AO FCC OnlineComments Emails 201805 (1) Redacted (original) (raw)

0% found this document useful (0 votes)

18K views

The FCC CIO statement says the FCC comment system experienced DDoS attacks from external actors that made it difficult for legitimate commenters to access the system and file comments. The a…

Full description

AO FCC OnlineComments Emails 201805 (1) Redacted

0% found this document useful (0 votes)

18K views

1,034 pages

The FCC CIO statement says the FCC comment system experienced DDoS attacks from external actors that made it difficult for legitimate commenters to access the system and file comments. The attacks tied up servers but the system remained operational. The FCC is working with partners to address the situation.

Original Description:

FCC emails (redacted)

© © All Rights Reserved

Available Formats

PDF, TXT or read online from Scribd

Share this document

Did you find this document useful?

Is this content inappropriate?

0% found this document useful (0 votes)

18K views1,034 pages

AO FCC OnlineComments Emails 201805 (1) Redacted

The FCC CIO statement says the FCC comment system experienced DDoS attacks from external actors that made it difficult for legitimate commenters to access the system and file comments. The a…

Full description

From:

Chris Bing

To:

David Bray

Cc:

Mark Wigfield

; Neil Grace

Subject:

Re: [FEDSCOOP] - FCC experiences DDoS?

Date:

Monday, May 8, 2017 4:29:50 PM

Thanks David. No problem. Just sent similar questions separately to the general press email. On Mon, May 8, 2017 at 4:24 PM, David Bray <David.Bray@fcc.gov> wrote:

Hi Chris,Happy to help – that said, can you route through OMR as they have some answers alreadyavailable and then we can go from there? Many thanks.

From:

Chris Bing [mailto:chris.bing@fedscoop.com]

Sent:

Monday, May 08, 2017 4:24 PM

To:

David Bray <David.Bray@fcc.gov>

Subject:

[FEDSCOOP] - FCC experiences DDoS?

Hi David,My name is Chris Bing, I am a cybersecurity reporter with FedScoop. I am interested in thisstatement: https://apps.fcc.gov/edocs\_public/attachmatch/DOC-344764A1.pdf My colleague Billy Mitchell sent me your contact information. I am curious about thisDDoS story. I have a few questions -- also available by phone: 1.) Was the DDoS limited to only the comment section of the FCC's website? Were other services affected? Do you have any idea for why this occurred or who did this attack? 2.) How were you able to confirm this incident was in fact a DDoS rather than pure internettraffic? How do you define a DDoS attack -- can you provide any additional technical detailslike the amount of traffic? For long did the disruption last?

--Christopher BingCybersecurity Reporter

Scoop News Group

FedScoop//StateScoop//EdScoop//CyberScoop E: Chris.Bing@fedscoop.comMobile P:

Office P: 609-747-2321-- Christopher BingCybersecurity Reporter

Scoop News Group

FedScoop//StateScoop//EdScoop//CyberScoop E: Chris.Bing@fedscoop.comMobile P:

Office P: 609-747-2321

From:

David Bray

To:

Kartikeya Iyer

Subject:

Re: About the CIO statement on the FCC being the victims of an alleged DDoS attack

Date:

Tuesday, May 9, 2017 6:00:33 AM

Thank you for your note and it would be best if you contact the Office of Media Relations. On May 9, 2017, at 00:24, Kartikeya Iyer wrote:The Federal Communications Commission (FCC) just issued a press release(https://apps.fcc.gov/edocs\_public/attachmatch/DOC-344764A1.pdf ) claiming, “Beginning onSunday night at midnight, our analysis reveals that the FCC was subject to multiple distributeddenial-of-service attacks (DDoS).”The FCC is saying that the site hosting their comment system was attacked at the exact sametime comments would have started flooding in from John Oliver’s viral "Last Week Tonight"segment about net neutrality. The media widely reported that the surge in comments crashedthe FCC’s site.The FCC’s statement today raises two concerns: - The FCC is being intentionally misleading, and trying to claim that the surge in trafficfrom large numbers of people attempting to access their site through John Oliver’sGoFCCYourself.com redirect amounts to a “DDoS” attack, to let themselves off the hook for essentially silencing large numbers of people by not having a properly functioning site toreceive comments from the public about an important issue, or—worst case—is preparing a bogus legal argument that somehow John Oliver’s show itself was the DDoS attack. - Someone actually did DDoS the FCC’s site at the exact same time as John Oliver’ssegment, in order to actively prevent people from being able to comment in support of keepingthe Title II net neutrality rules many of us fought for in 2015.Given the current FCC chairman Ajit Pai’s open hostility ( https://www.theguardian.com/technology/2017/apr/26/trump-overturn-net-neutrality-rules-resistance ) towards real netneutrality (notwithstanding the blatant sham that is the laughably-titled "Restoring InternetFreedom"), and the telecom industry’s long history of astroturfing (https://news.vice.com/article/cable-companies-are-astroturfing-fake-consumer-support-to-end-net-neutrality ) and paying shady organizations ( https://motherboard.vice.com/en\_us/article/shady-conservative-group-is-flooding-the-fcc-with-anti-net-neutrality-comments) to influence the FCC, either of these scenarios should be concerning for anyone who caresabout government transparency, free speech, and the future of the Internet. To validate the claims of being "DDoS"ed, The FCC should release original untamperedserver logs to qualified independent & unaffiliated security researchers. Not doing this willmerely lend credence and substantiation to claims that the FCC is being less-than-truthfulabout this matter, and in fact is actively preventing members of the public from expressingand/or formally registering their views on the very important matter of a free and openInternet.Thank you,

Reward Your Curiosity

Everything you want to read.

Anytime. Anywhere. Any device.

No Commitment. Cancel anytime.