Is this written down anywhere? All I can find is an announcement from the group and a follow-up message threatening Canonical if they do not negotiate.

What does a DDoS accomplish if the contracts are signed and a team embedded?

Why take down security.ubuntu.com? Surely even cyber jihadis need security updates?