GitHub experiencing a large DDoS attack • Hacker News Board

Re: GitHub experiencing a large DDoS attack

#81

Post by rickyc091 » Thu, Aug 15, 2013, 4:41 PM UTC

Cakez0r wrote: post #72

manojlds wrote: post #45

Earlier quoted context omitted.

Didn't you just answer your question? It is the "go-to" place for most developers.

That doesn't really answer his question. Why would somebody want to inconvenience developers?

Probably to disrupt businesses that rely on github or cause a service to function improperly causing a security loophole they can exploit.

Re: GitHub experiencing a large DDoS attack

#82

Post by 1qaz2wsx3edc » Thu, Aug 15, 2013, 4:43 PM UTC

AnSavvides wrote: post #35

I do not understand why GitHub get attacked so often - honestly it's not like they are doing anything wrong, they are a fabulous service and the go-to place for most (if not all) developers for all sorts of projects, be it open source or in an enterprise/corporate context.

Extortion, research, or for evil. Attacking Github may be an attempt to effect someone that uses it (Github may not be the direct target). What if it's possible to effect HFT trading.

---

We do know that they've been consistently attacked. Github has been unsuccessful in mitigating attacks.

Github needs to explain why these attacks are happening. What is being done to stop them. What has been done to stop them. And if they are different from previous attacks.

Re: GitHub experiencing a large DDoS attack

#83

Post by dickeytk » Thu, Aug 15, 2013, 4:43 PM UTC

AnSavvides wrote: post #35

I do not understand why GitHub get attacked so often - honestly it's not like they are doing anything wrong, they are a fabulous service and the go-to place for most (if not all) developers for all sorts of projects, be it open source or in an enterprise/corporate context.

extortion, potentially.

Re: GitHub experiencing a large DDoS attack

#84

Post by swede » Thu, Aug 15, 2013, 4:44 PM UTC

daemon13 wrote: post #77

danielsju6 wrote: post #68

Just a PSA Git is distributed, fire up a quick instance with git daemon. git daemon --verbose --export-all --base-path=.git --reuseaddr --strict-paths .git/

>> Just a PSA Git is distributed Can you please elaborate?

Public Service Announcement

You can have multiple remotes for your Git repositories, one of them (Github) being down should not affect your work since you can coordinate a new one with your team in the manner described above.

Re: GitHub experiencing a large DDoS attack

#85

Post by viraptor » Thu, Aug 15, 2013, 4:49 PM UTC

Cakez0r wrote: post #72

manojlds wrote: post #45

Earlier quoted context omitted.

Didn't you just answer your question? It is the "go-to" place for most developers.

That doesn't really answer his question. Why would somebody want to inconvenience developers?

- Raising awareness of self-hosted alternatives

- Getting people to use BB instead

- Fake DDOS to get more companies to pay for github:enterprise

- Preventing a system upgrade in a company which has deployment relying on github

There are lots of potential ways to use it...

Re: GitHub experiencing a large DDoS attack

#86

Post by thenonsequitur » Thu, Aug 15, 2013, 4:50 PM UTC

gavingmiller wrote: post #5

I ask because I have no plausible answer: What does someone stand to gain by DDoSing github?

It could be to cause a failure in an ancillary github service that results in opening up a new attack vector which could then allow the attackers to steal code from private repos.

Re: GitHub experiencing a large DDoS attack

#87

Post by lsh123 » Thu, Aug 15, 2013, 4:56 PM UTC

cheeseprocedure wrote: post #12

Can someone with experience mitigating an attack like this describe how it's done? A known set of hosts/address spaces is fine, but it's the "distributed" part I don't understand how to deal with.

There are services that specialize in handling DDOS attacks with distributed data centers and large pipes. It is very hard to do it on a shared infrastructure (e.g. AWS) w/o affecting other customers thus hosting providers will be more interested in protecting other clients.

Re: GitHub experiencing a large DDoS attack

#88

Post by whatthesmack » Thu, Aug 15, 2013, 4:57 PM UTC

danielsju6 wrote: post #69

cmer wrote: post #7

This is getting really problematic. It stops our whole team every time. Anybody has experience with Gitlab and Gitlab CI? How's the flow compared to Github, especially for pull requests, commenting and collaboration?

man git daemon

man git-daemon #ftfy

Re: GitHub experiencing a large DDoS attack

#89

Post by level09 » Thu, Aug 15, 2013, 4:59 PM UTC

AnSavvides wrote: post #35

I do not understand why GitHub get attacked so often - honestly it's not like they are doing anything wrong, they are a fabulous service and the go-to place for most (if not all) developers for all sorts of projects, be it open source or in an enterprise/corporate context.

I bet DDos-protection companies (Dosarrest, cloudflare etc..) are happy to see this .. what's better than a new business potential

Re: GitHub experiencing a large DDoS attack

#90

Post by vhost- » Thu, Aug 15, 2013, 4:59 PM UTC

swede wrote: post #84

daemon13 wrote: post #77

Earlier quoted context omitted.

>> Just a PSA Git is distributed Can you please elaborate?

Public Service Announcement You can have multiple remotes for your Git repositories, one of them (Github) being down should not affect your work since you can coordinate a new one with your team in the manner described above.

Yep! I usually setup a mirror at bitbucket and set my local to push to both github and bitbucket and only pull from github. It worked well when github was down and I needed a branch from a remote developer.