Google Intrusion Detection Problems • Hacker News Board

Re: Google Intrusion Detection Problems

#141

Post by oneloop » Wed, Aug 24, 2016, 10:26 AM UTC

CaptSpify wrote: post #137

oneloop wrote: post #136

Earlier quoted context omitted.

You're paying for a super ninja ultra special internet connection as well? Yikes. Interesting concept though. So your strategy for scaling up is building a data center then?

> You're paying for a super ninja ultra special internet connection as well? Not really. Just a normal home connection. If you design your services sanely, and don't have much traffic, it's not really an issue. > So your strategy for scaling up is building a data center then? Well, it depends. You really should do a cost-benefit analysis, because each product is different. But if it makes sense, then yes.

But your whole argument was that for some serious application you shouldn't trust on cloud services, wasn't it? The kind of things I was doing half a year ago you couldn't run on your home connection. So this whole "run important stuff on your home connection" is just a signal that you're not doing anything great.

Re: Google Intrusion Detection Problems

#142

Post by zippy786 » Wed, Aug 24, 2016, 11:28 AM UTC

PhantomGremlin wrote: post #138

blakeyrat wrote: post #105

Earlier quoted context omitted.

It feels like they have an entire company of Mr. Spocks without a single Doctor McCoy to round things out.

Mr. Spock would have approached the issue of support more logically and would have thought things through more carefully. It's more like they have an entire company of Sheldon Coopers, without a single Penny or Leonard Hofstadter to round things out.

Sheldon would have never agreed to release a system with flawed design.

Re: Google Intrusion Detection Problems

#143

Post by CaptSpify » Wed, Aug 24, 2016, 2:10 PM UTC

oneloop wrote: post #141

CaptSpify wrote: post #137

Earlier quoted context omitted.

> You're paying for a super ninja ultra special internet connection as well? Not really. Just a normal home connection. If you design your services sanely, and don't have much traffic, it's not really an issue. > So your strategy for scaling up is building a data center then? Well, it depends. You really should do a cost-benefit analysis, because each product is different. But if it makes sense, then yes.

But your whole argument was that for some serious application you shouldn't trust on cloud services, wasn't it? The kind of things I was doing half a year ago you couldn't run on your home connection. So this whole "run important stuff on your home connection" is just a signal that you're not doing anything great.

> But your whole argument was that for some serious application you shouldn't trust on cloud services, wasn't it?

Well, with everything, there are pros and cons. My argument is that I think it's silly to trust someone else with your infrastructure. There can be benefits to doing so, however, your giving up a lot as well. And in terms of cost (which is usually the main argument that I hear), I've personally never seen it work.

Your trusting someone with something pretty critical with your business, so you should think long and hard about which direction you want to go. If your cloud-service gets arbitrarily shut down or has an outage, what responses can you take to fix it? Usually not many. Thats essentially adding a SPoF, which is generally considered a big no-no, although it does happen.

> The kind of things I was doing half a year ago you couldn't run on your home connection.

I'd be curious as to what your doing then.

> just a signal that you're not doing anything great.

I guess that depends on what you mean as great. I do a lot of useful stuff: email, web-apps, file-store, home-automation, etc.

Re: Google Intrusion Detection Problems

#144

Post by Animats » Wed, Aug 24, 2016, 7:15 PM UTC

noja wrote: post #126

Animats wrote: post #53

Intrusion detection false alarms can be a problem if you run anything like a web crawler. I have one running at "sitetruth.com", which is a site rating system hosted on a leased server. (Not a cloud service, a leased rackmount server). One of the things it does is to find the home page of a site by trying "example.com" and "www.example.com", with and without HTTPS. Some sites will block access for 30-45 seconds if th…

> the crawler, which obeys robots.txt, examines about 20 pages on a site in a few seconds. That seems like something that could be slowed down slightly with little negative impact, and a big positive impact (no annoyed people, no interaction with support).

Our user is waiting. We rate sites on demand, and the user is looking at a rotating "busy" icon in their browser search results during the rating process.

Re: Google Intrusion Detection Problems

#145

Post by fhoffa » Sat, Aug 27, 2016, 1:39 AM UTC

Posting this 4 days later, what happened next:

http://www.businessinsider.com/google-cloud-won-skeptic-afte...

Google then shocked him again, in a good way. Within four hours of tweeting, someone from Google had contacted him and had restored access to his project.

Trotter says that, it turns out, he and his team bear some responsibility. They had inadvertently set up a server wrong, exposing a hole, and a hacker was using his company's to conduct a "denial of service attack," which is when hackers overload another website or online service with so much traffic, it shuts down.