I was emailed the ArsTechnical artical a little while ago, and it is of course disturbing. I need to do a little checking around. Last month, I was billed for 160 gigabytes of data transfer. That’s a lot, but OTOH, it ‘s a drop in the bucket in the kind of DOS attack they’re talking about–not sure it fits the profile.

It’s pretty scary to contemplate that kind of attack on the very big discussion site I’m building, because it’ll be automatically scaleable to handle the crowds. Every time one server maxes out, another will be fired up automatically. To a virus establishing a beachhead for a botnet, that’s an all-you-can-eat buffet! OTOH, because servers are created from a prerecorded image of a server, each fresh one won’t be infected, firewalling the spread. You win some, you lose some; computer security is like that.