The iPad has landed.

Suspicious Skype calls may be monitored by European government Alert: Critical security flaw in Adobe Acrobat

Xbox Live players striking each other with denial-of-service attacks

By flooding another player's internet connection with data, attackers can kick him or her out of an XBL game.

Digg del.icio.us Facebook StumbleUpon Twitter

Gaming | by Stephen Schenck | Fri Feb 20, 2009 11:32AM | 2 comments

What's the proper reaction to getting beaten in a game of Halo 3? Practice more? Play against some more novice opponents? Unfortunately, not everyone is as good a sport as we are, and apparently Xbox Live is being increasingly targeted by hacker tools that attack a player's internet connection, forcing him or her out of the game.

The disruptions are being caused by a type of denial-of-service attack. These hacks are normally leveraged against larger foes, like commercial web servers, using the internet connections of dozens, if not hundreds of machines, all trying to connect to the server at once. By overloading it with requests, the attacker effectively denies other users the use of its services.

On XBL, players looking to disrupt another's service just have to sniff out the target's IP address. Though XBL doesn't show the IPs of other players, it can be possible to determine by analyzing network logs, especially if the target is the one hosting a game. Armed with that piece of information, an attacker uses a PC tool to coordinate the attack. In order to create enough traffic to disrupt the victim's connection, the tool lets the attacker rent time on a botnet, an illegal underground network of computers that have been compromised by malware, putting them under the control of a hacker. By paying to access a large group of these machines, the attacker has enough bandwidth under his control to quickly knock his target off of XBL.

The sad thing isn't just that there are people taking their games so seriously that they risk jail time just to get revenge on other players, but that there's little to be done about the situation. Tools to mitigate the effect of DoS attacks are expensive and not well suited for use by the average user at home. Microsoft could shield players from each others' IPs by routing all traffic through it's own servers, but there's no indication it's willing to take that very expensive step.

This story around the web:

Trusted sources:
external link Hackers target Xbox Live players [BBC News | Technology | UK Edition]
external link Microsoft investigating Xbox Live hackers [TechRadar]
external link Hackers booting people off of Xbox Live [Megite Technology News: What's Happening Right Now]
external link Hackers target Xbox Live players (BBC) [Techmeme]
external link Hackers Targeting Xbox Live Gamers [Gearlog]
external link Hackers target Xbox Live players [Megite Technology News: What's Happening Right Now]

Get more information on topics relating to this story:


Related company news:
Microsoft
Related glossary terms:
Xbox LIVE, IP address, Denial of service
Related brand news:
Microsoft Xbox 360
Related devices and services:
Microsoft Xbox 360 Pro

Comments (2)

Add a comment Inappropriate or promotional comments may be removed.

Reply
Anonymous (7:56 PM on Sun Mar 15, 2009)

Word to the wise, ITS JUST A GAME

Reply
Anonymous (4:35 AM on Sun Apr 19, 2009)

Tell that to the MLG!

Add a comment

Click one of the three commenter types below. Member comments are added immediately once you confirm your email address. Anonymous comments are moderated by our editorial staff.

I want to comment as a new member an existing member anonymously

Email me

  

Comment Preview
Anonymous (1:58 PM on Tue Feb 9, 2010)

Preview your comment here.

Inappropriate or promotional comments may be removed. To create a clickable link, simply type the URL (including http://) and we will make a link for you. Line breaks and paragraphs are automatically converted — no need to use <p> or <br> tags, but if you're into that kind of thing, you can use any of the following tags: b, i, strong, em, a (href only), p and br.