Webware

People flocked to Google Wednesday evening to figure out what was happening with the UltraDNS service, which suffered a DDoS attack at the height of the last-minute shopping season.

(Credit: Screenshot by Tom Krazit/CNET)

An attack directed at the DNS provider for some of the Internet's larger e-commerce companies--including Amazon, Wal-Mart, and Expedia--took several Internet shopping sites offline Wednesday evening, two days before Christmas.

Neustar, the company that provides DNS services under the UltraDNS brand name, confirmed an attack took place Wednesday afternoon, taking out sites or rendering them extremely sluggish for about an hour. A representative who answered the customer support line said the attacks were directed against Neustar facilities in Palo Alto and San Jose, Calif., and Allen Goldberg, vice president of corporate communications for Neustar, confirmed that at about 4:45 p.m. PST, "our alarms went off."

Goldberg said the company received a disproportionately high number of queries coming into the system, and analyzed it as an attack. Neustar deployed "a mitigation response" within minutes of the attack, he said, and brought matters under control within an hour. The response limited the problems to Northern California, he said.

In addition to the high-profile sites, dozens of smaller sites that rely upon Amazon for Web-hosting services were also taken down by the attack. Amazon's S3 and EC2 services were affected by the problems, according to Jeff Barr, Amazon's lead Web Evangelist, who retweeted a report to that effect without clarification and confirmed it in later tweets.

For a brief period Wednesday evening, "ultradns" was the top search term on Google, likely as frantic technicians at Web sites attempted to figure out what was going on with their sites.

Web sites need DNS providers to translate the character-based URLs that people can remember to the IP addresses that Web sites actually use to list themselves on the Internet. When a DNS provider is overwhelmed with malicious requests for IP addresses, the system can overload and prevent legitimate users from reaching their destinations.

Amazon's Web Services Health Dashboard declared an all-clear around 6:40 p.m. PST, saying that DNS resolution had returned to normal. Amazon and several other big sites seemed to recover around 5:40 p.m., but some other sites continued to report problems until around 6 p.m.

Needless to say, the timing of such an outage could not have been much worse, as holiday procrastinators rushed to make sure they could get one-day shipping for gifts to be delivered before Christmas Day on Friday.

Wolf Austad, a CNET reader, wrote in around 5:00 p.m. PST Wednesday to report that a last-minute gift purchase for his wife from Amazon.com had gone awry. He later reported that his transaction was stored in Amazon.com's history once he was able to get back into the site. However, "now I need to explain to my wife why she is getting her gift on the 26th," he wrote in an e-mail.

UltraDNS suffered a similar attack earlier this year, which took out Amazon, Salesforce.com, and other sites. Goldberg described Wednesday's attack as smaller than that one, in that it affected fewer customers.

However, Amazon is no small customer. Goldberg declined to comment on specific customers affected by the outage, and said Neustar had not yet determined the source of the attack.

One expert thought the attack might have been more widespread.

"This was wider than just UltraDNS," said Bill Woodcock, research director at Packet Clearing House, which operates domain name servers and supports Internet exchange points around the globe.

"It's difficult to tell at this point how much is a DDoS attack and how much is collateral damage from the attack that is being felt in other ways," like a domino effect, he said. "There were routing problems at some major European exchanges at the same time that caused major Internet service providers' routers to encounter a higher load and pass fewer packets."

CNET's Elinor Mills contributed to this report.

Editor's note: This post was continuously updated as this story developed. For a more complete account of what happened, see our followup story here.

Update: A customer support representative for NeuStar, the company that provides the UltraDNS service, confirms the outage was the result of a DDoS (distributed denial of service) attack. More details below.

Procrastinators, beware: Amazon.com and a host of Internet shopping sites are having trouble Wednesday evening.

Two days before Christmas is likely not the best time for Amazon to go down, but at some point around 5 p.m. PST Wednesday evening, Amazon was loading extremely slowly. One CNET reader wrote in to say his pending transaction failed just as he attempted to complete it, and the site was extremely sluggish as the sun set on the West Coast Wednesday.

