British NHS DDOS attacks itself via email sent to 1.2M staff(telegraph.co.uk)

26 pointsby stuartbman10 anni fa12 comments

telegraph.co.uk

British NHS DDOS attacks itself via email sent to 1.2M staff

http://www.telegraph.co.uk/news/2016/11/14/nhs-it-blunder-sees-system-clogged-after-email-sent-to-12-millio/

8 comments

Reminds me of the "Bedlam DL3" story from Microsoft [0].

[0] https://blogs.technet.microsoft.com/exchange/2004/04/08/me-t...

0xmohit10 anni fa

Somewhat odd that in setups this large emails to all are unregulated. I'd expect those to go through some "approval" channel.

eggie510 anni fa

This happened at Qualcomm once. Some IT email was sent out to most of the corp and then people's vacation/out-of-office auto-reply-to-all propagated it more. Then people would send reply-all messages like "remove me from this list!" it went on for most of the day.

dudus10 anni fa

Also happened at IBM when I worked there. A guy named Armando changed his phone and manage to send a notice to everyone in the company using a maillist. People didn't know about the maillist and started to ask to be removed, turns out it was not possible... It took weeks to solve and everyone at IBM pretty much lost access to email during the period due to the overload. Even worse, at the time a lot of internal systems at IBM were based in Lotus Notes that is a weird framework email client mashup and those systems were also affected.

This happened in 2007

astrodust10 anni fa

Can anyone explain why people leave their servers configured to allow arbitrarily long To: lists? Any large organization is just one mistake away from a Reply-All apocalypse.

bcraven10 anni fa

This may be a mailing list, rather than a simple 'Reply-All' thing (and the media have misunderstood). The reply box will be a single address if that's the case.

astrodust10 anni fa

If so, there's ways of limiting who can address that address and in so doing spam the entire company.

Shanea9310 anni fa

At the very least, the operations accounts, security, newsletters and Simon Stevens himself should have the ability to send a network-wide email - outside of that there's no good reason for Johnny intern to be sending an email to that many people.

mhays10 anni fa

This is not a ddos attack. More like ddos mistake or accident.

ljf10 anni fa

Dupe: https://news.ycombinator.com/item?id=12950830

rcarmo10 anni fa

This is reminiscent of at least one IT Crowd episode (I forget the title), and so typical...

johansch10 anni fa

Two stories about this topic on the front-page right now. Merge them?