Live data from Hacker News

DDoS Attack Against Dyn Managed DNS

dynstatus.com

91–100 of 721 posts

Re: DDoS Attack Against Dyn Managed DNS

#91
post #80

Earlier quoted context omitted.

Most services, even if they aren't the size of Github, can't change their DNS provider on a dime.

It's not a question of switching; you can host your DNS records at multiple providers.

yup, that's what I meant. they can use different DNS providers, e.g. route53 AND dyn

Re: DDoS Attack Against Dyn Managed DNS

#92
post #61

Earlier quoted context omitted.

And I'm so damn tired of people complaining about cost to run stuff locally. The true cost of not having some basic stuff setup locally, even for backup purposes is when situation like this happens. It does not take long time or resources to download all of the libraries, with corresponding docs to a local server, or even your laptop. It is not complicated to have all of the new issues sent to an email to have a vers…

>And you don't need a sysadmin to administer all of that. I disagree with that. If you have a server, you need a sysadmin. End of story. Who is going to secure the system and setup ssh keys? who is going to run updates? who is going to monitor for security issues? who is going to run backups? who is going to secure those backups? who is going to oversee the installation of the network, the battery backups, the racks,…

If you have any substantial business, you already have a sysadmin on your team. He's not doing his job if he has no local versions of almost everything that is online. He should be staging everything locally, before deploying to the cloud. The currently very popular way of deploying everything live, without any testing, or staging is one of the reasons behind current crappy state of the internet.

Re: DDoS Attack Against Dyn Managed DNS

#93
post #68

I'm a GitHub employee and want to let everyone know we're aware of the problems this incident is causing and are actively working to mitigate the impact. "A global event is affecting an upstream DNS provider. GitHub services may be intermittently available at this time." is the content from our latest status update on Twitter ( https://twitter.com/githubstatus/status/789452827269664769 ). Reposted here since some peo…

If this is consistently a problem why doesn't Github have fallback TLDs that use different DNS providers? Or even just code the site to work with static IPs. I tried the Github IP and it didn't load, but that could be for an unrelated issue.

> If this is consistently a problem why doesn't Github have fallback TLDs I don't believe this has been consistently a problem in the past. But after today big services probably will have fallback TLDs.

Re: DDoS Attack Against Dyn Managed DNS

#94
post #47

Earlier quoted context omitted.

why?

Because America is an Orwellian hellhole, gawd, haven't you read animal house 84?!

um. if you are basing your logic on orwelianness then the England should be your your top candidate. massive monitoring of the populace, severe restrictions on the ability to carry anything that is vaguely pointy or goes bang, poor freedom of speech rules (relative to the US).... I love England but as far as orwellian societies go, you can do notably worse than the US.

Re: DDoS Attack Against Dyn Managed DNS

#95
post #55

Earlier quoted context omitted.

>We don't know who is doing this, but it feels like a large nation state. China or Russia would be my first guesses. Why not the USA?

It doesn't make a whole lot of sense for the USA to take down the internet, as they benefit the most from it. A significant fraction of that economy is based on it, much larger than in the cases of China and Russia. It would be like the owner of a coal mine campaigning for a carbon emissions tax: maybe there's something we don't know, but from the information we have it seems unlikely. Note that this wouldn't rule ou…

For either of your cases, I can't imagine the value of having it last this long, or even be this severe. The impact on the economy and trust in a infrastructure company is too high.

I'd be more willing to put my money on someone attacking an entity downstream who is normally immune to DDOS attacks of this size.

Re: DDoS Attack Against Dyn Managed DNS

#97
post #47

Earlier quoted context omitted.

Because America is an Orwellian hellhole, gawd, haven't you read animal house 84?!

the number of people missing the sarcasm in your post is worrying

Because it's being down voted? I think any down votes are more likely because the comment doesn't add substantively to the conversation and is distracting given other recent threads.

Re: DDoS Attack Against Dyn Managed DNS

#99
post #61

Earlier quoted context omitted.

I'm so damn tired of the "host it locally" mentality. Not everyone has the resources to host all of that locally. For example, most open source projects. But even outside of that, we use github for issue tracking, the new project management kanban stuff, a CI server, reading documentation (which is offline, but the online versions are nicer on the eyes), and a ton more. Not to mention that StackOverflow and other dis…

And I'm so damn tired of people complaining about cost to run stuff locally. The true cost of not having some basic stuff setup locally, even for backup purposes is when situation like this happens. It does not take long time or resources to download all of the libraries, with corresponding docs to a local server, or even your laptop. It is not complicated to have all of the new issues sent to an email to have a vers…

This is a DNS outage.

If self-hosted, somewhere, you could still be screwed by having Dyn as your DNS provider.

If dev-machine-hosted, then uh, your issue tracker is no longer an issue tracker. Your build server is not a build server. All the services besides Git are not meant to operate offline in a decentralized/distributed fashion.

Library documentation, sure, that could be local. Otherwise, your assertion that all of this tools infrastructure can somehow be replicated, easily, in a way that makes the difference between working online or offline effectively zero, is nonsense.

Re: DDoS Attack Against Dyn Managed DNS

#100

Earlier quoted context omitted.

The zsh default git plugin definitely doesn't touch github, or the network in general. Are you using some oh-my-zsh github plugin by any chance?

plugins=(git rbenv nvm gitfast zsh-autosuggestions github)

So, yes.

https://github.com/robbyrussell/oh-my-zsh/wiki/Plugins#githu...

oh-my-zsh is, imho, way overengineered and bloated. Leads to all sorts of issues like the one you're encountering there.

I would recommend sticking to a plain zshrc file that you can read, edit and fully understand.

The one I wrote and am using day to day is available here, with documentation: https://github.com/jleclanche/dotfiles

Post reply on HN