Twitter users of Amazon's S3 service for Web hosting reported outages as well, and customers of Salesforce.com and Walmart.com were also reporting problems on Twitter.

We'll update as we learn more. If you can't (or can) access Amazon from your location, please let us know in the comments.

Updated 5:35 p.m. PST: It appears the problem may be larger than Amazon. Reports began to immediately circulate that UltraDNS, the DNS provider for several West Coast Internet companies, was having serious problems. In addition to Amazon, Salesforce.com, and Walmart.com, problems were also reported with Expedia.com.

Rusty Hodge, general manager and program director at Internet radio station SomaFM, tweeted that UltraDNS simply went down, taking down customers of Amazon's S3 and EC2 services as well as Amazon.com itself. Jeff Barr, lead Web services evangelist at Amazon.com, retweeted Hodge's statement without comment.

In perhaps a related problem, the Internet Health Report shows severe latency and packet loss on a connection between Qwest and Savvis.

Updated 5:45 p.m. PST: UltraDNS representatives could not be reached for comment. Amazon.com, Walmart.com, and Salesforce.com all seemed to come back to life around 5:40 p.m. PST, but some problems were still being reported.

Amazon representatives did not immediately return a call seeking comment.

Updated 5:53 p.m. PST: Amazon's AWS Service Health Dashboard reports "DNS resolution errors" affecting Amazon Simple Storage Service customers for Northern California and U.S. Standard.

Updated 6:10 p.m. PST: A customer support representative for Neustar, the company that provides the UltraDNS service to several e-commerce sites, confirmed that its network was hit by a DDOS attack targeting their California network in Palo Alto and San Jose.

As of 6:15 p.m. PST, things seemed back to normal. The Internet Health Report also showed an improvement on the Qwest-Savvis line noted earlier, and Amazon's Web Services dashboard confirmed that while there were problems resolving DNS requests, "the service is successfully responding to requests."

Twitter is usually the subject of steamy acquisition rumors, but chose perhaps the deadest afternoon of the business year to announce that it has made an acquisition of its own.

Twitter has bought Mixer Labs, the company that created the GeoAPI location service for developers building application atop Twitter. Evan Williams, CEO of Twitter, announced the acquisition on the company's blog, saying "when current location is added to tweets, new and valuable services emerge--everything from breaking news to finding friends or local businesses can be dramatically enhanced."

Financial terms of the deal were not disclosed, but it would appear Twitter is putting some of that money it now gets from Google and Microsoft to work. Elad Gil, the co-founder and CEO of Mixer Labs, is a veteran of Google and McKinsey, saying on his company bio that he co-founded Google's Mobile team. Seven employees are listed on Mixer Labs' "About" page, but that might not be an exhaustive list.

Twitter acquired Summize in July 2008, but the company has made few acquisitions, instead fending off perpetual rumors that Google, Microsoft, or another tech heavyweight is poised to snap up the company. Geo-location is definitely one of the hotter segments among the social-media butterflies, with companies like Foursquare and Gowalla drawing significant attention.

The Federal Trade Commission has asked Google to provide more information about its pending acquisition of AdMob before giving that deal final approval.

Google disclosed the "second request" in a blog post Wednesday afternoon, saying "while this means we won't be closing right away, we're confident that the FTC will conclude that the rapidly growing mobile advertising space will remain highly competitive after this deal closes. And we'll be working closely and cooperatively with them as they continue their review."

When Google first disclosed plans in early November to acquire AdMob, a leading provider of mobile advertising services, for $750 million, it said that it expected the federal government to take a closer look at the deal. Google even prepared a special Web page for the media and regulators explaining why it believed the deal did not pose any competitive threats, which is becoming standard practice at Google as it deals with increasing scrutiny from the government.

However, the second request could push back Google's initial expectation that the deal could close "in the next several months," although that's a statement with an awful lot of wiggle room. Google is also facing a delay with its proposed acquisition of On2 Technologies, which seems to be having trouble gaining the necessary number of shareholder votes in favor of the deal.

