Feeds

Hackers put the futility back in Sun's grid utility

DOS attack - or the Slashdot effect?

High performance access to file storage

Just hours after it went live, Sun Microsystems' grid computing service was felled by hackers using a denial-of-service attack. Sun, however, won't reveal any hints about the culprits or confirm whether or not it has contacted law enforcement about the attack.

Sun yesterday turned on its $1 per chip per hour service that lets businesses send their large, parallelized tasks to a Sun run cluster for processing. Sun thought that, after 18 months of preparing this service, it had worked through all the kinks. Not so.

Hackers crippled a trial portion of Sun's service where potential customers would tap into a text-to-speech software package and see how the grid worked. Sun had to set up a registration process on-the-fly for this trial service in order to sidestep the denial-of-service attack.

"There were some minimal DOS attempts early yesterday which is normal for any internet service," said Sun's director of utility computing Aisling MacRunnels. "The problem was resolved quickly. The Sun Grid was not compromised and there was no degradation of service for users inside the Sun Grid."

While Sun plays off the DOS attack as standard dot-com business, government observers may be less impressed. The US blocked the initial launch of Sun's grid out of security fears, suggesting that terrorists might design nuclear weapons or model bio-weapons attacks on the the cluster after using PayPal to rent the processors. (We hear PayPal is huge with the Axis of Evil) Sun got past such fears by making the grid service a US only thang for the time being.

Few companies will publicly out their suspects in hacking incidents, so it's no surprise that Sun is mum on that front. What is unusual is Sun's reluctance to disclose if it has in fact contacted law enforcement about the breach.

"We don't comment on privacy issues," Sun said.

Need we remind the company that it "has no privacy" and should "get over it."

One may be tempted to think that the DOS attack was the innocent consequence of news stories and Slashdot pointing to network.com, and not a group of rogue hackers, but banish such impure thoughts at once. ®

High performance access to file storage

More from The Register

next story
Seagate brings out 6TB HDD, did not need NO STEENKIN' SHINGLES
Or helium filling either, according to reports
European Court of Justice rips up Data Retention Directive
Rules 'interfering' measure to be 'invalid'
Dropbox defends fantastically badly timed Condoleezza Rice appointment
'Nothing is going to change with Dr. Rice's appointment,' file sharer promises
Cisco reps flog Whiptail's Invicta arrays against EMC and Pure
Storage reseller report reveals who's selling what
Just what could be inside Dropbox's new 'Home For Life'?
Biz apps, messaging, photos, email, more storage – sorry, did you think there would be cake?
IT bods: How long does it take YOU to train up on new tech?
I'll leave my arrays to do the hard work, if you don't mind
Amazon reveals its Google-killing 'R3' server instances
A mega-memory instance that never forgets
USA opposes 'Schengen cloud' Eurocentric routing plan
All routes should transit America, apparently
prev story

Whitepapers

Mainstay ROI - Does application security pay?
In this whitepaper learn how you and your enterprise might benefit from better software security.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Mobile application security study
Download this report to see the alarming realities regarding the sheer number of applications vulnerable to attack, as well as the most common and easily addressable vulnerability errors.