BitTorrent servers under attack

mimo2005 · 12-03-2004, 09:21 AM

BitTorrent servers under attack

December 2, 2004, 3:41 PM PST
By Robert Lemos

update Unknown attackers have downed file-sharing networks based on a common peer-to-peer technology, according to the administrator of LokiTorrent, one of the networks affected.

The distributed denial-of-service (DDoS) attack on the BitTorrent infrastructure prevented some users from downloading files for up to 10 hours on Wednesday, said the administrator, who asked to be identified only by his online handle, "Lowkee." The target was the central BitTorrent directories, or trackers, which are used by people to find movies, music and other content on the file-swapping network, he said.

"It maxed out our 100-megabit connection," Lowkee said Thursday . "I can't say how many systems were attacking, because our Web server took a dive at the time."

A DDoS attack is a common online assault that aims to overwhelm network bandwidth using a flood of data, to prevent access to servers. While BitTorrent technology eases bandwidth requirements for downloading files, since the data comes from pieces stored on various members' computers, it does little to protect against such attacks on the central servers.

Lowkee claimed that administrators at three other networks said servers on those hubs had been attacked. The BitTorrent networks are currently in operation as normal.

BitTorrent technology lets people download files from the computers of other members taking part in a peer-to-peer network. Centralized directories, known as tracker servers, hold critical information that pinpoints which users' computers have the various fragments that make up a single file. Once a fragment of a file is cached on a PC, that machine then makes it available to other users, to speed downloads. Though distribution is shared, the technology still relies on central tracking servers to direct a downloader's software to different pieces of a file, which could be hosted on several users' PCs.

While the technology allows members to share the bandwidth costs of file sharing and speeds downloads, it doesn't prevent a flood of data to the tracker servers from interrupting the service.

"Avoiding future attacks will require an overhaul of the BitTorrent protocol itself, as right now there lies too much reliance on the trackers," Lowkee said. "We're hoping future changes will reduce the requirement of the tracker to an initial connection, therefore moving the actual peer-sharing burden to the peers themselves."

This is the latest attack against peer-to-peer file sharing services. Last spring, a variant of the Netsky virus leveled a denial-of-service attack against Kazaa and eDonkey, two other peer-to-peer networks. Web site caching service Akamai was hit by a massive data attack earlier this year as well.

It is unknown how widely the BitTorrent attack affected other networks. The creator of BitTorrent, Bram Cohen, could not be reached for comment.

**Fox** · 12-03-2004, 11:00 AM

I agree with the suggestion of an overhaul. I see a lot of trackers go down, for whatever reason, all the time.

12-03-2004, 09:21 AM	#1 (permalink)
mimo2005 Manager, The Relaxation Room/Analyst, Security Team Join Date: Oct 2004 Posts: 10,745 OS: xp	BitTorrent servers under attack BitTorrent servers under attack December 2, 2004, 3:41 PM PST By Robert Lemos update Unknown attackers have downed file-sharing networks based on a common peer-to-peer technology, according to the administrator of LokiTorrent, one of the networks affected. The distributed denial-of-service (DDoS) attack on the BitTorrent infrastructure prevented some users from downloading files for up to 10 hours on Wednesday, said the administrator, who asked to be identified only by his online handle, "Lowkee." The target was the central BitTorrent directories, or trackers, which are used by people to find movies, music and other content on the file-swapping network, he said. "It maxed out our 100-megabit connection," Lowkee said Thursday . "I can't say how many systems were attacking, because our Web server took a dive at the time." A DDoS attack is a common online assault that aims to overwhelm network bandwidth using a flood of data, to prevent access to servers. While BitTorrent technology eases bandwidth requirements for downloading files, since the data comes from pieces stored on various members' computers, it does little to protect against such attacks on the central servers. Lowkee claimed that administrators at three other networks said servers on those hubs had been attacked. The BitTorrent networks are currently in operation as normal. BitTorrent technology lets people download files from the computers of other members taking part in a peer-to-peer network. Centralized directories, known as tracker servers, hold critical information that pinpoints which users' computers have the various fragments that make up a single file. Once a fragment of a file is cached on a PC, that machine then makes it available to other users, to speed downloads. Though distribution is shared, the technology still relies on central tracking servers to direct a downloader's software to different pieces of a file, which could be hosted on several users' PCs. While the technology allows members to share the bandwidth costs of file sharing and speeds downloads, it doesn't prevent a flood of data to the tracker servers from interrupting the service. "Avoiding future attacks will require an overhaul of the BitTorrent protocol itself, as right now there lies too much reliance on the trackers," Lowkee said. "We're hoping future changes will reduce the requirement of the tracker to an initial connection, therefore moving the actual peer-sharing burden to the peers themselves." This is the latest attack against peer-to-peer file sharing services. Last spring, a variant of the Netsky virus leveled a denial-of-service attack against Kazaa and eDonkey, two other peer-to-peer networks. Web site caching service Akamai was hit by a massive data attack earlier this year as well. It is unknown how widely the BitTorrent attack affected other networks. The creator of BitTorrent, Bram Cohen, could not be reached for comment. __________________ TSF has outgrown its server, again. Please help "Gutta cavat lapidem, non vi sed saepe cadendo"

12-03-2004, 11:00 AM	#2 (permalink)
Fox Moderator, Microsoft Support Join Date: Sep 2002 Location: NJ Posts: 7,752 OS: XP Pro, CentOS My System	I agree with the suggestion of an overhaul. I see a lot of trackers go down, for whatever reason, all the time.