You will, no doubt, be plagued this holiday season by real-time conversations from real-time annoyances who claim to be members of your family. You will, therefore, be tempted to indulge in some excessive real-time drinking that might, just might, affect your sense of, well, the real time, the real place, even the real country you are inhabiting.

However, you will, I hope, be delighted that some very enterprising people have considered your plight and decided to offer you the latest hangover cures in real time. All you need to do is to have your smartest phone about your person at all real times and refer to the updates at Twitter.com/hangover_cure.

Twitter can save you, sir.

(Credit: CC Craig M Dennis/Flickr)

There, you will find contributions from, no doubt, hardened drinkers, hardened family therapists or, who knows, maybe hardened altruistic specimens who would like you to hurt less, party more, and not let your children see you looking like the inside of a bull's nostril after a stampede.

The Twitter page, sponsored by video-on-demand provider Blinkbox Entertainment, (yes, it's releasing "The Hangover," get it?), will offer you such gems as: "Try whipping up a Carrot Comfort (200g carrots, 1 apple, 1cm fresh root ginger & ice) & let us know."

All right, some of the suggestions might walk the thin line between holistic and horrific. But who could really fault the dedication and spirit of Christmas engendered by a suggestion such as: "Try the Honey Bun: Half a ripe banana, 1 teaspoon clear honey, 2 teaspoons natural yogurt & water; then tweet us the results!"

I feel confident that the Hangover Cure Twitter page will be a repository for scientific discovery that has not been seen since, oh, the Facebook Beacon program.

Telefonica Europe on Wednesday announced that it has acquired voice over Internet Protocol and telephony service Jajah for $207 million in cash.

Reports of the sale and its price had begun to circulate several days ahead of the official announcement. There were also rumors of an ongoing bidding war between Cisco Systems and Microsoft, which were competing with Telefonica for the sale.

Telefonica is a business division of a company most consumers know as O2. It counts some 48.6 million customers as part of its communications business. Jajah, which has several services for consumers, also has business offerings for small business and enterprise users. Jajah says these services will continue to operate as they did before, remaining unaffected by the acquisition.

Despite a bleak economic outlook, 2009 saw the release of some incredible new Web services. But every year--recession or no recession--there are always a few sites that close their doors.

We've highlighted 15 sites that ceased operations over the course of the year. A number of them came from big companies like Google and Yahoo--the latter of which did some major restructuring in 2008 that left it with new leadership and a leaner, meaner mentality towards cutting things that just weren't working. Others were simply ideas that needed a little more time and money, but couldn't get it in time.

Click on the slideshow link below to get started.

15 sites that went kaput in 2009 (images)

The latest Opera browser preview version may not be entirely stable, but it's definitely got its jetpack strapped on. Opera 10.5 pre-alpha, for Windows and Mac, is the first browser that's not powered by Webkit to approach JavaScript rendering speeds previously reached only by Chrome and Safari.

Opera 10.5 pre-alpha introduces Windows 7 support and a slight redesign, along with a rocketing new JavaScript engine.

(Credit: Screenshot by Seth Rosenblatt/CNET)

In empirical testing done on an HP desktop running an Intel Core 2 Q6600 at 2.66GHz with 4GB of RAM and Windows 7 32-bit, the pre-alpha scored 435.6 milliseconds in the SunSpider JavaScript benchmark. By contrast, Google Chrome 4.0.266.0, the most recent development build, notched 510.4 ms. The current stable build of Opera was more than 7.5 times slower, at 3284.4 ms.

Opera attributes this dramatic improvement to the new Carakan JavaScript engine, which they have designed from scratch to replace the Futhark engine in the stable build. Opera 10.5 also includes improvements to the Presto layout engine, and a new graphics library called Vega.

Other improvements noticeable in the pre-alpha include changing the URL address bar to include the same style of predictive smart search that Firefox and Chrome have, and the search and address bars now both remember searches, support deleting specific items, and have redesigned layouts.

