Jerks on the Internet: what my first DDoS taught me • Hacker News Board

Re: Jerks on the Internet: what my first DDoS taught me

#71

Post by heavenlyblue » Thu, Apr 04, 2019, 12:27 PM UTC

saiya-jin wrote: post #68

derpherpsson wrote: post #61

Earlier quoted context omitted.

It's fun. Or maybe you are angry. Or maybe you just want to test to break it down. Or maybe you just want the programmers to feel sad, maybe because they were boring

Fun in a same way as trashing your neighbor's car just because you like to see sparks and glass shards flying all around. Rather an indication of a sad frustrated life

>> to see sparks and glass shards flying all around

Well, no. If you _only_ liked sparks and glass shards flying all around - you'd buy yourself a car and destroyed it yourself.

Destroying the car of a neighbour implies something going between you and the neighbour.

Re: Jerks on the Internet: what my first DDoS taught me

#72

Post by jjgreen » Thu, Apr 04, 2019, 12:31 PM UTC

dgudkov wrote: post #4

>With growth also come the assholes That pretty much describes the whole history of internet.

... the whole history of our species.

Re: Jerks on the Internet: what my first DDoS taught me

#73

Post by eeeeeeeeeeeee » Thu, Apr 04, 2019, 12:39 PM UTC

eastdakota wrote: post #13

Glad we at Cloudflare could help!

I will also say Cloudflare has saved sites I’ve managed numerous times. I’ve been null routed by major data centers for a few Gbps and they wouldn’t give us any options. It was always “wait.”

Most of the DDoS providers in this space are insanely expensive so I’m very glad Cloudflare has existed!

Re: Jerks on the Internet: what my first DDoS taught me

#74

Post by taneq » Thu, Apr 04, 2019, 12:41 PM UTC

astura wrote: post #15

pravda wrote: post #14

Why not just block all visitors with user agent curl? Let me just say, that's a really dumb DDOS attack. Edit: one other thing, we spell it psych and not sike .

>we spell it psych and not sike. I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days. Wikionary lists it as a variant of "psych." https://en.wiktionary.org/wiki/sike

Spelling it sike is leet.

Re: Jerks on the Internet: what my first DDoS taught me

#75

Post by Zardoz84 » Thu, Apr 04, 2019, 12:54 PM UTC

this is ironic. I just having a DDOS from a botnet on China.

Re: Jerks on the Internet: what my first DDoS taught me

#76

Post by tomglynch » Thu, Apr 04, 2019, 1:25 PM UTC

rlue wrote: post #53

Can anyone shed some light on why someone would go out of their way to conduct an attack like this? Is DoSing production web applications just a hobby for black hat jackasses with nothing better to do?

I helped build a website for a cryptocurrency. We were DDoSed with the attacked contacting us via telegram to demand around $10,000 for him to stop. We told him to stop acting like a fucking child and implemented Cloudflare.

Re: Jerks on the Internet: what my first DDoS taught me

#77

Post by bregma » Thu, Apr 04, 2019, 1:41 PM UTC

rlue wrote: post #53

Can anyone shed some light on why someone would go out of their way to conduct an attack like this? Is DoSing production web applications just a hobby for black hat jackasses with nothing better to do?

In general, about 10% of people are just drizzleshits. Plain and simple.

Re: Jerks on the Internet: what my first DDoS taught me

#78

Post by dangerface » Thu, Apr 04, 2019, 1:48 PM UTC

rlue wrote: post #53

Can anyone shed some light on why someone would go out of their way to conduct an attack like this? Is DoSing production web applications just a hobby for black hat jackasses with nothing better to do?

It's usually kids doing it for the same reason they graffiti or vandalise other peoples stuff.

Re: Jerks on the Internet: what my first DDoS taught me

#79

Post by kikoreis » Thu, Apr 04, 2019, 1:53 PM UTC

Animats wrote: post #44

If you have some kind of expensive request, use fair queuing by IP address. If someone has a request pending, more requests from the same source go behind IP addresses with fewer requests. So each IP address competes with itself, not others. For some reason, this isn't done much. I have it on a site of mine. I didn't notice for a week that someone was making a huge number of requests and not even waiting for the task…

How have you set it up, technology-wise?

Re: Jerks on the Internet: what my first DDoS taught me

#80

Post by jakejarvis » Thu, Apr 04, 2019, 1:56 PM UTC

kuroguro wrote: post #62

Consider limiting HTTP access to Cloudflare's IP range. Looking up DNS history reveals the real IP address for direct attacks. curl -k https://134.209.46.107/products/ -H "Host: api.getmakerlog.com"

Seconded. Argo is also great and makes this even easier (for $5/month).

https://www.cloudflare.com/products/argo-tunnel/