April 23, 2008

SlideShare Slammed with DDOS Attacks from China

Mark Hendrickson

93 comments »

SlideShare, a Mountain View-based startup that lets you upload and embed PowerPoint presentations on the web, appears to have stirred the red dragon last week.

About ten days ago the company began receiving anonymous requests to delete slideshows that were deemed “illegal” by the requesters. The SlideShare staff checked out these slideshows and discovered them to be quite innocent. While some described ways to fight corruption in China, none of them violated the company’s terms of service, and so SlideShow did nothing to fulfill the requests.

SlideShare soon began receiving a different type of request from the same people, who could now be identified by their email addresses. This time they were pretending to be users who had lost their passwords. Once again doing nothing, the company got a very demanding, and almost threatening, call to its Indian office on Wednesday, one that insisted that the company grant access to an account.

After these three failed attempts, SlideShare experienced a massive distributed denial of service attack starting at 10pm on Thursday, one day before the CNN website was attacked by Chinese instigators in apparent backlash to its coverage of the Tibetan protests. We’ve been told that the attack reached a peak of 2.5GB/sec and consisted entirely of packets sent from China.

Not long after the first attack subsided, SlideShare was hit a second time on Friday and the site went down again until Saturday morning. Since then there have been no more attacks, but the company continues to receive fake password recovery and illegitimate takedown requests at a rate of about 5-10 per day (it has accumulated about 50-60 total).

There’s a lot of speculation around just what has happened here since no one knows for sure who is behind the requests and attacks. However, it seems likely that they were from the same hacker groups - possibly linked to the Chinese government - that attacked the CNN site (and later called their attack off after getting too much publicity). Some of the slideshows with takedown requests have been viewed many times recently, so their popularity seems to have landed them on the Chinese government’s radar.

SlideShare insists that it will do everything it can to protect its users’ freedom of speech. As such, it has no plans to remove any of the content in question.

The Sports Network was also recently taken over by Chinese hackers who mistook it for CNN sports.

Update: Just as I finished writing this post, I received word from the company that a third attack had begun.

  • Sphere It

Trackbacks/Pings (Trackback URL)

  1. Slideshare, the presentation sharing sit … « law.librarians
  2. Vijay Anand | The Startup Guy.
  3. www.webyantra.net»Blog Archive » SlideShare getting disrupted by massive DDOS attacks
  4. SlideShare Blog » Blog Archive » Missing SlideShare? Drop a note here…
  5. بعد موقع SportsNetwrok:الصين تهاجم موقع SlideShare | تيدوز
  6. DailyDigital » Blog Archive » Webcompany fights of Chinese government
  7. The Growing Threat of DDOS as a Weapon : Codswallop
  8. SlideShare getting disrupted by massive DDOS attacks — amit ranjan
  9. IT Blogger » China - internet - libertate? -
  10. KapilMohan.com » DDOS hosed SlideShare
  11. SlideShare getting disrupted by massive DDOS attacks | Indian Startups In News
  12. TechCrunch Japanese アーカイブ » SlideShare、中国からのDDOS攻撃にさらされる
  13. The new arms race | The Sixth W
  14. Chinese hackers call off attack on CNN website | The Union Statesman
  15. SlideShare Protegge 3M per Embeddable Presentazioni | corte marsilio
  16. reach out and torch someone | conservativeintelligencer.com

Comments

RSS feed for comments on this post.

  1. gilltots

    their site went down?? must be amateur hour again.

    time to fire the chief architect, etcetera.

  2. Anthony

    If it was truly a denial of service attack to the magnitude of 2.5gpbs then how is that an architectural problem? They may have the right amount of servers and bandwidth and just didn’t see a need to cater for a denial of service attack, since it is exactly legal.

  3. klaus

    then… surely, we take the offending material and place it on other sites?

  4. Peter Urban

    DDOS attacks are mean comment 

  5. Alexandar Tzanov

    All I am going to say is that. Finally, finally we have an example of a company that is more interested in the rights and benefits of its customers, than its own interests. Just for that SlideShare should receive a lot of media exposure and be used as an example to other companies - CrapCast .. I mean, Comcast.

