Live data from Hacker News

Jerks on the Internet: what my first DDoS taught me

sergiomattei.com

11–20 of 95 posts

Re: Jerks on the Internet: what my first DDoS taught me

#11
Good steps to take in the article. But I'd also add that Django REST Framework, which they seem to be using, has throttling capabilities built-in which I would have attempted before changing the API: https://www.django-rest-framework.org/api-guide/throttling/

Adding pagination seems reasonable, but it may have broken clients who didn't expect pagination to be there.

Re: Jerks on the Internet: what my first DDoS taught me

#15
post #14

Why not just block all visitors with user agent curl? Let me just say, that's a really dumb DDOS attack. Edit: one other thing, we spell it psych and not sike .

>we spell it psych and not sike.

I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days.

Wikionary lists it as a variant of "psych."

https://en.wiktionary.org/wiki/sike

Re: Jerks on the Internet: what my first DDoS taught me

#16
post #15
post #14

Why not just block all visitors with user agent curl? Let me just say, that's a really dumb DDOS attack. Edit: one other thing, we spell it psych and not sike .

>we spell it psych and not sike. I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days. Wikionary lists it as a variant of "psych." https://en.wiktionary.org/wiki/sike

oh..gosh. well, that makes sense, in a way.

I confess I did have to google how to spell 'psych' properly. started from 'pysch'.

Re: Jerks on the Internet: what my first DDoS taught me

#17
>which hosts other in-development apps too

Don't do that

>I trust my users completely.

Don't do that

>Prioritize bugfixes over new features

while that is a nice thought, it is unlikely to be so simply followed. "the road to hell is paved with good intentions"

>people editing other’s tasks for example, haha

That's a very cavelier attitude to take. Quite frankly that should have been baked in from the get go with tests to verify.

You see this situation as someone being a jerk. Someone could have accidentally done the same thing due to the lack of planning on multiple levels.

Re: Jerks on the Internet: what my first DDoS taught me

#18
post #16
post #15

Earlier quoted context omitted.

>we spell it psych and not sike. I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days. Wikionary lists it as a variant of "psych." https://en.wiktionary.org/wiki/sike

oh..gosh. well, that makes sense, in a way. I confess I did have to google how to spell 'psych' properly. started from 'pysch'.

I mostly learned how to spell it recently from looking up filming location for the show Psych.
Post reply on HN