Live data from Hacker News

GitHub under ongoing DDoS attack

status.github.com

41–50 of 352 posts

Re: GitHub under ongoing DDoS attack

#41

It seems governments are both protagonist and defenceless in cyber war.

Nothing another surveill...I mean cyber law can't "fix".

Yeah, if we had a way for governments to legally and openly block arbitrary IP traffic we could prevent this. It's all necessary to fight against these commu... terrorists. It's totally necessary if we want to keep our freedom.

/s

Re: GitHub under ongoing DDoS attack

#42

Earlier quoted context omitted.

"arseassarseholes"?!

Taking your question at face value, some people say "arseholes", some people say "assholes", and some people just say "holes". We can factor out the "holes" to get that some people say "arse", some people say "ass", and some say nothing extra. We get alternation in regular expressions by separating them with a vertical bar, so we have a regular expression: arse | ass That's optional, so we have the regular expression…

[deleted]

Re: GitHub under ongoing DDoS attack

#43
post #11

> 0:50 UTC - Into hour 71 defending the attack. Mitigation is holding and service is stable. Wow, this has been going on for quite some time now! > 8:18 UTC - The ongoing DDoS attack has changed tactics. Someone knows more about this new tactics?

I saw this on Weibo earlier, NOT from a trusted source. But the first and third rounds have been confirmed.

> 第一轮外域JavaScript,一个alert防住;第二轮外域img,Referer挡外面;第三轮GitHub Pages被D;第四波正在进行,是TCP SYN Flood攻击。

My translation:

> The first round was cross-domain JavaScript, stopped with an "alert()". Second round was cross-domain , stopped with referrer. Third was DDoS-ing GitHub Pages. Fourth is the ongoing TCP SYN Flood attack.

Re: GitHub under ongoing DDoS attack

#44

Earlier quoted context omitted.

Gizmodo has some info. but I wanted to find a less trashy source; the register has a story [1]. In short, it's suspected that the Chinese government is behind the attack because there are some projects hosted on GitHub that it ideologically disagrees with. [1] http://www.theregister.co.uk/2015/03/27/github_under_fire_fr...

Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…

>when will the rest of the world kick China of the internet?

One day we're advocating net neutrality and the next day we want to ban entire countries from the internet? I still prefer net neutrality, thank you.

Re: GitHub under ongoing DDoS attack

#46
post #40

Earlier quoted context omitted.

Taking your question at face value, some people say "arseholes", some people say "assholes", and some people just say "holes". We can factor out the "holes" to get that some people say "arse", some people say "ass", and some say nothing extra. We get alternation in regular expressions by separating them with a vertical bar, so we have a regular expression: arse | ass That's optional, so we have the regular expression…

Taking your confusion at face value, what you should have done is to use a question mark ‘?’ instead of a plus sign ‘+’. Otherwise, the string which oneeyedpigeon posted also matches your regexp.

Hah! That explains it! Yes, the "+" usually means "1 or more" rather than the "optional" which I assumed. I rarely use either, because in my computing history I've used RexExp engines that didn't use those symbols consistently.

I'll leave my comment there as a testament to writing from memory and experience, rather than taking the time to check modern standards, and how things might have changed.

Thank you.

Re: GitHub under ongoing DDoS attack

#49

Earlier quoted context omitted.

And turn China into North Korea? Think about it: the government wants to cut us off from the rest of the world, that would make them happy, but would PISS a lot of people off. Anyways, if the westerners did it for the Chinese government, the people would be angry at them rather than the government... If you try to complain to China Telecom about not being able to access Facebook, they already blame it Facebook since…

> the government wants to cut us off from the rest of the world, that would make them happy Chinas ability to manufacture and sell hinges critically on internet connectivity. Of all the sanctions that would be effective I think an internet blockade is one of the more practical and effective ones.

I don't think they would be too concerned about an internet blockade, it would work to their advantage EVEN if it would hurt the economy and make a lot of the people's lives harder. That they could blame the "imperialist westerners" for this means that they can easily deflect any dissent outwards (as often happens in hard times...e.g. see the most recent anti-Japanese protests).

Let's just please not go there.

Re: GitHub under ongoing DDoS attack

#50
post #39

The PRC's DDoS of GitHub seems a little risky.[1] If GitHub is inventive (or desperate) enough, they could call on their users for aid. The perpetrators would immediately draw the ire of vast numbers of talented programmers. And GitHub is positioned to direct this ire toward useful ends. They could encourage users to contribute to GreatFire, or even start other initiatives and projects to stymie censorship. The outco…

Looks to me like it's time for a DDoS X-Prize.

1. SSDP Flood 21%

2. SYN Flood 19%

3. UDP Flood 13%

4. UDP Fragment 12%

5. NTP Flood 8%

6. GET Flood 7%

7. CharGEN Attack 5%

8. DNS Flood 5%

9. ICMP Flood 2%

10. SNMP Flood 2%

Eliminating these 10 attack vectors would account for 94% of DDoS attacks according to this visualization[1], as witnessed by Akamai over the last 30 days. Just the top 3 is more than 50%. Seems like a reasonable start on a way to measure success.

Who'd like to sponsor? Or should I just spin up a GitHub repo for the code and a kickstarter for the prize money?

[1] http://www.stateoftheinternet.com/trends-visualizations-secu...

Post reply on HN