The Coalition has confirmed what players spent the weekend guessing at: Gears of War: E-Day’s server crashes and login problems were caused by distributed denial-of-service attacks. Someone pointed a firehose of junk traffic at the game and it buckled.

I believe them. Big launches draw this. A new Gears is a target the way a new Call of Duty is a target, and anyone with a few hundred dollars and a booter service can take a swing at one. Nothing about the claim strains credibility.

The word does a lot of work, though

DDoS has quietly become the one outage explanation nobody audits. Server capacity misjudged, a login queue that deadlocks under load, a backend partner falling over, these all look identical from the player’s side: a spinner, an error code, a shooter you paid for that won’t let you in. When a studio says “DDoS,” the conversation usually stops there, because the villain is external and unnamed and there’s no way for anyone outside the building to check.

So the burden shifts. If the attack was the cause, say something about the shape of it. Peak traffic. Which layer absorbed it and which one broke. Whether the mitigation in front of the auth service was sized for a launch weekend or for a normal Tuesday. Studios publish detailed patch notes about weapon recoil and then go silent on infrastructure, and the asymmetry is getting hard to excuse in a genre where the servers are the product.

Build for the attack you’ll definitely get

The part that actually bothers me is the blast radius. An attack on login shouldn’t be able to take down everything behind login. Campaign progress, menus, loadout screens, anything that doesn’t strictly need a live handshake should degrade into a local mode rather than a brick wall. That’s a design decision made months before launch, and it’s one most modern shooters keep declining to make, because always-online is easier to build and easier to monetize.

DDoS protection is also not exotic anymore. Scrubbing, anycast, rate limits at the edge, these are commodity services. A publisher of Microsoft’s size has access to about as much of it as money can buy. Which makes the outage less a story about attackers finding a clever hole and more a question of what was provisioned, and when.

Players, meanwhile, get the worst version of this. They can’t patch anything, can’t route around it, can’t tell a malicious flood from an overwhelmed queue. They refresh and wait, and the launch window, the stretch where a multiplayer community either forms or doesn’t, burns off regardless of whose fault it is.

The Coalition has named the cause. It hasn’t yet said how long mitigation takes to hold, or what happens the next weekend someone decides to try again.