Our site, (like the other several thousand affected) is actually up and running. The reason nobody can see it is that this worm virus is requesting access thousands of times per minute. With all these socket requests, the servers get overloaded, then access is denied. Everything that can be done is being done. I am being told that efforts and resources must first be assigned to critical government sites.
As soon as we can, we will extend any affected auctions. We thank you for your patience,
Dan at Jackpot!
Here's the story straight from CNN
Electronic attack slows InternetExperts: 'SQL Slammer' worm doesn't cause serious damage
Saturday, January 25, 2003 Posted: 3:03 PM EST (2003 GMT)
WASHINGTON (CNN) -- A fast-moving computer worm snarled business and government computers Saturday, slowing some corporate systems to the point of inaccessibility, but Internet security experts said it does not appear to have done any serious damage.
The worm, dubbed "SQL Slammer," attacked via a vulnerability discovered six months ago on Microsoft servers, according to Oliver Friedrichs, a senior manager with Internet security firm Symantec. Microsoft offered a free patch at the time to fix the trouble spot, but not all users of the server installed the patch.
Friedrichs said the SQL worm "breaks into the server and tries to spread."
"It really generates a lot of network traffic," he said. "It's really just going to slow down Internet performance."
The White House was notified about the attack immediately after its discovery early Saturday, said Tiffany Olson, a spokeswoman for the President's Critical Infrastructure Protection Board.
The FBI's National Infrastructure Protection Center is investigating, she said.
Alan Paller of the SANS Institute, a training organization for technologists who try to protect computer systems and networks, said the SQL worm did not appear to be affecting files stored on computers. Instead, he said, it was causing trouble by replicating quickly and sending queries across computer lines for more vulnerable computers.
"It's not a major risk. It's not either of the two things that are terribly damaging," Paller said. "One is hurting people's machines, and one is knocking things [off-line]."
Several companies -- including Bank of America and Continental Airlines -- reported widespread computer problems Saturday, but it could not ascertained whether the worm was to blame.
A computer worm is a program that reproduces by copying itself onto other machines, which then seek out other vulnerable computers.
Worms of this nature are often the precursor to a different type of attack called "distributed denial of service." In that case, computers that have been infected with a worm or other program are directed to send a flood of information to a specific location on the Internet and force it off-line.
"This [Saturday's worm] is the recruitment of soldiers, not telling the soldiers where to aim their guns," Paller said.
He described Saturday's activity as a "worm with collateral damage."
If the vulnerability in SQL is not patched, then Paller said there's a possibility a future denial of service attack could harness the "zombie" machines created Saturday.
Friedrichs said Saturday's worm was similar to the 2001 "Code Red" worm, which attacked unpatched Microsoft IIS servers and defaced some Web pages with the message "Welcome to http://www.worm.com! Hacked By Chinese!"
Code Red eventually hit more than 700,000 computers and spread too quickly for investigators to trace its origin.
So far, SQL Slammer has not disturbed any Web pages or other files.
As far as the origin of Saturday's worm, Paller said it will be difficult to trace it via technological means. In many cases, a worm's creator brags about these activities online and is caught that way.
Paller and Olson said Internet service providers and other security organizations had helped slow the worm's spread.
"It could have been horrendous," Olson said.
CNN Technology Correspondent Daniel Sieberg and White House Correspondent Dana Bash contributed to this report.
|