Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DDoS Attack Against Dyn Managed DNS

dynstatus.com

Post reply on HN
Print view View original

161–170 of 721 posts

Re: DDoS Attack Against Dyn Managed DNS

#161

Post by Filligree »

pyvpx wrote: post #120
dijit wrote: post #116

Earlier quoted context omitted.

Realistically they compete with Neustar which is shockingly expensive and has less features and is harder to use. I chose Dyn over Neustar (UltraDNS) when it was time to renew contracts because it was 60% cheaper, had a better latency, their support was great and the interfaces were clear. Not a fanboy or anything, I really don't like how aggressively they hound me now (even though I have nothing to do with DNS for m…

they are cheap compared to Neustar. And Neustar is priced like a Bugatti. Dyn is more Porsche pricing.

Way, way back in time, they offered lifetime DNS hosting for a relatively low price.

I bought that, and they've honored the deal. Admittedly it comes with limits that would make it useless for any large site, but it's just great for individuals.

Re: DDoS Attack Against Dyn Managed DNS

#162

Post by mzw_mzw »

curiousgal wrote: post #31
scrollaway wrote: post #18

Relevant (or at least a-propos) post by Bruce Schneier, from a month ago: "Someone Is Learning How to Take Down the Internet" https://www.schneier.com/blog/archives/2016/09/someone_is_le... Edit: And to be clear: I don't mean to imply there's any connection :)

>We don't know who is doing this, but it feels like a large nation state. China or Russia would be my first guesses. Why not the USA?

Why the USA?

Re: DDoS Attack Against Dyn Managed DNS

#163

Post by mzw_mzw »

rdtsc wrote: post #149
AsyncAwait wrote: post #123

Earlier quoted context omitted.

The usual thinking goes something like; well, the US created the internet so why would they want to take it down? Yes, NSA spies and all that, but they need the internet up to do that and also as bad as NSA is, it's nowhere near as bad as China or Russia where they ... (ranges from censorship to eating babies alive)

> The usual thinking goes something like; well, the US created the internet so why would they want to take it down? To pin it on someone else? "17 Intelligence agencies told me Russia hacked our DNC thing" (Clinton). So maybe it is now "Oh look they took down the whole internet as well".

>To pin it on someone else?

That's... kind of conspiratorial thinking? Would you cut off your own hand so you could blame it on someone else?

Re: DDoS Attack Against Dyn Managed DNS

#165

Post by detaro »

detaro wrote: post #118
owenwil wrote: post #15

Earlier quoted context omitted.

Definitely a DNS cache on your computer (Or even in Chrome)

I can query the authoritative ns*.p16.dynect.com DNS servers from Europe (Germany in my case), and the traceroute looks like it's near Frankfurt. So the anycasted copies here seem fine.

and now these seem down as well. EDIT: and up again half an hour later

Re: DDoS Attack Against Dyn Managed DNS

#166

Post by lukasm »

lanna wrote: post #104
jssjr wrote: post #68

I'm a GitHub employee and want to let everyone know we're aware of the problems this incident is causing and are actively working to mitigate the impact. "A global event is affecting an upstream DNS provider. GitHub services may be intermittently available at this time." is the content from our latest status update on Twitter ( https://twitter.com/githubstatus/status/789452827269664769 ). Reposted here since some peo…

This is what you can do to restore your GitHub access: grep github ~/.ssh/known_hosts sudo vim /etc/hosts sudo killall -HUP mDNSResponder ping github.com

I added

192.30.253.112 github.com

but https://assets-cdn.github.com is failing

EDIT: Use 192.30.253.112 github.com 151.101.24.133 assets-cdn.github.com

or try 8.8.8.8 DNS

Re: DDoS Attack Against Dyn Managed DNS

#167

Post by dlg1416 »

tunap wrote: post #82
artursapek wrote: post #10

Twitter, Reddit, wow. I was so confused for a moment. Thankfully HN is here to explain.

I had several, sporadic 'secure connection could not be established' yesterday while trying to open HN, amongst others. Painfully slow page load times across the board, too(Craigslist, Monoprice,weather.gov, etc) Still may be my buggy phone SIM...

wait, buggy phone sims is a thing?

Re: DDoS Attack Against Dyn Managed DNS

#168

Post by snug »

alberts00 wrote: post #102
afshinmeh wrote: post #91

Earlier quoted context omitted.

yup, that's what I meant. they can use different DNS providers, e.g. route53 AND dyn

Route53 doesn't allow using it as slave DNS. https://forums.aws.amazon.com/thread.jspa?threadID=56011

Thats why you should have a different domainname

githubstatus.com instead of status.github.com

You could even through the domain on a free DNS service.

Re: DDoS Attack Against Dyn Managed DNS

#170

Post by Symbiote »

wongarsu wrote: post #106
jtmarmon wrote: post #4

I'm updating a list of confirmed outages as I see them here https://news.ycombinator.com/item?id=12759520 So far twitter, etsy, soundcloud, spotify, github, pagerduty...crazy that this can even happen

All of these work for me from Germany, and querying their authorative nameservers works just fine (so definitely no caching effect). Anycast for the win!

They don't work from Denmark, at 16:17 UTC.
Post reply on HN