The main browser interface has been redone, too. The tabs are now on top, the menu bar has been minimized behind a drop-down on the left nav, and the browser has better integration with Windows 7 and Snow Leopard. On Windows 7 there's Aero Peek and Jump List support to access Speed Dial and tabs from the Taskbar. For Macs, there's a unified toolbar, native buttons and scrollbars, multitouch gestures, and Growl support. Dialog boxes are now non-modal, which you means you can now switch tabs without a pop-up commanding your browser's focus, for example. This will affect verification and authentication pop-ups, and JavaScript alerts.

There are some known problems, including a lack of printer support in the Mac version and noticeably high memory usage. Users can expect these to get addressed before the stable build of Opera 10.50 is released. The Opera 10.50 official announcement and changes can be read here, while the current stable version of Opera 10.10 is for Windows, Mac, and Linux.

Earlier this week I wrote a post about how I didn't like that I couldn't alter the Facebook Connect privacy settings for updates from Foursquare, an iPhone app that shares my location through a GPS-enabled city directory. It didn't make sense to me that Facebook Connect information was automatically visible to anyone who had access to posts on my "wall," whereas privacy settings on a third-party app embedded directly on my profile were much more fine-tuned, allowing me to restrict them to specific subsets of friends.

I've been e-mailing back and forth with Facebook, and I've gotten some clarification on how the process works. Privacy controls for embedded apps aren't as simple as I'd thought. I can opt to block the "box" for a third-party game like Mafia Wars or Farmville, as the privacy controls indicate, but activity from those apps--i.e. if I just picked up a new weapon in Mafia Wars--will still show up to anyone who can see what I post on my Facebook wall, like status messages and new friend connections. (You can, however, block individual Platform apps from posting to your wall in the first place.)

"Activity from apps and Connect sites are grouped with the activity you take on Facebook (which then appears on your wall), all of which can be blocked from a select group of people using publisher privacy," Facebook representative Malorie Lucich explained to me via e-mail. "So, for example, if you don't want your boss seeing your Mafia Wars activity and your usual Facebook activity, you can block her/him from viewing your wall."

Everything on the wall, therefore, is treated as a single unit. Except not quite: With status messages and content posted directly through Facebook, as part of Facebook's new privacy controls there's now a drop-down menu that lets me choose exactly who can see that message--the public Web, friends of friends, only my friends or "networks," or stratified groups of friends. That's great, because I can post a status message asking for Christmas present suggestions, and opt to block it from my family or other potential gift recipients.

For third-party apps, I'm not so lucky. I'm sure I wasn't the only Facebook member who figured that blocking the Mafia Wars "box" from a certain list of friends would also block activity updates on my wall. According to Facebook, it doesn't.

I'm also sure I'm not the only one who would like to use Facebook Connect with a service like Foursquare that isn't normally public; I liked some of the comments that would appear on "check-ins" pushed to Facebook (when I checked into a restaurant, for example, a few people responded with their favorite menu items, and another asked about the variety of beers on tap). But wanting to keep them restricted to half or a third or a quarter of my Facebook friends is not always just a matter of privacy--the majority of my Facebook friends have no interest whatsoever in which coffee shop I just checked into on the likes of Foursquare or Gowalla, and out of courtesy I don't want to plaster it all over everyone's news feeds. I'd like Foursquare's implementation of Facebook Connect, theoretically, to only be visible to close friends and people who live nearby.

Facebook is, and should be, proud of the wealth of data that gets shared on members' "walls." On Friday morning, I used my status message to solicit tips for an upcoming tropical getaway, and got some terrific suggestions from people in my "social graph" whom I hadn't talked to in ages. This was a great example of something that I'd like to open up to my entire Facebook network. But when it comes to information that's local, sensitive, or otherwise private, I'd like to be able to restrict it. As Facebook Connect grows bigger and more diverse, these instances are likely to come up more often.

So if I had to come up with a most-wished-for new Facebook feature, this might have to be it.