Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Feedly gets hit by DDoS attack, refuses to give in to blackmail

grahamcluley.com

Post reply on HN
Print view View original

11–20 of 137 posts

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#11

Post by ksec »

bliker wrote: post #4
ksec wrote: post #2

Do people really get punished for it? I mean the actual ones behind those bot, not the innocent ones that had their computer hacked without knowing. If yes, how long does it normally take to get them? If At all? Weeks? Months? Years? These days DDoS seems far too easy, far too common.

I quite liked this article about the issue. http://krebsonsecurity.com/2014/02/the-new-normal-200-400-gb... > The shocking thing about these DDoS-for-hire services is that — as I’ve reported in several previous stories — a majority of them are run by young kids who apparently can think of no better way to prove how cool and “leet” they are than by wantonly knocking Web sites offline and by launching hugely disruptive…

From Wiki "For the time being there are no good technical means to counteract misuse of NTP servers"

Sigh

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#12

Post by mhurron »

watty wrote: post #8
ksec wrote: post #2

Do people really get punished for it? I mean the actual ones behind those bot, not the innocent ones that had their computer hacked without knowing. If yes, how long does it normally take to get them? If At all? Weeks? Months? Years? These days DDoS seems far too easy, far too common.

Pairing blackmail + DDoS is a guaranteed way to get the big guns to investigate.

Yes, but for the blackmail part, not the DDoS and then only if the perpetrators are in a country that cares to work with the laws of the victims country.

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#13

Post by madeofpalk »

mwill wrote: post #3

I was just wondering why I couldn't hop on Feedly. I feel sort of bad that this is what makes me finally self host my RSS reader, since it's totally out of their control, but I've been planning on jumping ship for a while, it's just been low priority for me. Goread has been tempting me though, so I guess I'll check it out.

If you were a former Google Reader user, you might like Feedbin. I've been with them for the last year or however long and have been fairly happy.

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#14

Post by malka »

ksec wrote: post #2

Do people really get punished for it? I mean the actual ones behind those bot, not the innocent ones that had their computer hacked without knowing. If yes, how long does it normally take to get them? If At all? Weeks? Months? Years? These days DDoS seems far too easy, far too common.

If all the ddos goes through a botnet, and the blackmail is done using Bitcoin, it could be really harsh for the authorities to find who is behind the attack.

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#15

Post by hueving »

jackgavigan wrote: post #10

I wonder why they're not using Cloudflare.

Cloud flare is a protection racket. Some people don't use them on principle. They are the vendor selling chastity belts to stop rape. It is in their best economic interest that these attacks continue.

It's sad that to run a service now the expectation is to shovel money to another service to absorb UDP packets.

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#16

Post by alandarev »

ksec wrote: post #2

Do people really get punished for it? I mean the actual ones behind those bot, not the innocent ones that had their computer hacked without knowing. If yes, how long does it normally take to get them? If At all? Weeks? Months? Years? These days DDoS seems far too easy, far too common.

Heavily depends on company's presence in media and how much pressure the owner puts into it. The reports I submitted with evidence of DDOS and traces to the blackmail'er through IC3 form[1], none were replied.

On another side, as bliker mentioned, those are usually kids. Replying to them that you have submitted an official IC3 report usually stops them, and some were even asking to cancel the report.

[1] - https://www.ic3.gov/complaint/default.aspx

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#18

Post by vdaniuk »

hueving wrote: post #15
jackgavigan wrote: post #10

I wonder why they're not using Cloudflare.

Cloud flare is a protection racket. Some people don't use them on principle. They are the vendor selling chastity belts to stop rape. It is in their best economic interest that these attacks continue. It's sad that to run a service now the expectation is to shovel money to another service to absorb UDP packets.

It is a protection racket ONLY if they are aiding or doing the attacks. I don't see how protecting a company from DDoS attacks is a protection racket by itself, care to elaborate?

Re: Feedly gets hit by DDoS attack, refuses to give in to blackmail

#19

Post by mantrax5 »

hueving wrote: post #15
jackgavigan wrote: post #10

I wonder why they're not using Cloudflare.

Cloud flare is a protection racket. Some people don't use them on principle. They are the vendor selling chastity belts to stop rape. It is in their best economic interest that these attacks continue. It's sad that to run a service now the expectation is to shovel money to another service to absorb UDP packets.

Wow. FYI racket is defined as offering to solve a problem that does not exist, or that would not exist if the offerer wouldn't force it upon you.

Unless you're claiming the blackmail group is made up of Cloudflare employees, you should choose your words more wisely.

Post reply on HN