Feeds

Hackers put the futility back in Sun's grid utility

DOS attack - or the Slashdot effect?

High performance access to file storage

Just hours after it went live, Sun Microsystems' grid computing service was felled by hackers using a denial-of-service attack. Sun, however, won't reveal any hints about the culprits or confirm whether or not it has contacted law enforcement about the attack.

Sun yesterday turned on its $1 per chip per hour service that lets businesses send their large, parallelized tasks to a Sun run cluster for processing. Sun thought that, after 18 months of preparing this service, it had worked through all the kinks. Not so.

Hackers crippled a trial portion of Sun's service where potential customers would tap into a text-to-speech software package and see how the grid worked. Sun had to set up a registration process on-the-fly for this trial service in order to sidestep the denial-of-service attack.

"There were some minimal DOS attempts early yesterday which is normal for any internet service," said Sun's director of utility computing Aisling MacRunnels. "The problem was resolved quickly. The Sun Grid was not compromised and there was no degradation of service for users inside the Sun Grid."

While Sun plays off the DOS attack as standard dot-com business, government observers may be less impressed. The US blocked the initial launch of Sun's grid out of security fears, suggesting that terrorists might design nuclear weapons or model bio-weapons attacks on the the cluster after using PayPal to rent the processors. (We hear PayPal is huge with the Axis of Evil) Sun got past such fears by making the grid service a US only thang for the time being.

Few companies will publicly out their suspects in hacking incidents, so it's no surprise that Sun is mum on that front. What is unusual is Sun's reluctance to disclose if it has in fact contacted law enforcement about the breach.

"We don't comment on privacy issues," Sun said.

Need we remind the company that it "has no privacy" and should "get over it."

One may be tempted to think that the DOS attack was the innocent consequence of news stories and Slashdot pointing to network.com, and not a group of rogue hackers, but banish such impure thoughts at once. ®

High performance access to file storage

More from The Register

next story
Seagate brings out 6TB HDD, did not need NO STEENKIN' SHINGLES
Or helium filling either, according to reports
European Court of Justice rips up Data Retention Directive
Rules 'interfering' measure to be 'invalid'
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Cisco reps flog Whiptail's Invicta arrays against EMC and Pure
Storage reseller report reveals who's selling what
Bored with trading oil and gold? Why not flog some CLOUD servers?
Chicago Mercantile Exchange plans cloud spot exchange
This time it's 'Personal': new Office 365 sub covers just two devices
Redmond also brings Office into Google's back yard
Just what could be inside Dropbox's new 'Home For Life'?
Biz apps, messaging, photos, email, more storage – sorry, did you think there would be cake?
IT bods: How long does it take YOU to train up on new tech?
I'll leave my arrays to do the hard work, if you don't mind
prev story

Whitepapers

Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
HP ArcSight ESM solution helps Finansbank
Based on their experience using HP ArcSight Enterprise Security Manager for IT security operations, Finansbank moved to HP ArcSight ESM for fraud management.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.