  6. Igor The Troll

    I really wonder if the Chinese government would be interested in this petty hooliganism! Can this be some actions performed by special interest groups to make China look bad in the wake of the Olympics?

    There is a lot of this”Let’s bash China!” going on around the world!

    Japanese government is blaming China for contaminated food, because one shipment of Gyoza had a problem. A person died after eating it. Now Japanese gorvernment is running a national campaign advacating how bad Chinese food is. Are the trying to protect Japanese consumers or Japanese manufacturers and farmers!

    Need to take The Anti-China rage with a grain of salt!

  7. Tom Robinson

    So, who has links to these “illegal” slideshows?

  8. Angry Techie

    If China fell off the internet, we’d lose World of Warcraft gold farmers, Spammers, and totalitarian government sponsored DDOS’s against free speech.

    Dear China, FUCK YOU.

  9. Igor The Troll

    Angry, why are you Angry?

  10. Anthony

    Careful there, Angry Techie… we don’t want TechCrunch getting hit because of your angry words.

    The Chinese are watching… Waiting…

  11. nobosh.com

    Mark, how about an article telling use what we can do to fight these attacks, or prepare for them if even possible.

  12. Angry Techie

    This is how China tells the world it’s going to respond to concerns about their genocide against tibet? Attacking American businesses? How about we go down to the landing stations where the trans-pacific submarine cables go from China to LA and cut them with an axe. China’s economy would be devastated from the loss of Spam and WoW gold-farming revenue.

  13. Igor The Troll

    Nobosh, it helps to be on a hosting service that has the right engineers to deal with this problem. If you have your own server, you need to have the human resources or the technical knowledge yourself to combat attacks.

  14. Igor The Troll

    Angry are you a CIA operative..:)

  15. Anthony

    For a distributed denial of service attack, you would need to block very large ranges of IP addresses at your firewall level.

    Given that they say it’s all from China, if I were them I would just block every known range belonging to China. Screw em.

    If it were distributed in a larger manner (multiple countries), your next best shot is at having the resources to handle such an attack. This would include MANY gigabyte connections, a very large cluster of servers, etc.

    If every website had a network setup big enough to handle the magnitude of a well constructed denial of service attack, we would all be out of business from the cost of doing so.

  16. Angry Techie

    If I were a CIA operative I’d be a drunk staring at identical satellite photos all day wondering why our intelligence system keeps failing us.

  17. Alexandar Tzanov

    @10 that’s what they want. Now-a-days organizations and people rely on others’ fears to control them and not provide opposition. So if you want to be someone’s bitch, keep quiet and empower them through your fears.

  18. Igor The Troll

    Angry, are you initiating Defcon 1? I better go hide under my computer..:)

  19. Anthony

    @17 I am just making a joke at this whole scare tactic China is trying to impose. Lighten up.

  20. Anthony

    @18 you are just trying to stir up trouble. Can’t believe someone would dedicate a website and his / her life to “trolling” boards and getting banned.

  21. Alexandar Tzanov

    I know you are, but that doesn’t mean that that’s not a widely utilized tactic.

  22. Igor The Troll

    Wow, I see some real Human Rights Activist here! Anyone willing to strap Little Boy around them and parachute over Beijing?

  23. Igor The Troll

    #20 No, I am trying to shine some light on the ignorance!

  24. Anthony

    @23 show us some real information which isn’t sponsored by the Chinese government which suggests, with substantial evidence, that China has nothing to do with the drama going on in Tibet.

  25. Igor The Troll

    Anthony, I am not condoning China and its Human Rights abuses. This is a complected issue that the whole world is trying to address!

    Many governments have problems. Just look at USA under Bush!

    Now is TechCrunch the right place to escalate such a discussion?

  26. sean

    (L)China and go home

  27. Anthony

    If your going to abuse human rights, at least have a great PR campaign. America has it, seems China failed for the most part.

  28. Igor The Troll

    It sort of makes me miss the KGB days of Soviet Union!

    Can you imagine TechCrunch around that time..:)

    We probably would have started World War Three!

  29. Igor The Troll

    Anthony, I see we come to agreement there..:)

  30. Anthony

    @31 our only agreement is that we both agree China is not the only advocate for abusing human rights. I won’t agree with any of your other statements.

