Rendered at 12:43:17 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
just_some_user 16 hours ago [-]
The actual interesting part about such an attack is not that something is down, but rather why someone would run it.
A lot of DDoS originates from script kiddies, but such attacks are usually very short lived as attacks are expensive.
So which actor would actually benefit from downing the Norwegian government?
sixtyj 3 hours ago [-]
It is not expensive, unfortunately :(
Flare + BleepingComputer 2026, Kaspersky, StormWall, and others show that the DDoS-as-a-service market is highly commoditized and prices are extremely low:
A short test / basic attack on a website: $5–25.
Daily attack on a poorly protected target: around $100/day.
A more robust or well-protected target: $200–500 per day.
Monthly subscription to booter/stresser services: often $15–40 (sometimes even less); premium packages cost hundreds of dollars.
Larger or longer-term campaigns or infrastructure: thousands of dollars.
On the governmental level these money are almost nothing if you want to hurt someone else…
Retr0id 16 hours ago [-]
DDoS tends to be monetised as DDoS-as-a-service. Taking down "significant" services is good advertising. Either that, or they plan to extort the Norwegian government.
just_some_user 16 hours ago [-]
But for such a "proof of power" a short attack which takes the service down once is enough, long attacks are not so common and actually require some work from the attacker
Retr0id 16 hours ago [-]
If the attack doesn't last long, bystanders can't know whether it was trivially mitigated by the victim.
A shorter attack won't make as many news headlines, either.
devin 16 hours ago [-]
Unless part of the social proof is that mitigation is more difficult.
giwook 16 hours ago [-]
Probably a country that lost to Norway in the World Cup.
InTheArena 16 hours ago [-]
What do they benefit from taking down any government, NGO or civic work program? American systems, as well as larger European systems are constantly attacked. I've seen the same traffic. Fire walling off China, North Korea and smaller eastern European countries is a must if you ever plan to expose any internet exposed services.
roflmaostc 16 hours ago [-]
is there actually any source those attacks are really done by "script kiddies"?
More likely this more politically motivated and backed up by money and more capable groups
just_some_user 16 hours ago [-]
Yes, thats what I meant
cantalopes 16 hours ago [-]
Imo russia most likely
esseph 15 hours ago [-]
It hasn't been majorly like that in twenty years.
Botnets are services now, a business. They gain customers by their effectiveness and resilience.
For $$50-100 you can deny service to a lot of big sites and services.
inigyou 14 hours ago [-]
I've seen people say this but no proof of it. Could I really take down Stack Overflow for $50? Oh wait, it took itself down for free.
those script kiddies control botnets in foreign countries and use them to attack stuff just bc. its not their compute, so no marginal cost to them
tuatoru 16 hours ago [-]
The UK. It wants to steal Norway's vast stores of electricity.
Crunchified 16 hours ago [-]
"vast stores of electricity"?
QuantumNomad_ 15 hours ago [-]
Electricity production in Norway is predominantly hydroelectric.
When it rains dams fill up. The water is drained into shafts with turbines, and electricity is generated.
However, even though we are big on hydroelectricity percentage wise I’m not sure it’s all that vast an amount of electricity on a global scale. We are a pretty small country after all.
According to Wikipedia, the Norwegian electricity sector had 40.26 GW installed capacity as of 2021 and was producing 157.113 TWh in the same year. [1]
Great Britain had 74.8 GW installed capacity in 2023 and was producing 292.7 TWh in 2023. [2]
Really, you have no one in mind? Someone who is sending hundreds of bombing drones daily to Ukraine, killing civilian population, women and children, and who is eager to send a message to NATO countries any way possible?
inigyou 27 minutes ago [-]
Is Israel supplying drones to Ukraine? Good on them.
motbus3 16 hours ago [-]
That is much less effective than every other manner they tested on the past few years such as shadow fleets, ghost satellites etc.
Up to the moment it has not been the operation adopted which would make it weird.
On who would do it then, anyone who benefits from instability. From corporations trying to sell flocked uped sytems, politicians, etc.
