Post by markbyron on May 15, 2013 10:30:59 GMT
I'm reposting two older messages into one and effectively bumping this always important security information. Please do not reply with any specific incidents or allegations (past or present)- please use PM only for reporting incidents.
Response to DDOS Attacks:
If you receive a threat a denial-of-service (DDOS) attack and/or your Internet connection is disrupted due to a DDOS attack, this linked article on the XBOX support website should be helpful in determining if you're under attack and what to do about it. With the exception of contacting XBOX support, take note of how to detect a DDOS attack and follow the recommendations to contact your Internet Service Provider.
support.xbox.com/en-US/xbox-one/networking/dos-attacks-faq
If there is confirmed evidence that a player on our server (or ex-player) has engaged in DDOS, they will be banned and their IP address information will be available to those who have experienced DDOS attacks. The IP information can be passed to the Internet Service Provider and Law Enforcement authorities. For confirmed threats of DDOS without evidence of actual DDOS, sanctions including banning will be undertaken.
Even if somebody is hiding their actual IP with a VPN service such as Cyberghost or Hotspot Shield, those companies will readily disclose the true offender IP if their services are being used for criminal activities, esp. in DDOS cases. In fact, a persistent griefer on our server has been using Cyberghost while crashing our server.
All that said, just like XBOX, it is not within the capability of the Total Freedom server to actually stop individual DDOS attacks; all we can do is ban those who threaten it, and possibly identify their IP address to the victims.
Along with DDOS threats, a person might threaten to DOX (expose your personal information on the Internet) or make other criminal threats such as bodily harm. Most of these threats are infantile outbursts made in anger but we will not tolerate those who do that, and they will be temporarily or permanently banned according to our rules. Most cases of DOX aren't really a DOX - it's information that YOU published on the web and the attacker has simply googled it and re-publishes it on some site like pastebin. It's just an empty attack to make you cower in fear. If you don't want to protect your personal information, DO NOT publish it in the first place.
If you believe the threats are real or you have been victimized already (e.g. DDOS), the best we can do is provide the possible IP of the offender and you will need to contact your local law enforcement agency if you so desire but just like commercial providers when they get attacked, they usually end up just waiting it out.
Block Skype IP Resolvers:
f you're a regular user of Skype, there are various websites that resolve any Skype user's IP address by inputting the Skype username. Of course once somebody has your IP, there's a risk of being subjected to DDOS attacks.
When using Minecraft, your IP is certainly exposed but knowing that, high security admin types use a VPN to hide their IP but they might not use the VPN for Skype, and a rogue could and will take advantage.
If you want to ensure your real IP is not exposed when using Skype, it's best to use a VPN or check this out:
community.skype.com/t5/General-Discussion/Block-Skype-Resolver-Hide-Your-Ip/m-p/1288246
Response to DDOS Attacks:
If you receive a threat a denial-of-service (DDOS) attack and/or your Internet connection is disrupted due to a DDOS attack, this linked article on the XBOX support website should be helpful in determining if you're under attack and what to do about it. With the exception of contacting XBOX support, take note of how to detect a DDOS attack and follow the recommendations to contact your Internet Service Provider.
support.xbox.com/en-US/xbox-one/networking/dos-attacks-faq
If there is confirmed evidence that a player on our server (or ex-player) has engaged in DDOS, they will be banned and their IP address information will be available to those who have experienced DDOS attacks. The IP information can be passed to the Internet Service Provider and Law Enforcement authorities. For confirmed threats of DDOS without evidence of actual DDOS, sanctions including banning will be undertaken.
Even if somebody is hiding their actual IP with a VPN service such as Cyberghost or Hotspot Shield, those companies will readily disclose the true offender IP if their services are being used for criminal activities, esp. in DDOS cases. In fact, a persistent griefer on our server has been using Cyberghost while crashing our server.
All that said, just like XBOX, it is not within the capability of the Total Freedom server to actually stop individual DDOS attacks; all we can do is ban those who threaten it, and possibly identify their IP address to the victims.
Along with DDOS threats, a person might threaten to DOX (expose your personal information on the Internet) or make other criminal threats such as bodily harm. Most of these threats are infantile outbursts made in anger but we will not tolerate those who do that, and they will be temporarily or permanently banned according to our rules. Most cases of DOX aren't really a DOX - it's information that YOU published on the web and the attacker has simply googled it and re-publishes it on some site like pastebin. It's just an empty attack to make you cower in fear. If you don't want to protect your personal information, DO NOT publish it in the first place.
If you believe the threats are real or you have been victimized already (e.g. DDOS), the best we can do is provide the possible IP of the offender and you will need to contact your local law enforcement agency if you so desire but just like commercial providers when they get attacked, they usually end up just waiting it out.
Block Skype IP Resolvers:
f you're a regular user of Skype, there are various websites that resolve any Skype user's IP address by inputting the Skype username. Of course once somebody has your IP, there's a risk of being subjected to DDOS attacks.
When using Minecraft, your IP is certainly exposed but knowing that, high security admin types use a VPN to hide their IP but they might not use the VPN for Skype, and a rogue could and will take advantage.
If you want to ensure your real IP is not exposed when using Skype, it's best to use a VPN or check this out:
community.skype.com/t5/General-Discussion/Block-Skype-Resolver-Hide-Your-Ip/m-p/1288246