  31. JGuy

    I angry with angry techie. FUCK CHINA.
    Its one thing if you deny free speech to your own people, quite another when you try to tell americans what to do.

    Retards can’t even build decent cheap crap. Commie shitheads.

  32. Igor The Troll

    #28 China is slow learners. They are still old economy. Remember it is Al Gore that invented the Internet not Mao Zedong!

  33. NickeyD

    SlideShare taking a stand for freedom of speech. Hear that Google ?

  34. Igor The Troll

    Wow, Macarthurism, time to move to Mars..:)

  35. David Oxley

    We need a War on Internet Commies. It’s a shame all the good commie-fighting leaders have gone, Dubya won’t be much use.

  36. Andy Wong

    This kind of attack was often done by a mix of “S h i t Youth” and the government internet agents of PRC. Some of them think that China is getting economically powerful, now they can export censorship overseas by all means. These attackers may not totally controlled by the government and some corrupted officers.

    “S h i t Youth” is a nick name of “Angry Youth” in Chinese sub-culture in the mainland China. In Chinese mandarin, “angry” sounds like “shit”.

  37. Trace

    Noticeably absent are links to the offending documents…. Come on Mike, let’s post the links and full documents, deal with a DOS attack for a day or two and make national headlines for “Denial of Service Attacks On Leading American Tech Website Traced To Chinese Government!”

    It will be worth it! :)

  38. JGuy

    Well, if #36 is true, and this gets worse or keeps happening then we should cut all internet lines going in and out of china. Basically, sending them a message: fuck off commies.

    I don’t like how they bully american companies either or how they play unfair(by redirecting to baidu, etc.)

    The danger of a world bullied by China is real. Anyways, this really pisses me off.

  39. Sunil

    Chinese Attack in Mountain View, California, United States

  40. Mike

    Is this the new trick to getting TechCrunch coverage? Claim a Chinese DOS attack?

    Hey Mike, we’re being deluged by Chinese government hackers! Write about us! We think they are attacking us because we are discussing global warming among child sex slaves in Tibet.

  41. David Oxley

    @38 … that is why we must help India all we can, they are the only counter-balance to China unless somehow we merge the entire western world into 1. India is a democracy, I’d much rather live in an Indo-centric world than a Sino-centric world.

  42. Jay

    Question is, when a big company like CNN also faces the wrath of China (I am ok with them blocking the websites and allowing only 3-4 web pages available to chinese people) and gets DoS attacks, is anybody going to do anything about this? There is no UN style organization to provide justice.

  43. 113.com

    Sigh.. unfortunate :-|

    Actually, if slideshare uses amazon aws (do they? forgotton if it was slide or slideshare), wonder if amazon’s gonna bill for ddos traffic… 2.5GB/s for several hours would amount to what?..

    Could the TC editors ask amazon? In fact, it has been a question for a number of startups, of “unpredictable” charges…

    If would be nice if aws would also let the user set some cap on the monthly charge, wouldn’t it?..

    Nice to know.

  44. Igor The Troll

    Now that capitalist Russia under Putin are our Christendom brothern, time to rearm the Ruskies with some advance nuke technology, being that they are closer to China than America can ever get!

    Should we just call it preemptive? Or, Dead or Alive. ;-)

  45. someone

    Obviously the thing to do is get copies of these controversial files and start up healthy torrents of them.

    That’s the problem with censorship: you just make the censored item far more desirable.

  46. Igor The Troll

    @someone Very good point! This is an information war not a nuclear war!

  47. Afraid of the Dark

    2.5 gbps? so get a 4 gbps connection. problem solved.

    ha!

  48. marvel

    Where are thoses files so that we can copy them to GoogleDoc / slide.com /zoho , make an video version on youtube and see what happen ?
    Can China export it’s information control on the Internet ?

    Marvel

  49. Steven C

    love the video response feature.

  50. Dr. Bardou

    I think it was not only China attackers, it may be attacks from servers which are based on chinese data-centres. It may be american or european hackers, who use chinese servers too.

  51. Nikhil Narayanan

    What nonsense is happening?
    Really sad.

  52. Shunjie

    Yea might not be China 

  53. Webhosting Reality

    It seems that China is always the suspect. Where are the good boys in the Internet?

