Is a major social network denial-of-service attack underway?

Twitter is down. LiveJournal has been down, although it appears to be back up. Facebook users are experiencing problems too. What's going on?

In Twitter's case, the culprit has been confirmed as a denial-of-service attack. A note on the Twitter status page states "we are defending against a denial-of-service attack". There is no word yet on the cause of the LiveJournal and Facebook issues that have been reported. Needless to say, the fact that three popular social networking services are all having a bad morning hints at the possibility that the most important parts of the social internets are under siege.

Denial-of-service attacks are nothing new, of course. They've brought many a site down and have even been used as a bargaining chip for extortion attempts. So it's not entirely surprising that someone has turned their attention to Twitter and possibly other popular social networks.

The apparent effectiveness of the attack in knocking Twitter out (Twitter is still unconscious) would indicate that Twitter is facing a distributed denial of service attack in which the culprits use multiple distributed sources to slam a particular system or network. Given the prevalence of large-scale botnets in the hands of troublemakers and internet criminals today, such distributed denial of service attacks can be extremely difficult to defend against.

Of course, using botnet resources to bring Twitter down isn't exactly a profitable use of a botnet (unless there's some sort of back story here) so this doesn't happen every day but today's event does highlight the vulnerability just about every website is exposed to. The economic liabilities associated this vulnerability are significant; even if you're not making lots of money (a la Twitter), downtime has other consequences (decreased user loyalty, loss of reputation, etc.).

Let's hope that Twitter recovers soon so that time can restart and let's also hope that the incidents with LiveJournal and Facebook are completely coincidental.

Patricio Robles is a tech reporter at Econsultancy. Follow him on Twitter.

Add your own

Reader comments (7)

  1. Avatar-blank-50x50 Ambarish Mitra

    5:15PM on 6th August 2009

    Twitter is having a DDOS attack and I was blaming the poor twitterberry and almost replacing it with ubertwitter.

  2. Avatar-blank-50x50 Matthew

    5:26PM on 6th August 2009

    Hi Patricio,

    http://www.playster.org has had intermittent outages for most of this morning. We're on App Engine, so it's possible Google was targeted as well but coped better (overall). 

  3. Avatar-blank-50x50 David Gerard

    5:36PM on 6th August 2009

    My theory is it's the Confederation of British Industry setting hackers on the sites in the hope that people will do, you know, work at work. Blog post: http://is.gd/2590J

  4. Avatar-blank-50x50 Sean Smith

    7:25PM on 6th August 2009

    wow, this is bad news for all the people tweeting right now!!

  5. Avatar-blank-50x50 Chrystal K.

    11:45PM on 6th August 2009

    Why would someone do something like this?

  6. Avatar-blank-50x50 Clerkendweller

    11:03AM on 7th August 2009

    Chrystal - extortion.

  7. Avatar-blank-50x50 Adi @ The Management Blog

    3:01PM on 7th August 2009

    It raises the question for me of how we cope ourselves under such circumstances.  If Twitter were to vanish tomorrow, would all of the connections and work we do on there vanish to? 

    Ok, so the site probably won't go anywhere but what if your account was suddenly zapped?  Likewise with LinkedIn and other such sites.

    Data backups and contingency planning is certainly not new in the IT world but very little of this seems to be done by people working in the social media.

Log in to post a comment