Nice NEW Attack Platform

[xor]

Anyone else see this.

This is push button DOS or worst from Amazon.

Amazon Elastic Compute Cloud (Amazon EC2) - Beta

http://www.amazon.com/gp/browse.html?node=201590011

In the voice of Boris....

I wonder how long it would take them to catch up to someone using this power for hehe nefarious purposes.

xor

Sounds like a paper to me. It's also in Beta right now, can anyone here say compromise.

[0x58]

Re: Nice NEW Attack Platform

Faster way to crack passwords?

[xor]

Re: Nice NEW Attack Platform

The way I see it is, I could be wrong how ever. You could essentially spawn as many servers/threads as need be(I'm sure there is some real upper limit) and use them as a DOS against some other site. You can use as much power for as long as you want as long as you are willing to pay for it. Even if it's for 5 - 10 minutes before the red flags start going off. If well planned 5 to 10 minutes is an eternity for a computer. Of course this would have to be done with stolen credit cards and be used in conjunction with other attacks forms.

To actually prove it out you would no doubt get in trouble. Throwing a lot of packets even at your own site could would cause trouble for other uses and possible disruption on other networks.

If you stayed within the cloud you actually mite be able to prove this out. Again just thinking out loud here doing say a 1000+ instances with something as simple as the ping of death to a single target(that you rented) within the cloud mite be enough to prove it out,

Their TOS states you are not allowed to 'Hack" but it lacks mentioning anything about Security Research. If I was over 80 or younger than 16 I mite consider doing something like this; but at my age they throw the book at you as you are suppose to know better.

Yes cracking passwords, it could also be used for that if you needed a lot of power very quickly for s specific task. You would have to call it password recovery however. .

Again it's a new offering of a hot technology and should be vetted by the security industry for possible threats or uses.. I'm just kicking around ideas here. Anyone is welcome to chime in.

xor