Live data from Hacker News

GitHub is getting DDoSed again

status.github.com

61–70 of 75 posts

Re: GitHub is getting DDoSed again

#61
post #60

There are people who suggest that a DDoS is just a 'digital sit in', a legitimate way for someone to air a grievance, if they think the targets (or world) haven't paid them enough attention. This view makes DDoS seem more normal or even romantic/heroic, and spreads the tools/know-how more widely. So, pulling off a DDoS becomes a more plausible and attractive aspiration, for a larger set of surly people with marginal…

Does anybody know what grievance is being aired here?

Re: GitHub is getting DDoSed again

#62

Reading status.github.com over the last few weeks, I found it interesting how often little things were broken at Github. It's like every few days, a small part of the site is unavailable or the sysadmins are investigating this or that connectivity issue. I guess when you're as big as Github, keeping your site live and operational is completely nontrivial.

This is basically SOP at any reasonably large organization. The difference is that Github tells you about it.

Re: GitHub is getting DDoSed again

#63
post #40

Is it just me or has github been down a lot in the later months (moreso than a year ago)? DDoS or otherwise, it doesn't inspire confidence, especially for paid accounts (which I considered but ultimately decided to go with another solution)

Github has 99.9585% uptime past month. That's like 22 minutes of downtime per month.

Re: GitHub is getting DDoSed again

#64
post #55

It may be time for GitHub to build out multiple availability data centers and use BGP as an anycast tool. We do this. I have public facing IPv4 space that is announced from multiple facilities. Having an IP address hosted from multiple facilities is a powerful tool. This allows providers to hit our datacenter through the least amount of ASN routes. We original did this to minimize latency and create faster regional t…

Thanks for the book recommendation. Is that the one by Iljitsch van Beijnum?

Other than the added complexity, can you share any details about the cost? It seems like theoretically some managed hosting providers could offer this assuming they were in multiple datacenters, but I haven't seen any that do.

Re: GitHub is getting DDoSed again

#65

If several countries, distribute across various continents, have managed to put in place three-strikes and six-strikes (not that I think it's good), it means that the one and foremost knee-jerking argument saying "You can't do anything about DDoS because: [X] It's technically not realist" is gone. Technically now ISPs could throttle the bandwith (or even disallow net access) to zombies boxen used in DDoS attacks in a…

> "Technically now ISPs could throttle the bandwith (or even disallow net access)" Most ISPs charge for bandwidth. Outside of governmental coercion, is there any incentive for them to do this?

Most charge for incoming but not outgoing, which is what would be used in a DOS attack.

Re: GitHub is getting DDoSed again

#66
post #60

There are people who suggest that a DDoS is just a 'digital sit in', a legitimate way for someone to air a grievance, if they think the targets (or world) haven't paid them enough attention. This view makes DDoS seem more normal or even romantic/heroic, and spreads the tools/know-how more widely. So, pulling off a DDoS becomes a more plausible and attractive aspiration, for a larger set of surly people with marginal…

Does anybody know what grievance is being aired here?

Maybe because you have to pay for private projects and Bitbucket UI still isn't as fresh as Github's.

Re: GitHub is getting DDoSed again

#67

Earlier quoted context omitted.

> "I'm seeing "the chinese" & "hacking" used too much together without proof more often than not." Get used to it, you're going to be seeing it for what is likely a few decades at least. We need an enemy. The Chinese are the new Red Army; something to blame Western problems on.

Sovereign nations do employ significant signal intelligence resources to defend their government. The Chinese are heavily invested and have been responsible for the majority of attacks on US IT infrastructure for years. It wasn't discussed openly before because the trade relations weren't degraded/ing like they are today. In case you've missed the memo, they're threatening all of their neighbors outright with kinetic…

>It wasn't discussed openly before

It was, at least in some political magazines.

http://www.heise.de/tp/artikel/7/7551/1.html (German article from 2001)

References: http://www.wired.com/politics/law/news/2001/05/43443

And besides Internet, just for the record https://www.fas.org/irp/news/1999/06/990602-275397.htm

Re: GitHub is getting DDoSed again

#68

This happened back in October a couple of days in a row. Who the heck is targeting Github and why? I wonder if these attacks are related to the Chinese hacking attacks that have been publicised lately?

One possible motivation might be to knock github offline following a 0day on some software such that the patch/latest version can't be downloaded.

Re: GitHub is getting DDoSed again

#69
post #60

There are people who suggest that a DDoS is just a 'digital sit in', a legitimate way for someone to air a grievance, if they think the targets (or world) haven't paid them enough attention. This view makes DDoS seem more normal or even romantic/heroic, and spreads the tools/know-how more widely. So, pulling off a DDoS becomes a more plausible and attractive aspiration, for a larger set of surly people with marginal…

Does anybody know what grievance is being aired here?

Should anyone care? Once someone launches a DDoS, their argument is invalid. And reporting the grievance might just encourage them.

I don't know anything about any of Github's attackers, but from other incidents I know of at other services, it could be anything. A billing dispute. Anger that something was taken down... or not taken down in response to an unreasonable request. Anger that an account was suspended... or that some feud-rival's account wasn't suspended. People throwing "do it my way or I'll take your site down" tantrums may not make sense to anyone other them themselves.

Post reply on HN