There is one south american country who was attacked exactly this way before their head of the government was kidnapped.
cynicalsecurity 15 hours ago [-]
You don't understand Kremlin's mentality. Any even little nasty thing they can do to the West makes them giggle like Doctor Evil. "Oh, a NATO country's government infra was not protected from DDoS? Let's have fun, haha!" You are dealing with story book villains. I know, this sounds so ridiculous it's hard to believe someone can actually be like this. But then the reality check hits.
throwaway742 13 hours ago [-]
They aren't story book villains. I think this says a lot about your mentality.
throwuxiytayq 7 hours ago [-]
Story book villains usually have better justification for their evil acts than the Russian government.
cindyllm 12 hours ago [-]
[dead]
inigyou 14 hours ago [-]
[flagged]
aaron695 16 hours ago [-]
[dead]
lschueller 14 hours ago [-]
I'd guess someone in the us fat-fingered ip ranges and mixed up 2.144.0.0/14 (Iran) with 2.148.0.0/14 (Norway)
TacticalCoder 14 hours ago [-]
Or someone entered 2.144.0.0/14 but on a machine without ECC and a bit-flip happened, turning it into 2.148.0.0/14.
> At the center of the disruption is ID-porten — the national login gateway operated by Norway's Digitaliseringsdirektoratet (Digdir), the government agency responsible for public-sector digitalization. ID-porten functions as the single sign-on portal through which Norwegian citizens authenticate themselves to access public digital services.
It seems to be a corporate service provider that's a dependency for many other services.
14 hours ago [-]
e12e 13 hours ago [-]
Yes, it's a single point of failure by design - but has been pretty stable mostly - with this and a previous attack in June being exceptions.
The identity portal is administered by the department for digital services, but hosted at a commercial provider, Vivicta (formerly TietoEvery, formerly Tieto and Every - Consulting companies from Finland and Norway).
Would the attack be successful is the Norwegian government used a way to protect itself against ddos like cloudflare or akamai?
inigyou 14 hours ago [-]
I certainly hope the Norwegian government doesn't force all of its citizens to transmit all of their private data to the US government.
kachnuv_ocasek 16 hours ago [-]
Bets on which AI lab it is this time?
AtNightWeCode 16 hours ago [-]
Many important services with problems. Ouch. My guess is that the root cause is misconfiguration rather than an attack.
e12e 13 hours ago [-]
From TFA:
> Det har siden kl. 01 mandag 3. august pågått et tjenestenektangrep (DDoS) som rammer ID-porten som driftes hos Digdirs driftspartner Vivicta.
> Since 0100 hours Monday August 31st there's been an ongoing DDoS attack which affects the ID-Portal which is run/hosted by DepDig's (Department of digital services') service provider Vivicta.
(My translation)
Ed: just realized Vivicta is TietoEvery with a haircut and new shoes:
<hat type="tinfoil">I wonder who wants the Norwegian gov infrastructure between a TLS terminating proxy service</hat>
roschdal 16 hours ago [-]
The Internet was supposed to withstand a nuclear attack
buildbot 16 hours ago [-]
"The internet" is currently fine, besides Norwegian government services.
Also something designed to withstand something does not imply it survives other somethings.
pprotas 16 hours ago [-]
Guess a nuclear attack would actually lessen the load on the global internet, rather than increase it - like a DDOS would!
vee-kay 16 hours ago [-]
[dead]
nubg 16 hours ago [-]
[flagged]
motbus3 16 hours ago [-]
Could be, but it does not look like any of the ways they done before.
Anyone who benefits from instability would be at win, from internal political competition, foreign companies trying to sell flocked up systems and the list could be huge.
Not saying it was not who you think it was, Im just saying it does not have enough information yet to be the only explanation or at least the most obvious one.
cyanydeez 16 hours ago [-]
could just be openai.
coffinbirth 16 hours ago [-]
[flagged]
CursedSilicon 16 hours ago [-]
Whispers
Hey, hey
Did you know
Multiple things can in fact, be bad
coffinbirth 16 hours ago [-]
[flagged]
rcxdude 15 hours ago [-]
This is a non-sequitur.
CursedSilicon 15 hours ago [-]
Australian but go off :)
matkoniecz 15 hours ago [-]
As someone from Poland I want to confirm that multiple things can be in fact bad.
