Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

The Internet Archive is under a DDoS attack

mastodon.archive.org

Post reply on HN
Print view View original

221–227 of 227 posts

Re: The Internet Archive is under a DDoS attack

#221

Post by BenjiWiebe »

brokenmachine wrote: post #220
BenjiWiebe wrote: post #218

Earlier quoted context omitted.

That won't fix the issue of your inbound pipe being saturated, preventing legitimates from accessing your site.

I believe it would though? Isn't that the whole point? If you need PoW for every connection, it's going to end up being very expensive for an attacker to saturate the connection. And the captcha is probably a different server to the main site.

You can't check the PoW until it's at your connection. Do you mean that every packet everywhere would have PoW that is checked by their ISP/upstream?

Re: The Internet Archive is under a DDoS attack

#222

Post by brokenmachine »

BenjiWiebe wrote: post #221
brokenmachine wrote: post #220

Earlier quoted context omitted.

I believe it would though? Isn't that the whole point? If you need PoW for every connection, it's going to end up being very expensive for an attacker to saturate the connection. And the captcha is probably a different server to the main site.

You can't check the PoW until it's at your connection. Do you mean that every packet everywhere would have PoW that is checked by their ISP/upstream?

No, I meant just a usual gateway.

I thought a gateway would work for that purpose.

Are you sure it wouldn't? In that case there's no defending against ddos.

Re: The Internet Archive is under a DDoS attack

#223

Post by ASalazarMX »

gumby wrote: post #146
matsemann wrote: post #76

Earlier quoted context omitted.

What's the significance of that? (Googling "Jason Scott TIA" gives me "Dr Jason Scott is a Senior Research Fellow in the Tasmanian Institute of Agriculture" which doesn't explain much to me)

The Tasmanian Institute of Agriculture are well known for their work on biological models of computer security architecture. I am shocked that any HN reader could be ignorant of this fact. Their director is a (controversial) Turing Award winner.

"Homomorphic encryption using selectively-bred rice yeast and corn fungus" by Jason Scott, TIA.

Re: The Internet Archive is under a DDoS attack

#224

Post by BenjiWiebe »

brokenmachine wrote: post #222
BenjiWiebe wrote: post #221

Earlier quoted context omitted.

You can't check the PoW until it's at your connection. Do you mean that every packet everywhere would have PoW that is checked by their ISP/upstream?

No, I meant just a usual gateway. I thought a gateway would work for that purpose. Are you sure it wouldn't? In that case there's no defending against ddos.

A gateway (router/firewall) on your own connection cannot protect you against a DDoS. Really nothing at your connection can prevent you from getting DDoSed. The attacker can cause you to go offline/degraded even if you are 100% successful at dropping his packets. They still fill up your inbound pipe and prevent (or majorly hinder) legitimate traffic from fitting in.

The filtering/dropping of packets has to be upstream of your connection to be able to protect your connection - additionally somewhere where the available bandwidth is greater than the attacker's bandwidth.

Re: The Internet Archive is under a DDoS attack

#225

Post by dspillett »

Brian_K_White wrote: post #216
dspillett wrote: post #178

Earlier quoted context omitted.

Which without context that is not given I certainly didn't know, so it isn't safe to expect others to know to. Are we supposed to dig into people's profiles to derive relevant context?

One could also argue that this is merely being conversant on the topic one is conversing on. And not taking on the job of police when you don't know as much as you think you do, such as the speakers whose speech you presume to police. You might not know the significance of "textfiles says no", but you do know that in general it's a thing that on HN, sometimes the rando is no rando, and you do know that you're not dan…

> but you do know that in general it's a thing that on HN, sometimes the rando is no rand

Sometimes. More often than many other places we could mention. But in the majority of cases, even here, a rando is a rando. And if the randos see the accepted conventions being ignored without comment it might encourage them to do it more.

> Jason could have added

I'd argue should have.

> But he would have to say that in front of every comment he ever writes

Only comments where it is significantly relevant, or in this case where his experience and proximity to the issue at have might be considered enough to ignore the standard commenting conventions.

Re: The Internet Archive is under a DDoS attack

#226

Post by tarboreus »

Lammy wrote: post #105

This is why I’ve gotten into the habit of maintaining my own WWW archive of sites I find interesting. Probably have around 1 TiB now, and One Of These Days I’d like to set my network up so it can serve arbitrary sites directly from local archive to revive any site I want. I have a `wget-mirror` shell function invoking wget with all the trimmings that takes care of 99% of sites. I’ll edit the full command into this co…

Can we see the command? I've been using this one:

wget \ --recursive \ --mirror \ --timestamping \ --page-requisites \ --html-extension \ --convert-links \ --restrict-file-names=windows \ --no-parent \ $url

Re: The Internet Archive is under a DDoS attack

#227

Post by Lammy »

tarboreus wrote: post #226
Lammy wrote: post #105

This is why I’ve gotten into the habit of maintaining my own WWW archive of sites I find interesting. Probably have around 1 TiB now, and One Of These Days I’d like to set my network up so it can serve arbitrary sites directly from local archive to revive any site I want. I have a `wget-mirror` shell function invoking wget with all the trimmings that takes care of 99% of sites. I’ll edit the full command into this co…

Can we see the command? I've been using this one: wget \ --recursive \ --mirror \ --timestamping \ --page-requisites \ --html-extension \ --convert-links \ --restrict-file-names=windows \ --no-parent \ $url

Right here :) https://news.ycombinator.com/item?id=40496558
Post reply on HN