  54. Mike

    Look at the post by ‘Andy Wong’

    http://blog.slideshare.net/200.....os-attack/

    LOL

  55. James

    Man, what are these Chinese, 12 years old?

    Fucking babies. If they can’t take the heat, they need to stop trying to play with the big boys.

  56. TH

    It’s amazing that although China has almost 1/5 of the world’s population, everything that “China” of “the Chinese” do is seen as government-sanctioned and pre-planned activity, somehow motivated by their communist ideology. Cold war, anyone?

    DDOS-attacks, hacking etc. from the US or Western Europe, on the other hand, are always done by tiny groups of bad criminals, although when it’s the Americans, us Europeans think it’s the CIA, and when it’s the Europeans, the Americans think it’s the Russian/Balkan mafia.

    SlideShare is a great service that I use a lot, and it’s very principled of them to refuse any requests of censorship.

    I’m afraid that there’ll be more of this to come, as the international campaigns for civil liberties in China are partly drifting towards racist anti-China propaganda and angering many Chinese. It’s so easy to judge the whole country when you should actually criticise the political leadership. Many people forget that in their anti-Bush rants that have unfortunately turned into anti-Americanism.

  57. TP McKenna

    Incredibly slack reporting.

    “possibly linked to the Chinese government”

    The hackers can be possibly linked to ANYONE but in the absence of even an iota of evidence why allude to the Chinese government?

  58. James

    TH, have much experience with mainlainder Chinese? I have too much, unfortunately.

    The reason one can easily paint the majority of China with the same brush, is because there is incredible homogeneity. I’m not saying the sheeple in most Western countries are much better, but the Chinese make us look like paragons of independent thought by comparison.

  59. freeman

    what do you guys know about the real china?
    no investigation, no speaking.
    Misleaded by the fucking media, and know nothing about the truth,
    the most smart person is nothing than a stupid speaker.

  60. TH

    #58, I’ve never worked in China, but have with some Chinese and have many Chinese friends, both from mainland and HK. What I’ve seen is an amazing amount of pride about China and Chinese culture (not so much about the political system or the party, although most wouldn’t want to discuss this stuff as they don’t like the inevitable “conflicts” in the discussion that would ensue).

    Combine that pride with the sense of collectivism (that shouldn’t be confused with communism), sense of belonging and representing one’s family, village/town, city, area, country… and it’s easy to see why such broad generalisations and accusations are often more insulting than in the “individualistic” west. Here, it’s easier to mentally resign from any criticism and pass on the blame to the govt or some “other people” in the country, as we feel no connection with them.

    I’m not suggesting the Chinese government shouldn’t be criticised for what they’re doing in Tibet, or the infringements of free speech, net censorship or huge amounts of executions they carry out, or for instance the violations of human rights they’ve committed during the “clean-up” of Beijing in preparation for the Olympics. I’m just saying that not directing the message to where it should go will only lead to angering those in China who might otherwise agree and even want to pursue changes to stop those things from happening.

    My sweeping generalisation: You can’t force China to change.

  61. tutu

    If it was because of some slides bashing Beijing Olympics or anything about Tibet, I would have believed this story.

    But “described ways to fight corruption in China”? As if the corruption in China is a well-kept secret and the Chinese Government don’t want anybody know about it. FYI, they just sent the “Ex-Shanghai Party boss” to jail just days ago because of corruption:
    http://in.reuters.com/article/.....9120080422

    Corruption has become part of people’s everyday life in China and they talk about it all the time, online or offline. The Chinese Government goes after a website in the US due to some random slides about corruption? I don’t buy it.

  62. Carlton Northern

    I would bet that this cached page (slideshare is down right now) from Google is one of these presentations.

    http://64.233.167.104/search?q.....&gl=us

  63. Ecko

    I just can not understand.

    Who will attack such an unfamous site( at least in china) for such a stupid reason?

    The goverment? OMG.

  64. ohnopirates

    @56 your first paragraph hits the nail on the head.

    No offense, but this, and your other articles on “China” are the worst writing you do, period.

    1.8 billion or so people (counting non-hukou issued residents, you know China’s internal slave class that no one talks about) don’t only launch DDoS attacks at the behest of the government, amazingly enough, just like in the U.S., the actions of individuals are not always the actions of the government.

