Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cloudflare's new DNS attracting 'gigabits per second' of rubbish

zdnet.com

Post reply on HN
Print view View original

171–180 of 206 posts

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#171

Post by ericfrederich »

0xfeba wrote: post #151

> "Some folk, without any material to justify it, started configuring 1.1.1.1. Now, I can start using your IP address, I suppose, but we're both going to have a problem," Huston told ZDNet, laughing. Ha, I was using 1.1.1.0/24 as my local intranet as an expirement with dnsmasq a few years back. I got scolded for it, rightly so, but I figured as no-one was using 1.1.1.0/24 at the time it was OK. I see I am not the onl…

Who scolded you for it? Wouldn't that just mis-route legitimate traffic to 1.1.1.0/24 locally instead of to the internet?... but you probably had no legitimate traffic there anyway, right?

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#172

Post by rconti »

IntelMiner wrote: post #53
ChuckMcM wrote: post #4

I've seen some of the papers where people look at big chunks of unused address space and watch the probes etc. It is really quite amazing. Once I screwed myself royally by accidentally turning RIP on for the upstream side of my router (connected to the cable modem) and it advertised 192.168/16 which Comcast accepted and started routing random stuff from the local exchange to my router. It was pretty funny talking to…

As an ex-Comcast employee. Seeing stuff like that happen really doesn't surprise me When Comcast first rolled out that data cap nation wide, I started prodding at it one night out of morbid curiosity Turned out that it would silently slurp all HTTP traffic! Once you hit some arbitrary measurement (EG: 50%) it'll immediately start hijacking all HTTP websites you visit and inject a ton of Javascript to put a message ov…

They still inject that message now. I hit 90% almost monthly.

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#173

Post by logfromblammo »

samstave wrote: post #158
ams6110 wrote: post #127

Earlier quoted context omitted.

Spinal tap?

This is networking, so its 'Spinal Vampire Tap'

Backbone Tap. The cover band by NSA employees. They play in venues, inside other venues, that don't officially exist.

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#174

Post by Dunedan »

skrause wrote: post #93
justanone wrote: post #41

Earlier quoted context omitted.

Freakshow \o/

I can understand why this comment was downvoted without any further context, but yes, the podcaster's name is Clemens Schrimpe and he probably mentioned that fact in the German podcast "Freak Show": https://freakshow.fm/

According to the show notes at least in FS117: https://freakshow.fm/fs117-yksi-kaksi

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#175

Post by B1FF_PSUVM »

reaperducer wrote: post #164
sli wrote: post #153

Earlier quoted context omitted.

Same here. Devs can't even mount thumbdrives. Which is fine for us, we don't need them, but it prevents some funny business should one of our laptops get stolen.

Ditto. No flash drives except for special ones distributed by the IT department, and even then it takes a few months of reviews to get one. But we go one further — no development on the LAN. Develop on another server at a different hosting company, and only deploy on the production host when thoroughly vetted.

For some reason, I get this mental image of everybody in a city street dressed in hazmat gear.

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#176

Post by milkmiruku »

Previously (February 2010);

"As part of an effort to de-bogonise this newly allocated address space, RIPE, in cooperation with APNIC, made some test advertisements to the global BGP table for several prefixes with 1.0.0.0/8. Specifically, these networks included 1.1.1.0/24 and 1.2.3.0/24. Why these networks? Because they contain the novel (and illegal) IPv4 addresses 1.1.1.1 and 1.2.3.4, of course.

"Shortly after announcing the routes to the world, RIPE's RIS was flooded with over 50 Mbps of traffic destined for what is still an unallocated network; it should not appear on the global Internet."

* http://packetlife.net/blog/2010/feb/5/ripe-plays-with-1-0-0-...

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#177

Post by croshan »

ptaipale wrote: post #89
jakobegger wrote: post #80

From a marketing point of view, I think it was a brilliant move from Cloudflare to get the 1.1.1.1 address. Clearly better than 8.8.8.8! But from a user perspective, why couldn't they have just let that address be... So many things are going to break just because Cloudflare wants a pretty IP. Sure, the things that break were using a hack, but in my opinion that doesn't automatically make it okay to break it. Now I'm…

8.8.8.8 goes pretty well in the Chinese market. (8 being a popular number.) I think 1.1.1.1 is not such a hit.

Eh, I don't think it goes as well as you think, considering it's been banned for years [0].

[0]: https://www.reddit.com/r/sysadmin/comments/2komqe/china_bloc...

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#178

Post by 0xfeba »

ericfrederich wrote: post #171
0xfeba wrote: post #151

> "Some folk, without any material to justify it, started configuring 1.1.1.1. Now, I can start using your IP address, I suppose, but we're both going to have a problem," Huston told ZDNet, laughing. Ha, I was using 1.1.1.0/24 as my local intranet as an expirement with dnsmasq a few years back. I got scolded for it, rightly so, but I figured as no-one was using 1.1.1.0/24 at the time it was OK. I see I am not the onl…

Who scolded you for it? Wouldn't that just mis-route legitimate traffic to 1.1.1.0/24 locally instead of to the internet?... but you probably had no legitimate traffic there anyway, right?

Who? I don't remember. Someone on HN/reddit. It was a mild scolding in the same vein as in the article.

And yes, that's what it would do. And no, I didn't. Made it easier to type in IPS, that's for sure.

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#179

Post by dkersten »

AdamTReineke wrote: post #57
z3t4 wrote: post #5

I used to play a game where each kingdom had an address (kingdom:island) if you where on kingdom one on island one (1:1) you would get attacked all the time no matter how much defense you had. If you landed on 1:1 you where basically doomed.

Utopia, right?

Oh man, I remember this too. A friend of mine ended up leader of a huuuuuge alliance for a number of years back in 2004 or so and a few years ago I had a few sit down meetings with the current owners of the game when I was doing an analytics startup. (AFAIK the game is still running)

Re: Cloudflare's new DNS attracting 'gigabits per second' of rubbish

#180

Post by username223 »

tialaramex wrote: post #144
username223 wrote: post #92

Earlier quoted context omitted.

Such are the joys of modern "customer support" -- human beings don't scale, because they need to sleep and can only talk to one other human at a time. So you hire the cheapest ones you can find, and instruct them to be minimally helpful. Even better, make them all "managers," so "can I please speak to your manager" will just take you to another minimum-wage employee. If you want actual customer support these days, yo…

A smarter, and perhaps even more profitable way to approach this problem is "OK, we want almost everything that happens to customers to be a self-serve situation" and then make your (fewer) call centre employees highly trained troubleshooters who can figure out why _this_ customer wasn't able to self-serve and get that sorted for them. The result is a better customer experience (usually everything just works, when yo…

Often I prefer "self-serve," but sometimes I like to talk to a human who knows about the system that has created my problem, and can quickly fix it. That's why there are websites dedicated to showing people how to skip through phone menus and reach actual humans, even if those humans are soundboard operators paid almost nothing to make you go away.
Post reply on HN