Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub is getting DDoSed again

status.github.com

Post reply on HN
Print view View original

41–50 of 75 posts

Re: GitHub is getting DDoSed again

#41

Post by philwelch »

tatsuke95 wrote: post #32
smtddr wrote: post #25

Earlier quoted context omitted.

> wonder if these attacks are related to the Chinese hacking attacks that have been publicised lately? Might be just me, but I don't like this trend. I'm seeing "the chinese" & "hacking" used too much together without proof more often than not. Almost as if they are being made into the next boogeyman to be afraid of.

> "I'm seeing "the chinese" & "hacking" used too much together without proof more often than not." Get used to it, you're going to be seeing it for what is likely a few decades at least. We need an enemy. The Chinese are the new Red Army; something to blame Western problems on.

It's a remix of anti-Communism and the type of anxiety we used to feel about Japan's economic power.

Re: GitHub is getting DDoSed again

#42

Post by nwzpaperman »

sixbrx wrote: post #38

I consider it evidence that when some punk figures out how to make a black hole, we're done for. No reason necessary.

Probably a "sovereign hacker" as non-sovereign-employed programmers are naturally aligned with the open values and creativity that github exists for.

As far as motive goes, if github can be electronically terrorized, laws to protect them and everyone from future electronic terrorism only make sense, right?

Eee-ooooo

Always do what you can to understand motive!

Re: GitHub is getting DDoSed again

#43

Post by buttscicles »

tomjen3 wrote: post #26
Negitivefrags wrote: post #9

Earlier quoted context omitted.

I often have to wonder if the DDoS gods roll a dice and pick someone to screw each day. We have had many DDoS attacks and never once had any indication as to why. A few days ago we had a 30 Gbit DDoS. Our server host just blackholed any IP that was touched by it. They kept moving it around to target different bits of our infrastructure (unlike previous attacks that just targeted our website). We lost 6 servers, but t…

Get a smaller host, that way they can't afford to cut you of.

I'd imagine they'd rather cut off somebody than potential performance degradation for other paying customers.

Re: GitHub is getting DDoSed again

#44

Post by nwzpaperman »

tatsuke95 wrote: post #32
smtddr wrote: post #25

Earlier quoted context omitted.

> wonder if these attacks are related to the Chinese hacking attacks that have been publicised lately? Might be just me, but I don't like this trend. I'm seeing "the chinese" & "hacking" used too much together without proof more often than not. Almost as if they are being made into the next boogeyman to be afraid of.

> "I'm seeing "the chinese" & "hacking" used too much together without proof more often than not." Get used to it, you're going to be seeing it for what is likely a few decades at least. We need an enemy. The Chinese are the new Red Army; something to blame Western problems on.

Sovereign nations do employ significant signal intelligence resources to defend their government. The Chinese are heavily invested and have been responsible for the majority of attacks on US IT infrastructure for years. It wasn't discussed openly before because the trade relations weren't degraded/ing like they are today.

In case you've missed the memo, they're threatening all of their neighbors outright with kinetic military force. Japan is no trivial country to threaten force against, so the diplomatic climate has changed and more information is being shared publicly in anticipation of an outright military conflict.

There are conflicting interests between individuals that lead to physical fights and the same applies to sovereign nations whose interests run contrary.

Re: GitHub is getting DDoSed again

#45

Post by mratzloff »

citricsquid wrote: post #8
DigitalSea wrote: post #4

This happened back in October a couple of days in a row. Who the heck is targeting Github and why? I wonder if these attacks are related to the Chinese hacking attacks that have been publicised lately?

Nowadays it's so easy to execute a large scale ddos that it's just as likely to be an attention starved teenager as it is a group with an agenda. Github is big enough that it's on peoples radars as "that popular website lots of people rely on", the company I work for has websites smaller than Github and we're indiscriminately ddosed every couple of days.

DDoS attempts are just as often business related as not. Maybe not in this case, but it's "surprising" how often these coincide with a business deal in the works. Also, potential partners (usually international) sometimes run DDoS tests against a network to see how resilient it is to attack.

Re: GitHub is getting DDoSed again

#47

Post by superbaconman »

martinced wrote: post #22

If several countries, distribute across various continents, have managed to put in place three-strikes and six-strikes (not that I think it's good), it means that the one and foremost knee-jerking argument saying "You can't do anything about DDoS because: [X] It's technically not realist" is gone. Technically now ISPs could throttle the bandwith (or even disallow net access) to zombies boxen used in DDoS attacks in a…

Who's the ISP gonna throttle? It's next to impossible to tell the difference between a legitimate request and a zombie. Also not all zombies are knowing contributing to a ddos. Are you gonna kick grandpa off the net cause he doesn't think before he clicks? Make no mistake this is a very technically hard problem to solve. DDoS attacks aren't going anywhere anytime soon.

Re: GitHub is getting DDoSed again

#49

Post by darkarmani »

tatsuke95 wrote: post #32
smtddr wrote: post #25

Earlier quoted context omitted.

> wonder if these attacks are related to the Chinese hacking attacks that have been publicised lately? Might be just me, but I don't like this trend. I'm seeing "the chinese" & "hacking" used too much together without proof more often than not. Almost as if they are being made into the next boogeyman to be afraid of.

> "I'm seeing "the chinese" & "hacking" used too much together without proof more often than not." Get used to it, you're going to be seeing it for what is likely a few decades at least. We need an enemy. The Chinese are the new Red Army; something to blame Western problems on.

> something to blame Western problems on.

That sounds really ignorant. DDoS is not a situation of east versus west.

Re: GitHub is getting DDoSed again

#50

Post by krunaldo »

ghratch wrote: post #14
irq wrote: post #11

Earlier quoted context omitted.

When they improve their netops chops. Their recent junior-level mistakes (like improper spanning tree settings) are an indication of the level of their skill in this area.

I thought spanning trees were elected/discovered automatically by the routers themselves instead of being manually set up.

Yes and no :)

The tree is built up automatically but you can weight the paths and also which is the start node of the tree. There are also a lot of settings that may or may not completely fuck you over or fix a problem.

Also you really want to disable STP on ports going to servers as this will 1) speed up recovery 2) prevent any malicious packets going out from them.

Post reply on HN