Here's what's up:

http://www.theregister.co.uk/content/6/29984.html

Al Jazeera's web site - DDoSed or unplugged?
By John Lettice
Posted: 27/03/2003 at 16:17 GMT

The launch of Arab satellite TV network Al Jazeera's new Web site
on Monday drew immediate hack attacks, but this has been swiftly followed
up by the disappearance of the site's DNS records. These now point to
mydomain.com nameservers, but this company's site is also currently
inaccessible; as you might expect, under the circumstances.

Al Jazeera (aljazeera.net, for the record) could have been taken offline
by DDoS attacks, but considering the timing one is also drawn to the
possibility that something involving a Big Red Switch might have been
involved. Prior to the site's complete removal company IT manager Salah Al
Seddiqui told Reuters that its Qatar- based vendor had said "US-based
DataPipe could no longer host its site from the end of this month," and
that Al Jazeera would be moving its servers to Europe. 

Al Jazeera had two listed nameservers - one at datapipe.com and one at
nav-link.net. NavLink has offices in the US (it's incorporated in
Delaware), Europe and the Middle East (the UAE and Lebanon), so there's a
logic to Al Jazeera using it. However if the dual-server system is
intended to provide some form of resilience it clearly hasn't worked. 

The problem seems to have taken Al Jazeera unawares. When The Register
spoke to the company's London office earlier today they said that their
most recent information from Qatar had been that the site was unavailable
because of heavy demand, and that they were trying to get through to Qatar
for an update.

Al Jazeera is not, as you will no doubt have noticed, universally popular,
and today in particular it has been heavily criticised by UK military
spokesmen for screening pictures of dead British servicemen. But even at
the best of times the network is not a customer that many hosting
companies in the US would want to boast about. At the worst of times -
which probably includes now - it's unlikely the company would stand any
chance whatsoever of being accepted by US providers.

So it's perfectly possible that someone along the line decided, owing to
pressure and/or common prudence, not to continue involvement with the
company. This sort of thing might of course trigger legal action, but Al
Jazeera itself is well-aware that it treads a very tricky line, so
probably won't want to make unnecessary waves. And as its site was already
pretty unavailable because of the attacks, and it's said it's heading off
to Europe, what difference would it make?

That you will note is one of two possible conspiracy theories, and does
not necessarily involve US.gov. But we expect that if the site hadn't
disappeared already, pretty soon US.gov would get involved until it did -
which is conspiracy theory two.

The alternative to the conspiracy theories is that weaknesses in Al
Jazeera's DNS meant they were vulnerable to load, and that the
disappearance of the DNS was therefore a consequence of the attack. As we
understand it, this is technically possible, although it has also been
suggested to us that the company's DNS did not come under an insupportable
load during the attacks.

So right now we think the jury is still out. But in the long run the
question of whether the company was DDoSed or unplugged will be fairly
academic. Given that it's pretty much unthinkable that it could have been
allowed to continue running via US companies, it was going to go anyway,
one way or the other. Europe might be some form of solution, but one might
estimate that here too quite a few hosting outfits will view Al Jazeera as
a poisoned chalice, a customer with a profile several notches to high. 

And even if it does get itself sorted out on the other side of the pond,
it will still be likely to gain experience of how much of the Internet,
when it comes down to it, is actually US-owned. But perhaps it has some
cards. US companies wanting to play in the Middle East are unlikely to
find their local operations going down a storm if they're refusing to do
business with a popular TV station like Al Jazeera, so they'll be
pressured in both directions. That's the trouble with the Internet - it
connects things that sometimes you'd rather didn't get connected.


----------------------Kaos-Keraunos-Kybernetos---------------------------
 + ^ + :NSA got $20Bil/year |Passwords are like underwear. You don't /|\
  \|/  :and didn't stop 9-11|share them, you don't hang them on your/\|/\
<--*-->:Instead of rewarding|monitor, or under your keyboard, you   \/|\/
  /|\  :their failures, we  |don't email them, or put them on a web  \|/
 + v + :should get refunds! |site, and you must change them very often.
[EMAIL PROTECTED] http://www.sunder.net ------------

On Thu, 27 Mar 2003, Steve Schear wrote:

> At 07:53 PM 3/27/2003 +0100, you wrote:
> > > It's definitly jammed in the US.  I get "503 - out of resources error".
> > > Maybe you guys can set up a mirror that isn't jammed and the US can see it
> > > that way (at least until the feds catch wind of it).
> >
> >At this moment, http://english.aljazeera.net/ shows some domain
> >registration page with the text "This Page has Been Taken Over By Saimoon
> >Bhuiyan". The original server of aljazeera.net was IIS/5.0, the current
> >server is Apache/1.3.26, the hostname resolves to 216.34.94.186.
> >
> >It would be nice to have one alternative distribution channel for the news
> >there, optimally with cooperation of their editors themselves (if they
> >send the files to a mailinglist together with uploading it to the web, it
> >eliminates the phase of fishing the data from an overloaded and
> >permanently hacked machine).
> 
> This is what Freenet is for.  Propagation times are sufficiently quick for 
> hourly or so updates, etc.
> 
> steve

Reply via email to