Live data from Hacker News

Ask HN: How does Hacker News avoid (successful) DDoS attacks?

news.ycombinator.com

11–20 of 25 posts

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#11

Earlier quoted context omitted.

This doesn't really do much against all but the most trivial denial-of-service attacks.

If someone does try to DDos HackerNews, the amount of resources required to DDos would not justify the investment,as there's nothing to gain here in terms of monetary benefit.

Would it though? Most of these operations seem to use botnets. So it's enterprise routers and smart fridges and juiceros doing the heavy lifting.

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#12

So this might be naive, but... what interest would someone have in taking down HN? Like, people with skills to run an attack are also more likely to actually enjoy participating here. It'd be like someone trying to take down Stack Overflow. Even if you can do that – especially if you're the kind of person who could do that – you'd probably be shooting yourself in the foot, right?

Yeah, I thought of that. But (especially given political polarization) I would expect that there'd be at least someone with an axe to grind and the necessary technical skills. I mean, there's certainly no shortage of criticism of Hacker News/some HN moderation actions even on HN (or "the orange site" as it's known in some circles).

I have the axe but not the skills :)

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#13

So this might be naive, but... what interest would someone have in taking down HN? Like, people with skills to run an attack are also more likely to actually enjoy participating here. It'd be like someone trying to take down Stack Overflow. Even if you can do that – especially if you're the kind of person who could do that – you'd probably be shooting yourself in the foot, right?

Yeah, I thought of that. But (especially given political polarization) I would expect that there'd be at least someone with an axe to grind and the necessary technical skills. I mean, there's certainly no shortage of criticism of Hacker News/some HN moderation actions even on HN (or "the orange site" as it's known in some circles).

I would imagine that this (admittedly plausible-sounding) scenario is offset by the fact that, given the audience, a politically-motivated DDOS would have the opposite of the desired impact. No one here would cheer the loss of HN, even its critics (like me.) We want it to do better.

It's simply too valuable for either side to destroy.

Generalizing, it's not a belief in unfettered free speech that saves us but rather a belief in carefully curated conversation. The archangel Dang keeps the discussion so valuable that there is no margin in damaging it.

If the tenor of the conversation declined to the point where it was a Twitter-grade dumpster fire, then yes, someone would eventually DDOS it.

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#14

Earlier quoted context omitted.

This doesn't really do much against all but the most trivial denial-of-service attacks.

If someone does try to DDos HackerNews, the amount of resources required to DDos would not justify the investment,as there's nothing to gain here in terms of monetary benefit.

There's a lot of people who do not DDoS for monetary benefit, but instead as entertainment.

And as somebody else mentioned... botnets

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#15

So this might be naive, but... what interest would someone have in taking down HN? Like, people with skills to run an attack are also more likely to actually enjoy participating here. It'd be like someone trying to take down Stack Overflow. Even if you can do that – especially if you're the kind of person who could do that – you'd probably be shooting yourself in the foot, right?

There's a lot of disdain for HN on Twitter for some reason

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#16
post #14

Earlier quoted context omitted.

If someone does try to DDos HackerNews, the amount of resources required to DDos would not justify the investment,as there's nothing to gain here in terms of monetary benefit.

There's a lot of people who do not DDoS for monetary benefit, but instead as entertainment. And as somebody else mentioned... botnets

Sure, some people aren't looking for anything logical, but even for them, it might really not be worth it.

If they were to bring it down for a some period of time,there won't be any schaudenfreude for someone of a certain political ideology performing a DDos to make the people of another politicial ideology suffer. This site isn't overwhelmingly conservative or left-wing or libertarian, at least to me. Its kind of amorphous. Its folks just sharing cool websites, apps, new posts,jobs and, blogs etc.

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#17

Earlier quoted context omitted.

If someone does try to DDos HackerNews, the amount of resources required to DDos would not justify the investment,as there's nothing to gain here in terms of monetary benefit.

Would it though? Most of these operations seem to use botnets. So it's enterprise routers and smart fridges and juiceros doing the heavy lifting.

I have a very rudimentary understanding of a botnet, but I am sure it's not going to be super expensive if you are trying to DDos a site like this. It would be prohibitively expensive if you are trying to do this to something like AWS.

However, the monetary gain from doing this is gonna be zero dollars. The entertainment factor isn't gonna be likely either.

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#18

So this might be naive, but... what interest would someone have in taking down HN? Like, people with skills to run an attack are also more likely to actually enjoy participating here. It'd be like someone trying to take down Stack Overflow. Even if you can do that – especially if you're the kind of person who could do that – you'd probably be shooting yourself in the foot, right?

There's a lot of disdain for HN on Twitter for some reason

To be fair, there's a lot of disdain for pretty much everything on Twitter

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#19

It does have a rate limit, it's just very very high. I've hit it sometime when trying to download every single item since day 0. But it's very lenient, you have to run multiple threads downloading as fast as they can in order to hit it. The API is not hosted by HN/Ycombinator themselves. If I recall correctly, it was initially hosted by Firebase which is/was a company seed-funded by Ycombinator. It (Firebase) is now…

> It does have a rate limit, it's just very very high. I've hit it sometime when trying to download every single item since day 0. Interesting. The API README states: > There is currently no rate limit. I guess that's wrong/out of date. I wonder when that changed?

[deleted]

Re: Ask HN: How does Hacker News avoid (successful) DDoS attacks?

#20

So this might be naive, but... what interest would someone have in taking down HN? Like, people with skills to run an attack are also more likely to actually enjoy participating here. It'd be like someone trying to take down Stack Overflow. Even if you can do that – especially if you're the kind of person who could do that – you'd probably be shooting yourself in the foot, right?

There's a lot of disdain for HN on Twitter for some reason

It's one of the few places we can vent about HN without being reprimanded, rate limited and eventually banned.
Post reply on HN