Being invaded by Nazi Germany and days later by their ally, Russia was example of such case.
justsomehnguy 15 hours ago [-]
[flagged]
matkoniecz 15 hours ago [-]
At no point I claimed that Poland was land of saints and cuddly plush bears. See also Bereza Kartuska.
What you linked does not change at all that being invaded and occupied by Nazi Germany and Soviet Union was absolutely awful and both were clearly evil.
(and if you want to start oppression olympics, then yes: what Germany and Russia did was far worse than what Poland did, for that matter what Ukrainian OUN UPA did was far worse than what Poland did)
justsomehnguy 15 hours ago [-]
It hurts what you actually was on the same level but got the short end, eh?
indemnity 16 hours ago [-]
Maybe you should stop invading other countries if these comparisons hurt your feelings buddy.
coffinbirth 16 hours ago [-]
I always find it unbelievable how people do not know or just forget about what happened in the east 85 years ago. Really sad. This is one of the primary reasons why people in the west don't understand why Russia cannot accept Ukraine in NATO. It was NATO that expanded to the east, contrary to the agreements after the fall of the Soviet Union. Russia said for decades that Ukraine in NATO is unacceptable.
anon48293 15 hours ago [-]
Ukraine sought NATO membership AFTER Russia attacked in 2014, not before.
Since you’re such a history buff, what did Russia promise when Ukraine got rid of their nukes?
coffinbirth 15 hours ago [-]
> Ukraine got rid of their nukes
Russia is the official successor state of the Soviet Union, the nukes never belonged to Ukraine in the first place. It was Ukraine that first attacked LPR and DPR in 2014. It was Ukraine that forbid Russian language, culture, church, etc... to Russians living in eastern Ukraine. By the way, Odessa will return to Russia.
anon48293 14 hours ago [-]
Answer the question. What did Russia state in the Budapest Memorandum on Security Assurances?
nubg 12 hours ago [-]
He won't lmao
it's an instant check mate for putin bots
justsomehnguy 15 hours ago [-]
> NATO Action Plan membership (Georgia and Ukraine) 4 April 2008
Sure, sure a fresh "anon" account.
SukadarBukadar 15 hours ago [-]
Let me tell you what's actually "really sad": Bucha as a response to sovereign country's attempt to join NATO. Having a hostile country as a neighbour isn't an excuse for starting a war with it.
coffinbirth 15 hours ago [-]
Following this logic Mexico and Canada can both join a military alliance with China and Russia, I guess the U.S. must accept that, both are sovereign country's after all...
matkoniecz 15 hours ago [-]
And if in response USA would invade and start massacring civilians (like Russia did), that would be in fact evil.
nubg 12 hours ago [-]
correct!
antonvs 15 hours ago [-]
> Russia said for decades that Ukraine in NATO is unacceptable.
Russia, as a hostile nation not interested in participating in global peace, doesn’t get to decide such things.
matkoniecz 15 hours ago [-]
> what happened in the east 85 years ago
Russia got attacked by their ally, Nazi Germany. After 87 years ago in 1939 they invaded together Poland.
> Really sad.
Yeah, Russia going on to win WW II was quite sad. Admittedly better than Nazis winning but pity they have not both lost.
> contrary to the agreements after the fall of the Soviet Union
which supposed agreements? Were they any more binding than Budapest Memorandum?
> Russia said for decades that Ukraine in NATO is unacceptable.
Flare + BleepingComputer 2026, Kaspersky, StormWall, and others show that the DDoS-as-a-service market is highly commoditized and prices are extremely low:
A short test / basic attack on a website: $5–25.
Daily attack on a poorly protected target: around $100/day.
A more robust or well-protected target: $200–500 per day.
Monthly subscription to booter/stresser services: often $15–40 (sometimes even less); premium packages cost hundreds of dollars.
Larger or longer-term campaigns or infrastructure: thousands of dollars.
On the governmental level these money are almost nothing if you want to hurt someone else…
A shorter attack won't make as many news headlines, either.
More likely this more politically motivated and backed up by money and more capable groups
Botnets are services now, a business. They gain customers by their effectiveness and resilience.
