Cyber attack forces Wikileaks to change web address

Whistle-blowing website Wikileaks has been forced to change its web address after the company providing its domain name cut off service.

EveryDNS.net said it had terminated services because Wikileaks.org had come under massive cyber attacks.

But Wikileaks has already reappeared using a Swiss web address.

Wikileaks has also used micro-blogging site Twitter to urge its fans to redistribute its "raw" net address so it can be viewed at any time.

This numerical internet protocol (IP) address remains live and accessible even when web domains - the normal "www" addresses used to access most sites - are unavailable.

Experts say it is likely that Wikileaks has done deals with lots of web hosting companies, although many are likely to back away from dealing with the controversial site in the light of recent web attacks.

There is also a published list of mirror sites, which Wikileaks hopes will provide constant access to the site.

Some of these sites have simply copied Wikileaks' content and put it on a different web server, while others are using different domain names to point at the original content.

The more of these sites there are, the more difficult it will be to shut Wikileaks down, security analyst Paul Mutton told the BBC.

Downtime

In a post on Twitter, Wikileaks acknowledged that its domain had been "killed" by EveryDNS.net.

It was not clear how long disruption to the wikileaks.org site would last.

In a statement on its website, EveryDNS.net said it had issued a 24-hour termination notice to Wikileaks which ended at 0300 GMT on 2 December.

It said the domain wikileaks.org had become the target of "multiple distributed denial of service (DDOS) attacks".

"These attacks have, and future attacks would, threaten the stability of the EveryDNS.net infrastructure, which enables access to almost 500,000 other websites," it said.

"Any downtime of the wikileaks.org website has resulted from its failure to use another hosted DNS service provider," it added.

Websites use web hosting firms such as EveryDNS.net to translate their raw IP addresses to a more memorable web address such as Wikileaks.org.

But the IP address of a website will also direct users to the site.

One web expert explained that Wikileaks had managed to re-establish web access via a different address.

"Users visiting the www.wikileaks.ch website appear to be directed via a Swedish website on to a server in France which is now hosting their main website," explained Sebastien Lahtinen, director of web hosting firm NetConnex.

In a bizarre twist, the .ch address is actually hosted by EveryDNS, the firm which suspended Wikileak's .Wikileaks' address.

"It seems a strange choice given that they pulled the plug on the .org address just a few hours ago," said Paul Mutton, a security analyst at internet services firm Netcraft.

"It could be that Wikileaks is quite happy to play a cat and mouse game with them," he added.

Hosting issues

Using a Swiss domain could be Wikileaks anticipating the next line of attack - having its IP address de-registered, thinks Mr Mutton.

"Moving to a non-US domain makes sense. Its previous domain was registered with a US company and as such has to work within US laws, with potential for the government to lean on it and get it suspended," said Mr Mutton.

Innocent people

The Wikileaks situation is challenging the balance between free speech, commercial and technical pressures and the laws in different jurisdictions around the world.

Wikileaks says its website has been under attack since it began publishing more than 250,000 classified US diplomatic cables.

The memos, which discuss US diplomatic relations and military activities, have been causing controversy across the world.

It turned to the online store Amazon to host its site but the company ended the agreement on Wednesday - a move welcomed by US officials.

Amazon said that it had not removed Wikileaks because of a government inquiry.

Instead it said that Wikileaks had failed to adhere to its terms of service.

"It's clear that Wikileaks doesn't own or otherwise control all the rights to this classified content. Further it is not credible that the extraordinary volume of 250,000 classified documents that Wikileaks is publishing could have been carefully redacted in such a way as to ensure that they weren't putting innocent people in jeopardy," it said on its website.

But freedom-of-speech campaigners remain defiant.

"The first serious infowar is now engaged. The field of battle is Wikileaks. You are troops," tweeted John Perry Barlow, the founder of the Electronic Frontier Foundation.

FROM : WWW.BBC.CO.UK