this post was submitted on 23 Jun 2025
1094 points (98.6% liked)

Technology

71843 readers
4301 users here now

This is a most excellent place for technology news and articles.

Our Rules

  1. Follow the lemmy.world rules.
  2. Only tech related news or articles.
  3. Be excellent to each other!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
  9. Check for duplicates before posting, duplicates may be removed
  10. Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago
MODERATORS
L3s@lemmy.world
enu@lemmy.world
technopagan@lemmy.world
L4s@lemmy.world
L3s@hackingne.ws
L4s@hackingne.ws
1094
Trump social media site brought down by Iran hackers (htxt.co.za)
submitted 1 day ago by Pro@programming.dev to c/technology@lemmy.world
151 comments fedilink hide all child comments
 
  • Hours after the US airstrike on Iranian territory, Iranian-backed hackers took down US President Donald Trump’s social media platform.
  • Users were struggling to access Truth Social in the early morning following the alleged hack.
  • As the US continues to insert itself into the ongoing Iran-Israel conflict, the US government believes more cyberattacks could happen.
you are viewing a single comment's thread
view the rest of the comments
[–] theherk@lemmy.world 34 points 1 day ago (1 children)

Disabling network security and edge devices to change the properties of ingress can absolutely be a component of an attack plan.

Just like overwhelming a postal sorting center could prevent a parcel containing updated documentation from reaching the receiver needing that information.

[–] Kazumara@discuss.tchncs.de 2 points 5 hours ago (1 children)

I haven't heard of a firewall failing open when overwhelmed yet. Usually quite the opposite, a flood disables access to more than just the targeted device, when the state table overflows.

But maybe there is a different mechanism I'm not aware of. How would the DDoS change the properties of ingress?

[–] theherk@lemmy.world 2 points 4 hours ago

By denying access to resources in a primary region, one might force traffic to an alternate infrastructure with a different configuration. Or maybe by overwhelming hosts that distribute BGP configurations. By denying access to resources, sometimes you can be routed to resources with different security postures or different monitoring and alerting, thus not raising alarms. But these are just contrived examples.

Compromising devices is a wide field with many different tools and ideas, some of which are a bit off the wall and nearly all unexpected, necessarily.