For $$50-100 you can deny service to a lot of big sites and services.
When it rains dams fill up. The water is drained into shafts with turbines, and electricity is generated.
However, even though we are big on hydroelectricity percentage wise I’m not sure it’s all that vast an amount of electricity on a global scale. We are a pretty small country after all.
According to Wikipedia, the Norwegian electricity sector had 40.26 GW installed capacity as of 2021 and was producing 157.113 TWh in the same year. [1]
Great Britain had 74.8 GW installed capacity in 2023 and was producing 292.7 TWh in 2023. [2]
France was producing 537.7 TWh in 2020. [3]
Germany was producing 488.5 TWh in 2024. [4]
[1]: https://en.wikipedia.org/wiki/Electricity_sector_in_Norway
[2]: https://en.wikipedia.org/wiki/Electricity_in_Great_Britain
[3]: https://en.wikipedia.org/wiki/Electricity_sector_in_France
[4]: https://en.wikipedia.org/wiki/Electricity_sector_in_Germany
Up to the moment it has not been the operation adopted which would make it weird.
On who would do it then, anyone who benefits from instability. From corporations trying to sell flocked uped sytems, politicians, etc.
There is one south american country who was attacked exactly this way before their head of the government was kidnapped.
> ID-Porten: When One Gateway Controls Everything
> At the center of the disruption is ID-porten — the national login gateway operated by Norway's Digitaliseringsdirektoratet (Digdir), the government agency responsible for public-sector digitalization. ID-porten functions as the single sign-on portal through which Norwegian citizens authenticate themselves to access public digital services.
It seems to be a corporate service provider that's a dependency for many other services.
The identity portal is administered by the department for digital services, but hosted at a commercial provider, Vivicta (formerly TietoEvery, formerly Tieto and Every - Consulting companies from Finland and Norway).
https://www.agilitaspe.com/index.php?id=136
Ed: I'm guessing yes?
https://vayla.fi/-/new-public-transportation-travel-card-sys...
> Det har siden kl. 01 mandag 3. august pågått et tjenestenektangrep (DDoS) som rammer ID-porten som driftes hos Digdirs driftspartner Vivicta.
> Since 0100 hours Monday August 31st there's been an ongoing DDoS attack which affects the ID-Portal which is run/hosted by DepDig's (Department of digital services') service provider Vivicta.
(My translation)
Ed: just realized Vivicta is TietoEvery with a haircut and new shoes:
https://www.agilitaspe.com/index.php?id=136
Also something designed to withstand something does not imply it survives other somethings.
Not saying it was not who you think it was, Im just saying it does not have enough information yet to be the only explanation or at least the most obvious one.
Hey, hey
Did you know
Multiple things can in fact, be bad
Being invaded by Nazi Germany and days later by their ally, Russia was example of such case.
What you linked does not change at all that being invaded and occupied by Nazi Germany and Soviet Union was absolutely awful and both were clearly evil.
(and if you want to start oppression olympics, then yes: what Germany and Russia did was far worse than what Poland did, for that matter what Ukrainian OUN UPA did was far worse than what Poland did)
Since you’re such a history buff, what did Russia promise when Ukraine got rid of their nukes?
Russia is the official successor state of the Soviet Union, the nukes never belonged to Ukraine in the first place. It was Ukraine that first attacked LPR and DPR in 2014. It was Ukraine that forbid Russian language, culture, church, etc... to Russians living in eastern Ukraine. By the way, Odessa will return to Russia.
it's an instant check mate for putin bots
Sure, sure a fresh "anon" account.
Russia, as a hostile nation not interested in participating in global peace, doesn’t get to decide such things.
Russia got attacked by their ally, Nazi Germany. After 87 years ago in 1939 they invaded together Poland.
> Really sad.
Yeah, Russia going on to win WW II was quite sad. Admittedly better than Nazis winning but pity they have not both lost.
> contrary to the agreements after the fall of the Soviet Union
which supposed agreements? Were they any more binding than Budapest Memorandum?
> Russia said for decades that Ukraine in NATO is unacceptable.
And Russia in Ukraine is unacceptable for us.