Live data from Hacker News

GitHub experiencing a large DDoS attack

status.github.com

41–50 of 105 posts

Re: GitHub experiencing a large DDoS attack

#41

I ask because I have no plausible answer: What does someone stand to gain by DDoSing github?

maybe some hackers who believes git repos should be, well, distributed?

So maybe they can build a distributed system themselves instead of making a point the f*c%s everyone while they have their childish tantrum. This is like nuking a city because you don't like the mayor.

Re: GitHub experiencing a large DDoS attack

#43
post #7

This is getting really problematic. It stops our whole team every time. Anybody has experience with Gitlab and Gitlab CI? How's the flow compared to Github, especially for pull requests, commenting and collaboration?

This happens to our team too. Does anyone else find it ironic that Git is a distributed version control system, yet we rushed to centralize it and base our entire workflow around GitHub?

I've tinkered with the idea of setting up a git repo on a hosting provider like Digital Ocean for just an occasion. Maybe back it up hourly from github, and/or also push to it regularly by adding it as a remote in our git repos.

Anything business related we use beanstalkapp, for its better price-per-private repo and deployments in any case (no issues with them ever!)

Re: GitHub experiencing a large DDoS attack

#44
post #30
post #23

Earlier quoted context omitted.

blackmailing ? "if you dont pay we'll DDOS you" or whatever. Given all these infected Windows computers all over the world ,it's not going to stop soon. That's the Microsoft legacy.

Am I crazy in thinking that there's zero chance Github would pay a "ransom"? Seems like they'd just work with their vendors/providers and mitigate it to avoid setting that precedent (making them even more vulnerable to future attempts).

The attacker's bet is that they can apply pressure beyond the victim's ability to mitigate. If they win that bet, the victim may reach a point where paying out is preferable to the lost business they'd suffer because of the attack.

Re: GitHub experiencing a large DDoS attack

#45

I do not understand why GitHub get attacked so often - honestly it's not like they are doing anything wrong, they are a fabulous service and the go-to place for most (if not all) developers for all sorts of projects, be it open source or in an enterprise/corporate context.

Didn't you just answer your question? It is the "go-to" place for most developers.

Re: GitHub experiencing a large DDoS attack

#46
post #33

Earlier quoted context omitted.

This happens to our team too. Does anyone else find it ironic that Git is a distributed version control system, yet we rushed to centralize it and base our entire workflow around GitHub?

Github is just a node. IF Github dies , people still have the full repos on their computers.That's not always the case with SVN... And most people are too lazy/dont have resources to set up a git server anyway.

Most teams that work on GitHub have none of their own workflow or infrastructure for sharing code when GH goes down.

You can probably blame those teams for that more than GitHub but people do seem to have bought into the idea that we can just jam everything up to GitHub and get it back later.

Re: GitHub experiencing a large DDoS attack

#47
post #3

So what?

The so what is that the majority of people on HN are developers and the majority of them use Github either personally or with their teams. So a major outage is costing potentially millions of dollars in potentially lost developer time. If you calculate an average hourly of just $50 and a developer loses 20 minutes. Then that outage costs $17 x the number of affected developers. That's a pretty big loss. I'm reading H…

You can't pull code from another node, i.e another developer? Git is distributed, if you want centralised source control use Perforce or SVN or something.

Re: GitHub experiencing a large DDoS attack

#48
post #24

Earlier quoted context omitted.

Is there a VM image like Github enterprise?

There is at least one Vagrant+puppet installer I know of but, well, uhhh... it's on Github and won't help you much at this point :P https://github.com/sbadia/puppet-gitlab

Yes, kind of deadlock.. Nice try anyway :)

Re: GitHub experiencing a large DDoS attack

#49
What a coincidence. We actually just finished migrating all our projects over to GitLab about an hour before this outage.

I still very much love GitHub, it just ended up not scaling for us (we have a lot of repositories that seldom needs to be touched, which results in a $20 / month Linode + Backup being a much better solution)

GitLab also allows us to group repositories and gives a little bit more flexibility in regards of git server-hooks. Also, server-side branch locking! (Does anybody know how to lock branches server-side with GitHub?)

Re: GitHub experiencing a large DDoS attack

#50
post #7

This is getting really problematic. It stops our whole team every time. Anybody has experience with Gitlab and Gitlab CI? How's the flow compared to Github, especially for pull requests, commenting and collaboration?

We are using Gitlab for about half a year with Jenkins, and we could not be happier. We are about 50 devs working with it every day. It has some quirks (for example AD integration) but it has served us well, and we would not want anything else.
Post reply on HN