← Back to context

Comment by mattbee

8 years ago

Another implication: they could be using their access to these sites' traffic to prepare their own infrastructure for attacks before they happen.

There's nothing about their hosting of these sites that doesn't reek.

That is how DDOS protection works, learning from data and scale to better defend future attacks. Every large network and security operator does this. What is your issue with that exactly?

  • I don't mean they are learning from observing attack traffic, they have access to the command and control traffic.

    That means they could know about an attack before it happens.

    They could know how long it will last, who the target will be, and what volume of traffic to expect.

    They could know who had ordered it, who had paid for it.

    They. Also. Sell. Protection.

    To call the situation deeply conflicting is an understatement.