Basecamp was under network attack • Hacker News Board

Re: Basecamp was under network attack

#191

Post by akassover » Wed, Mar 26, 2014, 4:15 PM UTC

gk1 wrote: post #172

akassover wrote: post #64

We got hit by a DDoS about a year ago. Rackspace (who normally has amazing support) quietly null routed us and went about their day. No heads-up, trouble ticket, or any other form of notification. They didn't even put a note in our account so when we contacted their support to figure out why our servers were unresponsive outside their network the poor guy who answered the phone was just as confused as I was. We've ta…

I'm running a small SaaS business. I'm curious to hear what steps you took to reduce your vulnerability. Could you please share so others can take the same steps?

The biggest thing we did was remove our dependency to a single IP (this was a unique requirement of our business). We also improved our firewall and upped our managed service level. We're not 100% bullet proof now, but definitely better than we were. I'd be happy to go into more detail offline.

Re: Basecamp was under network attack

#192

Post by gk1 » Wed, Mar 26, 2014, 4:22 PM UTC

akassover wrote: post #191

gk1 wrote: post #172

Earlier quoted context omitted.

I'm running a small SaaS business. I'm curious to hear what steps you took to reduce your vulnerability. Could you please share so others can take the same steps?

The biggest thing we did was remove our dependency to a single IP (this was a unique requirement of our business). We also improved our firewall and upped our managed service level. We're not 100% bullet proof now, but definitely better than we were. I'd be happy to go into more detail offline.

Thanks! I'm on managed service as well, so I may be able to request some of those things. I've never been hit but sounds like I should be proactive about this.

Re: Basecamp was under network attack

#193

Post by mobiplayer » Thu, Mar 27, 2014, 12:19 PM UTC

ivanca wrote: post #190

mobiplayer wrote: post #186

Earlier quoted context omitted.

This is like someone hitting you with someone else's arm while they're sleeping (attackers use compromised hosts/networks) and then you go back and burn the sleepy guy. That doesn't sound like self-defense at all :)

That's probably the worst analogy I have ever heard; or is this killing with someone else hand something common... somewhere?

Well, that's not common anywhere as far as I know, but you didn't say why is it a bad analogy.

I any case let me clarify what was my purpose as it seems I'm not good at analogies. The point is that you're attacked using compromised computers so it is incredibly stupid to retaliate to the source of the attack.

Hope that clarifies!

Re: Basecamp was under network attack

#194

Post by ivanca » Sat, Mar 29, 2014, 8:06 AM UTC

mobiplayer wrote: post #193

ivanca wrote: post #190

Earlier quoted context omitted.

That's probably the worst analogy I have ever heard; or is this killing with someone else hand something common... somewhere?

Well, that's not common anywhere as far as I know, but you didn't say why is it a bad analogy. I any case let me clarify what was my purpose as it seems I'm not good at analogies. The point is that you're attacked using compromised computers so it is incredibly stupid to retaliate to the source of the attack. Hope that clarifies!

Is incredibly stupid to assume you are not liable for what you own; that's the reason why the cardholders gets in trouble by lending his credit card to friends or not reporting it has been stolen. The same thing with cars; if someone else drives you car you are in big part responsible for what the car is being used for (i.e. a friend and a bank robbery)

Hope that destroys your absurd misconception!