This is a good chance to move over to http://gist.github.com for all your pasting needs.
Hastebin is pretty awesome too. http://hastebin.com/
Pastie.org host pulls hosting after DDoS attack
81–90 of 90 posts
Re: Pastie.org host pulls hosting after DDoS attack
#82I'd like to apologize to those who have been negatively impacted by my decision to pull support for Pastie (especially Josh). To understand why I made the decision to pull our support after 9 hours of multiple DDOS attacks, I'd like to share some background and our ops philosophy. It is important to understand that I put our existing customers that pay us to manage and scale their high growth revenue-generating web a…
You made the absolute right decision, and anybody that is saying otherwise hasn't been in your position. The good of the many over the good of the one; that's hosting.
The operational awareness in this comment makes me wish everybody would print it out as an example of a tough call to make in defense of your brand.
Re: Pastie.org host pulls hosting after DDoS attack
#83I'd like to apologize to those who have been negatively impacted by my decision to pull support for Pastie (especially Josh). To understand why I made the decision to pull our support after 9 hours of multiple DDOS attacks, I'd like to share some background and our ops philosophy. It is important to understand that I put our existing customers that pay us to manage and scale their high growth revenue-generating web a…
You made the absolute right decision, and anybody that is saying otherwise hasn't been in your position. The good of the many over the good of the one; that's hosting. The operational awareness in this comment makes me wish everybody would print it out as an example of a tough call to make in defense of your brand.
Throwing the victim under the bus is standard procedure for third rate hosters. Doing it without notice is even worse.
Only if the brand is "we're el cheapo hosting cowboys" it's the right decision.
Re: Pastie.org host pulls hosting after DDoS attack
#84This behavior of unplugging the destination of the DDoS is common with smaller hosts. They don't have the capital to spend on expensive mitigation devices. There are times when these attacks affect their entire network (bad design), so their quick and fast solution is to null route you at their cores.
"Smaller hosts" like this are imho companies that sell a service they are fundamentally unable of actually maintaining. And they are usually not very transparent about it.
Re: Pastie.org host pulls hosting after DDoS attack
#85I know I'll get a lot of shit for this but good riddance. I hope it never comes back. I've felt this way since I found my stolen accounts posted on Pastie and they ignored requests to take it down.
Once they're on pastie, it's already too late.
Re: Pastie.org host pulls hosting after DDoS attack
#86Earlier quoted context omitted.
You made the absolute right decision, and anybody that is saying otherwise hasn't been in your position. The good of the many over the good of the one; that's hosting. The operational awareness in this comment makes me wish everybody would print it out as an example of a tough call to make in defense of your brand.
Throwing the victim under the bus is standard procedure for third rate hosters. Doing it without notice is even worse. Only if the brand is "we're el cheapo hosting cowboys" it's the right decision.
You ignore the fact the this customer wasn't paying for the hosting. He only costs them money, a lot of time (through dealing with DMCAs, DDoSs and more).
At this point they had to make a choice and they chose for their paying customers and drop pastie.org
Re: Pastie.org host pulls hosting after DDoS attack
#87Earlier quoted context omitted.
Any given site might not experience a DDoS attack, but if you run a hosting company, it will happen. The frequency depends on how many customers you have, how popular they are, etc. If a DDoS attack catches you by surprise, then you are very ill-prepared. One possible strategy is to throw the targeted customer under the bus and call it a day. For hosts of a certain size, that may be reasonable, as long as you clearly…
> I've seen these attacks mitigated single-handedly by an experienced fellow with no access to fancy equipment. I believe it went something like this, change the DNS to point at some EC2 instances to do front-end load balancing with some scripts that detect and drop connections from attacking IP addresses and do severe rate limiting. You can proxy legitimate requests back to the original servers. That isn't how it wo…
All the hosting companies I've been hosted with will react to an attack like this with null routing the victim ip address. Completely agree.
Re: Pastie.org host pulls hosting after DDoS attack
#88If you're looking for more of a minimal snippet experience there's always http://marked.cc
Unless you're pasting code. Check out my trivial example: http://www.marked.cc/4f9766f05e69190001000017
It does support code snippets you just have to use fenced code blocks ala Github style.
``` x = [] ```
Re: Pastie.org host pulls hosting after DDoS attack
#89Earlier quoted context omitted.
You made the absolute right decision, and anybody that is saying otherwise hasn't been in your position. The good of the many over the good of the one; that's hosting. The operational awareness in this comment makes me wish everybody would print it out as an example of a tough call to make in defense of your brand.
Throwing the victim under the bus is standard procedure for third rate hosters. Doing it without notice is even worse. Only if the brand is "we're el cheapo hosting cowboys" it's the right decision.
This was obviously a difficult decision for Rails Machine. I put food on the table from an application we've hosted at Rails Machine for several years: they are simply a fantastic team to work with. I can't imagine using a different Rails hosting provider.
Re: Pastie.org host pulls hosting after DDoS attack
#90I'd like to apologize to those who have been negatively impacted by my decision to pull support for Pastie (especially Josh). To understand why I made the decision to pull our support after 9 hours of multiple DDOS attacks, I'd like to share some background and our ops philosophy. It is important to understand that I put our existing customers that pay us to manage and scale their high growth revenue-generating web a…
I think this was a hard decision and I really believe that you're trying to protect your business, but I also believe this is the wrong decision.
- Not being able to handle 100s abusive requests is an indication that you can't handle rapid growth. You're going to (want to) host other websites that can grow big and will catch a lot of wind. Although there is no direct revenue for you Pastie.Org was good practice for this it seems also this wasn't a sudden problem (you yourself indicate here that the problem was slowly growing) so this should be no factor in the decision to terminate the hosting so suddenly. Of course if it's more hassle than it's worth you and Pastie can come to an agreement (like stopping next month) but it now sounds like that decision should've been made months earlier or not yet at all.
- Although it's extremely hard to protect yourself from DDOS attacks you've now openly indicated that you're vulnerable and that you will drop things you are committed to do if there is some pressure in order to save the rest of your customers. This will make other customers nervous since they can now be easily threatened and might even go down for the fun of it (I personally don't think it's fun but some people apparently do)
- Even though pastie.org was not generating any revenue and was not a 'customer' you still had a commitment to them and tbh it looks pretty bad that you've one-sidedly decided in an instant to break that commitment, this is really costing you cred.
Of course what's done is done now, but I just wanted to voice my opinion in this debate. Say I'm a devil's advocate here because by the positive comments here mostly you guys seem to be doing mostly good!