. But Anon is usefully weird, and thus hard for the media.

Q: [me] So, will LOIC tear us apart? Civil disobedients accept consequences in part to raise the bar so that people don’t too easily break the law. LOIC lowers that bar. If Anon were attacking services that you like, would you be as sanguine?

LOIC isn’t much used now because it’s dangerous, and there are new tools. It’s hard to take down a site.

Q: As the tools get better?

A: Permanent arms race.

Q: Arrest of Sabu?

A: It won’t kill Anonymous.

Read the original blog entry...

More Stories By David Weinberger

David is the author of JOHO the blog (www.hyperorg.com/blogger). He is an independent marketing consultant and a frequent speaker at various conferences. "All I can promise is that I will be honest with you and never write something I don't believe in because someone is paying me as part of a relationship you don't know about. Put differently: All I'll hide are the irrelevancies."

@ThingsExpo Stories
Predicted by Gartner to add $1.9 trillion to the global economy by 2020, the Internet of Everything (IoE) is based on the idea that devices, systems and services will connect in simple, transparent ways, enabling seamless interactions among devices across brands and sectors. As this vision unfolds, it is clear that no single company can accomplish the level of interoperability required to support the horizontal aspects of the IoE. The AllSeen Alliance, announced in December 2013, was formed with the goal to advance IoE adoption and innovation in the connected home, healthcare, education, aut...
SYS-CON Events announced today that Matrix.org has been named “Silver Sponsor” of Internet of @ThingsExpo, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Matrix is an ambitious new open standard for open, distributed, real-time communication over IP. It defines a new approach for interoperable Instant Messaging and VoIP based on pragmatic HTTP APIs and WebRTC, and provides open source reference implementations to showcase and bootstrap the new standard. Our focus is on simplicity, security, and supporting the fullest feature set.
SYS-CON Events announced today that Red Hat, the world's leading provider of open source solutions, will exhibit at Internet of @ThingsExpo, which will take place on November 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA. Red Hat is the world's leading provider of open source software solutions, using a community-powered approach to reliable and high-performing cloud, Linux, middleware, storage and virtualization technologies. Red Hat also offers award-winning support, training, and consulting services. As the connective hub in a global network of enterprises, partners, a...
The Internet of Things (IoT) is making everything it touches smarter – smart devices, smart cars and smart cities. And lucky us, we’re just beginning to reap the benefits as we work toward a networked society. However, this technology-driven innovation is impacting more than just individuals. The IoT has an environmental impact as well, which brings us to the theme of this month’s #IoTuesday Twitter chat. The ability to remove inefficiencies through connected objects is driving change throughout every sector, including waste management. BigBelly Solar, located just outside of Boston, is trans...
Software AG helps organizations transform into Digital Enterprises, so they can differentiate from competitors and better engage customers, partners and employees. Using the Software AG Suite, companies can close the gap between business and IT to create digital systems of differentiation that drive front-line agility. We offer four on-ramps to the Digital Enterprise: alignment through collaborative process analysis; transformation through portfolio management; agility through process automation and integration; and visibility through intelligent business operations and big data.
The Transparent Cloud-computing Consortium (abbreviation: T-Cloud Consortium) will conduct research activities into changes in the computing model as a result of collaboration between "device" and "cloud" and the creation of new value and markets through organic data processing High speed and high quality networks, and dramatic improvements in computer processing capabilities, have greatly changed the nature of applications and made the storing and processing of data on the network commonplace.
Be Among the First 100 to Attend & Receive a Smart Beacon. The Physical Web is an open web project within the Chrome team at Google. Scott Jenson leads a team that is working to leverage the scalability and openness of the web to talk to smart devices. The Physical Web uses bluetooth low energy beacons to broadcast an URL wirelessly using an open protocol. Nearby devices can find all URLs in the room, rank them and let the user pick one from a list. Each device is, in effect, a gateway to a web page. This unlocks entirely new use cases so devices can offer tiny bits of information or simple i...
Things are being built upon cloud foundations to transform organizations. This CEO Power Panel at 15th Cloud Expo, moderated by Roger Strukhoff, Cloud Expo and @ThingsExpo conference chair, will address the big issues involving these technologies and, more important, the results they will achieve. How important are public, private, and hybrid cloud to the enterprise? How does one define Big Data? And how is the IoT tying all this together?
The Internet of Things (IoT) is going to require a new way of thinking and of developing software for speed, security and innovation. This requires IT leaders to balance business as usual while anticipating for the next market and technology trends. Cloud provides the right IT asset portfolio to help today’s IT leaders manage the old and prepare for the new. Today the cloud conversation is evolving from private and public to hybrid. This session will provide use cases and insights to reinforce the value of the network in helping organizations to maximize their company’s cloud experience.
