DDoS attacks harmless: Anonymous user

DDoS attacks harmless: Anonymous user

Summary: Distributed denial-of-service (DDoS) attacks are harmless, according to Newcastle man Matthew George, who was charged for his role in the Anonymous group's bid to crash federal government websites last year.


Distributed denial-of-service (DDoS) attacks are harmless, according to Newcastle man Matthew George, who was charged for his role in the Anonymous group's bid to crash federal government websites last year.

Operation Titstorm

The Anonymous DDoS campaign poster (Screenshot by Ben Grubb/ZDNet Australia)

George was one of possibly hundreds of Australians under the Anonymous banner who participated in DDoS protest attacks against the Australian Parliament House and Department of Broadband, Communications and the Digital Economy websites. Melbourne resident Steve Slayo was the only other user charged for participating in the attacks.

For his role, George faced 10 years imprisonment for "causing unauthorised impairment of electronic communication to or from a Commonwealth computer", but received a $550 fine with a recorded conviction. Federal police raided George's home in June last year and he faced court in October.

Speaking to ZDNet Australia, George rebuked comments by the Australian Federal Police that sentences for DDoS attacks are too weak, instead saying that the act does not cause permanent damage.

"DDoS service attacks are harmless. Most hosting companies have DDoS attack precautions in place and there is no long-term damage caused to any servers or websites," George said.

"It is far different to hacking in and defacing or rooting a server [because] when the DDoS attack is stopped everything goes back to normal as if nothing had ever happened."

"You can't compare DDoS attacks to child porn, hacking or writing a virus — it's like comparing apples with oranges.

"As far as saying that the sentence was too weak, maybe they should pass that on to the district public prosecutors as [it] agreed that the sentence was fair in my case."

AFP High Tech Collection and Capability manager Grant Edwards told a security conference this month that the courts are unwilling to issue tougher sentences for DDoS attacks because "they don't understand the threat".

Edwards cited the penalties handed to George and Slayo, who received a good behaviour order, as examples of soft sentences.

George said the criminal conviction may make it harder for him to gain employment opportunities.

He said he believes most participants in the DDoS attacks were from Australia. The AFP has refused to confirm if it is investigating other users for their role in the attacks. It had not received requests by the likes of MasterCard and Visa, which were hit with DDoS attacks for blocking funds to whistleblower website Wikileaks.

A ZDNet global poll found that readers do not support DDoS attacks on companies that cut off Wikileaks.

Topics: Security, Government AU

Darren Pauli

About Darren Pauli

Darren Pauli has been writing about technology for almost five years, he covers a gamut of news with a special focus on security, keeping readers informed about the world of cyber criminals and the safety measures needed to thwart them.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.


Log in or register to join the discussion
  • A DDoS is like walking out in to the middle of a busy intersection and blocking traffic... if you get enough people you can cause some serious disruption, but that is all it is.

    You wouldn't get 10 years in jail for simply causing a traffic jam, without any physical damage done, so how is a DDoS any different?
    • Agreed :)
    • Obviously someone who has nothing better to do than sit in a traffic jam created by a selfish misogynist for a joke! At least standing in the road, you get seen and risk getting run over.

      A DDoS can cost a business thousands or even millions of dollars in lost income, plus the time and money to divert resources to handling the problem rather than doing their normal duties. The aftermath will cost a bundle as well.

      A DDoS is like deliberately giving someone the flu. I'm sure the recipient would think it was a wonderful idea. NOT!
  • You like car analogies, I suspect you like slashdot :) - but to carry it further, if the traffic jam is serious enough, it might take hours to clear. Take the number of people involved, multiply by hourly rate by duration to find the cost of causing the jam. So there's economic harm.
  • So if you breaks fail, and your truck 1/2 falls off say the monney monnet bridge (again), what would happen?