Amazon UK goes offline amid threats of cyber attacks - The Guardian

Amazon.co.uk went down on Sunday night along with other sites hosted with Amazon in Dublin, suggesting technical issues rather than a hacker attack. Photograph: Frank Baron for the Guardian

The online shopping site Amazon was briefly offline this evening in the UK, Germany, Italy and France and an unknown number of other countries, possibly after a denial of service attack launched by Anonymous, a loose group sympathetic to – but unconnected with – WikiLeaks.

But others suggested that the failure was due to an internal error affecting the Irish data centre that runs the site in those four countries.

In the UK the site was unreachable, and attempts to connect to the US site also failed initially, though that site rapidly came back online at about 9.30pm. The site was also reported to be down in Italy and France.

Meanwhile Mastercard's main site was also knocked offline, according to the web stats service Netcraft.

Also today, in a separate incident, the gossip website Gawker announced that its encrypted database of 1.5 million user names and passwords used for commenting had been cracked by a "brute-force" attack. Although Gawker does not collect credit card details, the risk is that those of its users who use the same password and name on other sites could see their identities compromised.

"We're deeply embarrassed by this breach," said the operators of the site, part of a network of blogs owned by Nick Denton. "We should not be in the position of relying on the goodwill of the hackers who identified the weakness in our systems."

Amazon could not be reached for comment on whether its sites' failure was due to an attack, or simply because it was one of the busiest online shopping nights of the year in the runup to Christmas. The sites in Canada, US, China and Japan were apparently unaffected.

The monitoring service Netcraft said that "the problems seemed to affect other sites hosted with Amazon in Dublin" – suggesting it was an internal failure rather than a hacker attack.

The Anonymous group, which draws many of its members from the forums of the 4chan website, failed on Thursday in an attempt to bring down Amazon, which is the world's largest online retailer. Disagreement within the loose-knit group meant the majority of attacks were directed at PayPal and left Amazon unscathed.

Discussion within the chat forums where the group attempts to co-ordinate its efforts suggested its members were surprised at the idea that Amazon had gone offline.

The countries affected initially suggests that internal problems, rather than an external attack, might have caused the problem. Amazon's UK, Italian and French sites are all served from a data centre based in Ireland .

The group targeted Amazon because it had withdrawn permission for WikiLeaks to serve pages via its EC2 cloud computing service, where WikiLeaks moved its services on 29 November to avoid a "distributed denial of service" (DDoS) attack from an unknown source, apparently to prevent it publishing thousands of leaked US diplomatic cables.

On 1 December, Amazon announced it was dropping the controversial site just 24 hours after being contacted by the office of Joe Lieberman, chairman of the Senate's committee on homeland security.

A statement put out later by a faction of Anonymous said attacking Amazon would be in "bad taste" at the height of the Christmas shopping season.

Twitter also this weekend suspended a number of accounts linked to "Operation Payback", the Anonymous campaign to bring down the sites of companies that have cut ties with WikiLeaks. Biz Stone, the co-founder of Twitter, said it was a "terms of service and policy decision" to suspend the accounts.

Both Facebook and Twitter last week separately closed down a number of accounts and pages linked to Operation Payback.

WikiLeaks founder Julian Assange last week attempted to distance the whistleblowers' site from the illegal cyber attacks being carried out in support of the release of thousands of confidential US diplomatic documents.

Assange expressed concern that "people have unjustly accused WikiLeaks of inspiring cyber attacks," according to his London-based lawyer Mark Stephens.

View the original article here

4chan rushes to WikiLeaks' defense, forces Swiss banking site offline - Ars Technica

The forces of Anonymous have taken aim at several companies who are refusing to do business with WikiLeaks. 4chan's hordes have launched distributed denial-of-service attacks against PayPal, Swiss bank PostFinance, and other sites that have hindered the whistleblowing site's operations.

A self-styled spokesman for the group calling himself "Coldblood" has said that any website that's "bowing down to government pressure" is a target. PayPal ceased processing donations to the site, and PostFinance froze WikiLeaks founder Julian Assange's account. The attacks are being performed under the Operation: Payback banner; Operation: Payback is the name the group is using in its long-running attacks on the RIAA, MPAA, and other organizations involved with anti-piracy lawsuits.

The initial attacks against PayPal were substantially ineffective; the PayPal blog was taken offline, but the main PayPal site wasn't harmed. The attacks against PostFinance, however, have resulted in the bank's website being unavailable for more than 16 hours. It remains unavailable at the time of writing. The latest target is the site of the Swedish prosecutors in Assange's sexual misconduct trial. This too appears to be offline. Twitter has also been named as a future attack target, due to its censorship of the #wikileaks hashtag.

The companies being attacked deny that their behavior is a result of government influence. Rather, they are claiming that WikiLeaks and Assange have failed to adhere to the terms of use of various services. Amazon, which for a time hosted the site, said that WikiLeaks was failing to ensure that it "wasn't putting innocent people in jeopardy." PostFinance said that Assange lied on an application form.

In a case of tit-for-tat, unknown forces have since launched a denial of service attack against Anonymous' own site (one that took it offline shortly after publication), though the IRC channel used for coordination is still operational, and its denial-of-service software, LOIC, is still functioning properly.

WikiLeaks was itself the target of massive denial of service attacks in the wake of its release of thousands of US embassy cables. The source of these attacks remains unknown. In addition to making the main WikiLeaks site hard to access, DoS attacks against DNS provider EveryDNS resulted in the company cutting WikiLeaks off, as it was unwilling to tolerate the excess traffic.

In spite of this, hundreds of mirrors of the site have popped up across the globe, with Anonymous claiming to have created many of them. An "insurance file"—an encrypted torrent of the entire cable dump—has been widely distributed, along with the promise that the decryption key will be published should anything bad happen to WikiLeaks.

Assange himself is currently remanded in custody in the UK. Swedish prosecutors are seeking to have him extradited to face sexual misconduct charges. He surrendered to police in London and was arrested. Bail was refused over fears that he might flee, and also due to some fear that he was at risk from "unstable persons." With widespread calls for his murder, this might not be too far-fetched.

View the original article here