TechCrunch reported that "Berlin-based relayr, maker of the WunderBar, an Internet of Things (IoT) hardware dev kit which resembles a chunky chocolate bar, has closed a $2.3 million seed round, from unnamed U.S. and Switzerland-based investors. The startup had previously raised a €250,000 friend and family round, and had been on track to close a €500,000 seed earlier this year — but received a higher funding offer from a different set of investors, which is the $2.3M round it’s reporting."
The Industrial Internet revolution is now underway, enabled by connected machines and billions of devices that communicate and collaborate. The massive amounts of Big Data requiring real-time analysis is flooding legacy IT systems and giving way to cloud environments that can handle the unpredictable workloads. Yet many barriers remain until we can fully realize the opportunities and benefits from the convergence of machines and devices with Big Data and the cloud, including interoperability, data security and privacy.
All major researchers estimate there will be tens of billions devices - computers, smartphones, tablets, and sensors - connected to the Internet by 2020. This number will continue to grow at a rapid pace for the next several decades. Over the summer Gartner released its much anticipated annual Hype Cycle report and the big news is that Internet of Things has now replaced Big Data as the most hyped technology. Indeed, we're hearing more and more about this fascinating new technological paradigm. Every other IT news item seems to be about IoT and its implications on the future of digital busines...
Cultural, regulatory, environmental, political and economic (CREPE) conditions over the past decade are creating cross-industry solution spaces that require processes and technologies from both the Internet of Things (IoT), and Data Management and Analytics (DMA). These solution spaces are evolving into Sensor Analytics Ecosystems (SAE) that represent significant new opportunities for organizations of all types. Public Utilities throughout the world, providing electricity, natural gas and water, are pursuing SmartGrid initiatives that represent one of the more mature examples of SAE. We have s...
The Internet of Things needs an entirely new security model, or does it? Can we save some old and tested controls for the latest emerging and different technology environments? In his session at Internet of @ThingsExpo, Davi Ottenheimer, EMC Senior Director of Trust, will review hands-on lessons with IoT devices and reveal privacy options and a new risk balance you might not expect.
IoT is still a vague buzzword for many people. In his session at Internet of @ThingsExpo, Mike Kavis, Vice President & Principal Cloud Architect at Cloud Technology Partners, will discuss the business value of IoT that goes far beyond the general public's perception that IoT is all about wearables and home consumer services. The presentation will also discuss how IoT is perceived by investors and how venture capitalist access this space. Other topics to discuss are barriers to success, what is new, what is old, and what the future may hold.
Swiss innovators dizmo Inc. launches its ground-breaking software, which turns any digital surface into an immersive platform. The dizmo platform seamlessly connects digital and physical objects in the home and at the workplace. Dizmo breaks down traditional boundaries between device, operating systems, apps and software, transforming the way users work, play and live. It supports orchestration and collaboration in an unparalleled way enabling any data to instantaneously be accessed on any surface, anywhere and made interactive. Dizmo brings fantasies as seen in Sci-fi movies such as Iro...
There’s Big Data, then there’s really Big Data from the Internet of Things. IoT is evolving to include many data possibilities like new types of event, log and network data. The volumes are enormous, generating tens of billions of logs per day, which raise data challenges. Early IoT deployments are relying heavily on both the cloud and managed service providers to navigate these challenges. In her session at 6th Big Data Expo®, Hannah Smalltree, Director at Treasure Data, to discuss how IoT, Big Data and deployments are processing massive data volumes from wearables, utilities and other mach...
This Internet of Nouns trend is still in the early stages and many of our already connected gadgets do provide human benefits over the typical infotainment. Internet of Things or IoT. You know, where everyday objects have software, chips, and sensors to capture data and report back. Household items like refrigerators, toilets and thermostats along with clothing, cars and soon, the entire home will be connected. Many of these devices provide actionable data - or just fun entertainment - so people can make decisions about whatever is being monitored. It can also help save lives.
All major researchers estimate there will be tens of billions devices – computers, smartphones, tablets, and sensors – connected to the Internet by 2020. This number will continue to grow at a rapid pace for the next several decades. With major technology companies and startups seriously embracing IoT strategies, now is the perfect time to attend @ThingsExpo in Silicon Valley. Learn what is going on, contribute to the discussions, and ensure that your enterprise is as "IoT-Ready" as it can be!
Whether you're a startup or a 100 year old enterprise, the Internet of Things offers a variety of new capabilities for your business. IoT style solutions can help you get closer your customers, launch new product lines and take over an industry. Some companies are dipping their toes in, but many have already taken the plunge, all while dramatic new capabilities continue to emerge. In his session at Internet of @ThingsExpo, Reid Carlberg, Senior Director, Developer Evangelism at salesforce.com, to discuss real-world use cases, patterns and opportunities you can harness today.