Today, 05:30 AM
How about this theory? Say, I'm a country who makes a LOT of electronics and exports them around the world. What if I could make devices really cheap, get consumers to pay for them and help me distribute them around the world, then some time on down the road I can use them for DDOS attacks against my target. What is my target to do? Turn off everyone's internet access? Contact every user around the world who has one of these devices and tell them they can't use it anymore?
The site being DDOS'd or the company mitigating it for them can do very little to stop it other than null routing the source addresses.