Amazon Goes Black Hat, Hires Patty Hewes to Defend Attacks
Amazon's EC2 service is part of AWS. It allows customer with an Amazon account to create servers in the cloud. It also has, as Amazon knows, a huge potential for abuse, if Amazon allows its customers to continue to attack other servers from the Amazon IP addresses.
The executive summary is this:
- Many people running VoIP servers have experienced severa attacks on resources and break-in attempts.
- The people running the attacked servers are techies and they know how to report the incidents in a precise manner
- They have all attempted to contact Amazon's abuse team with mixed success
- Amazon has told some people they will simply introduce the two parties and let them work it out
- Amazon has told others that they do not feel responsible for the actions of their clients
Long story short, Amazon's attitude is unacceptable and their image as a good company with the smiling Jeff Bezos is already severaly tarnished. Amazon needs to realize a few thing:
- All geeks are major consumers of books, music, electronics - HELLO? I'm writing them today about how they will lose my business if they don't act on these issues
- Amazon has detailed customer information on the abusing instances. If an ISP can identify people to sue for RIAA from identical information (originating IP address and exact time from logs) why can't Amazon shut down these customers
- Technology is fast, abuse like this could be shut down very quickly if they wanted to cooperate
- These attacks are, unlike spam, not just annoying, they are costing innocent businesses money, time and possibly customer loss.
- Customers of the attacked servers are potentially losing the phone lines and losing business
Amazon EC2 is a commercial, revenue producing offer, not an open source project. Amazon must put adequate resources into the prevention and suppression of abuse. Amazon needs to set the standard for potential abuse of cloud services so that their competition too will be forced to use prevention and suppression.
BACKGROUND: REFERENCE MATERIAL
Voip Tech Chat: First the abuse form didn't work, then the snow job from Amazon's PR, Kay Kinton.
Building the Net : This says it all:
“I’m sorry, you have reached a company that doesn’t care that we are attacking you…”
VOIPSEC (Dan York) : "...multiple reports out there of SIP attacks emanating from servers hosted on Amazon's EC2 service"
Digium Asterisk Mailining List Archive: "being hit with about 200 requests per second"
If Amazon can't correct this situation it's bad news for them, bad news for VoIP and bad news for the cloud.