Project Shield • Hacker News Board

Re: Project Shield

#11

Post by headmelted » Mon, Sep 26, 2016, 7:09 AM UTC

willvarfar wrote: post #5

Fuzzwah wrote: post #3

Post from Brian Krebs about Google using Shield to get Krebs on Security back up and running: https://krebsonsecurity.com/2016/09/the-democratization-of-c...

I follow your link https://krebsonsecurity.com/2016/09/the-democratization-of-c... and I get this: 503 Service Temporarily Unavailable shield So it seems to be running shield, but at least part of the attacks are still getting through? :( Would be very nice to know what kind of attacks Shield doesn't shield against etc.

Completely down from here too.

I may need to retract my comments about Akamai. Apparently 680gbps (or whatever it's at now) is the total amount of traffic the busiest site on the internet can be hosed with before the internet itself poops the bed.

So, you know, we did learn something from this whole saga.

Re: Project Shield

#12

Post by willvarfar » Mon, Sep 26, 2016, 7:17 AM UTC

jpalomaki wrote: post #7

Of course I'm not blaming Google or Cloudflare, but it is kind of sad that larger and larger part of the Internet is moving behind their networks. I don't think this kind of centralization is good for the Internet.

The ease at which sites can be DDOSed to oblivion is "why we can't have nice things"? :(

Re: Project Shield

#13

Post by Usu » Mon, Sep 26, 2016, 7:27 AM UTC

yalogin wrote: post #6

Is this a competitor to cloudflare?

Only to CloudFlare Project Galileo: https://www.cloudflare.com/galileo/

Re: Project Shield

#14

Post by [deleted] » Mon, Sep 26, 2016, 7:38 AM UTC

willvarfar wrote: post #5

Fuzzwah wrote: post #3

Post from Brian Krebs about Google using Shield to get Krebs on Security back up and running: https://krebsonsecurity.com/2016/09/the-democratization-of-c...

I follow your link https://krebsonsecurity.com/2016/09/the-democratization-of-c... and I get this: 503 Service Temporarily Unavailable shield So it seems to be running shield, but at least part of the attacks are still getting through? :( Would be very nice to know what kind of attacks Shield doesn't shield against etc.

[deleted]

Re: Project Shield

#15

Post by travisty » Mon, Sep 26, 2016, 7:40 AM UTC

I'd bed that this would only function properly if the controversial story didn't involve Alphabet or it's sub entities.

Re: Project Shield

#16

Post by lostsock » Mon, Sep 26, 2016, 7:44 AM UTC

willvarfar wrote: post #5

Fuzzwah wrote: post #3

Post from Brian Krebs about Google using Shield to get Krebs on Security back up and running: https://krebsonsecurity.com/2016/09/the-democratization-of-c...

I follow your link https://krebsonsecurity.com/2016/09/the-democratization-of-c... and I get this: 503 Service Temporarily Unavailable shield So it seems to be running shield, but at least part of the attacks are still getting through? :( Would be very nice to know what kind of attacks Shield doesn't shield against etc.

"It may take another 24h for my site to come up everywhere. meantime, you could try flushing your DNS cache https://www.whatsmydns.net/flush-dns.html "

https://twitter.com/briankrebs/status/780018241401974784?lan...

I flushed my DNS and it didn't work, then I just hardcoded 130.211.45.45 krebsonsecurity.com in my hosts file and it is working fine.

Re: Project Shield

#17

Post by frozenport » Mon, Sep 26, 2016, 7:46 AM UTC

This is going to play into the hands of authoritarian regimes like China and Russia. They will simply block Google.

Re: Project Shield

#18

Post by drinchev » Mon, Sep 26, 2016, 7:52 AM UTC

jpalomaki wrote: post #7

Of course I'm not blaming Google or Cloudflare, but it is kind of sad that larger and larger part of the Internet is moving behind their networks. I don't think this kind of centralization is good for the Internet.

I don't think this is some sort of centralization.

In the end you always end up with some sort of a cable or router between you and the website that you want to visit. And these companies provide you with protection of that cable / router.

This opens more doors than the ones that it closes.

And sure, you can just detach from CloudFlare and own your traffic, but overall the benefits of using their service are more than the downsides.

Re: Project Shield

#19

Post by headmelted » Mon, Sep 26, 2016, 8:00 AM UTC

headmelted wrote: post #11

willvarfar wrote: post #5

Earlier quoted context omitted.

I follow your link https://krebsonsecurity.com/2016/09/the-democratization-of-c... and I get this: 503 Service Temporarily Unavailable shield So it seems to be running shield, but at least part of the attacks are still getting through? :( Would be very nice to know what kind of attacks Shield doesn't shield against etc.

Completely down from here too. I may need to retract my comments about Akamai. Apparently 680gbps (or whatever it's at now) is the total amount of traffic the busiest site on the internet can be hosed with before the internet itself poops the bed. So, you know, we did learn something from this whole saga.

Update: Back up now.

Re: Project Shield

#20

Post by forthefuture » Mon, Sep 26, 2016, 8:03 AM UTC

jpalomaki wrote: post #7

Of course I'm not blaming Google or Cloudflare, but it is kind of sad that larger and larger part of the Internet is moving behind their networks. I don't think this kind of centralization is good for the Internet.

Pretty sure way more sites are centralized on AWS behind a GUI so unintuitive companies pay Amazon to do it for them.