[TheDopp]

I know I'm probably going to take some flak for trying to fact check something that's speaking out against a folk devil, but something about this really irked me and I have a few thoughts I would like to clear up.

Please note that I'm not being hostile and I'm not questioning the legitimacy of anything else in the post Nor am I attempting to defend any of the accused, the DDoS part just really seems fishy to me, and it strongly begs clarification as you're publicly accusing somebody of a federal crime.

The first thing about this is that most modern ISP's have a safe-guards such as rate-limiting and delayed binding, which make directly attacking a client within that ISP extremely difficult.

A second stage of security comes from your router. With proper ACLs (such as port filtering) a DDoS attack is nearly impossible unless you have a broadcast security fault or home server that they somehow knew about.

The third one pertains to the second one. Unless you had something akin to remote management enabled, and they had the exact port that was setup on, they would have no way to directly attack your router.

It just seems odd that somebody could perform a brute-force packet flood through a modern ISP upon a person who has no feasible target for a DoS to hit. (This comes with the understanding that you can't just send somebody billions of packets and crash their router, there has to be something receiving this packets, processing them, and authenticating them or else they would be filtered by TCP splicing)

*thread derail*
It's been ages since I did anything truly indepth network related, and the Glendfiddich is kicked in, but don't most home routers (assuming it's like a WRT54G or something just common) have a TCP connection limit? I'm assuming most ISP's block TCP ACK/SYN attacks, but what if it's on an established port (e.g. TF2, though I cant remember if the TCP ports are used for the client beyond first connect) or something common (e.g. torrents, faceyspaces, whatever the kids these days are using)?