If I understand, he is first of all referring to DDoS attacks where many people voluntarily traffic a server with common computer setups, not when a small number of people pull off major attacks using extra resources such as unwilling puppets.