    Or, if they are, crap, the U.S. government just raped and murdered a woman in the park last night. The U.S. really needs to figure those problems out.

    “possibly linked” seriously? Hi Fox news.

  65. Good Guy

    DOS attacks are preventable and allowing for this type of attack to bring the entire site down a failing of the company’s IT.

    There are fairly inexpensive firewalls that can detect DOS attacks and automatically block IP ranges. An experienced admin could have also manually blocked the range to prevent the servers from going down.

    On the other hand, some controversy like this can shine few photons on a startup company that would otherwise be lost in obscurity via natural selection. This story could be interpreted as a cry for attention rather than help.

  66. Blog writer for dummies

    @Mark Hendrickson

    Hey, you really need to use your brain before you write something here. Don’t write it as you were still working for cnn.

    Who bothers attacking such a stupid useless little site from a government? Slideshare? Come on! The little site has zero political values whatsoever, not menitoning those small amount of content.

    What you are doing right now is to make up an excuse to promote slideshare by making their failures into a positive story, and use the chinese gov as the popular escape goat.

    I have a hardtime to understand how you can have such a stupid linkage, without any evidence to support… had been brain-washed by your ex-boss cnn?

  67. Anonymous

    I think ISPs should just ban IP addresses that are geographically linked to China and Russia, they don’t economically benefit us in any way but they are a nuisance.

  68. Anon

    Just to inform everyone here but when I read this article and the comments, the website was up already. I guess it is no longer down? Or is it just me?

  69. The Googlopoly Has Come

    “If I were a CIA operative I’d be a drunk staring at identical satellite photos all day wondering why our intelligence system keeps failing us.”

    Oooh… :-D LOL

    Anyway, yes, the Chinese Nationalist Fascists are showing their true colors yet again. Bastards!

  70. Amercian launched massive attacks on China

    April 23 2008, Americans launched a massive DOI (denial of image) attacks on Chinese government from a local popular blog techcrunch.com using the news of the service outage of a local startup photo web site Slideshare. The blog happens to be owned and run by Americans.

    We don’t know who is truly behind these attackers but it suggests that the attackers are supported by Bush administration and U.S. congress. They are funded by U.S. government money directly such as student loans and tax cuts.

  71. American attack was a huge success!

    The techcrunch DOI (denial of image) attack on China was a big success.

    The Chinese government was completely “defaced” (massive face outage) and is no longer able to face its programmers.

    Chinese gov accused Bush, Nancy Pelosi, Michael Arrington masterminded this attack but they denied their connections with the attacker Mark Hendrickson.

  72. Rob

    “Once again doing nothing, the company got a very demanding, and almost threatening, call to its Indian office on Wednesday, one that insisted that the company grant access to an account.”

    This run-on sentence doesn’t scan. What company got very demanding? The demanding company has an Indian office?

    Are you trying to say that “the messages got more demanding, almost threatning”?

  73. Steven Roussey

    A nice side effect of being on the Chinese blocked site/IP list, is that you don’t have to worry about this stuff. Of course, the Chinese government is actively allowing it to happen, so I guess they can also remove a block to allow an attack…

  74. Charles Frith

    I’m in Beijing right now and I have full access to Slideshare. SARFT the people who censor all media, intermittently block my blogging domain Blogspot and that is the method they would use for Slideshare.

    Its more than likely an individual(s) who hasn’t had much exposure to the pluralism that Western democracies foster.

    Criticising China is poorly thought out thinking. The last thing anyone would want to see is the Balkanisation of the country because it suddenly gave the freedoms that we often take for granted. That would lead to a lot of death and misery (and massive economic migration) and frankly if that doesn’t bother people, then that may well be those peoples motive in criticizing China.

    Not the freedoms you espouse.

  75. Inetgate

    It seems that SlideShare is still something wrong.
    I can’t login to site and I get 500 error.

  76. Thomas

    China sucks.. it’s a disgrace to humanity. I think it’s high time US attacked this monster and shut it down forever.

  77. Thomas

    “I think ISPs should just ban IP addresses that are geographically linked to China and Russia, they don’t economically benefit us in any way but they are a nuisance.” - I completely agree..