Blog post from GitHub related to this.
https://github.com/blog/1981-large-scale-ddos-attack-on-gith...
GitHub under ongoing DDoS attack
51–60 of 352 posts
Re: GitHub under ongoing DDoS attack
#52high level - how does one mitigate against a DDOS attack?
Make each "hit" cost as little to you in bandwidth/resources, and as much as possible to the attacker.
National solution is to stop known bad nodes at the ISP level.
Re: GitHub under ongoing DDoS attack
#53Earlier quoted context omitted.
Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…
The internet is how we maintain dialogue between peoples when our Governments behave like posturing (arse|ass)+holes. The worse a Government behaves the more (not less) internets the country should receive.
I think you meant "(arse|ass)?holes".
Re: GitHub under ongoing DDoS attack
#54Earlier quoted context omitted.
Gizmodo has some info. but I wanted to find a less trashy source; the register has a story [1]. In short, it's suspected that the Chinese government is behind the attack because there are some projects hosted on GitHub that it ideologically disagrees with. [1] http://www.theregister.co.uk/2015/03/27/github_under_fire_fr...
Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…
It would be a huge mistake to cut of China from the internet. Whatever power the US wields militarily as well as economically is an absolute joke compared to the power it wields culturally. American culture through movies, tv and music dominates global culture, allowing it define what normal society looks like.
You want the people in China consuming more and not less of it.
Re: GitHub under ongoing DDoS attack
#55Earlier quoted context omitted.
Gizmodo has some info. but I wanted to find a less trashy source; the register has a story [1]. In short, it's suspected that the Chinese government is behind the attack because there are some projects hosted on GitHub that it ideologically disagrees with. [1] http://www.theregister.co.uk/2015/03/27/github_under_fire_fr...
Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…
> when will the rest of the world kick China of the internet?
By "rest of world" do you mean the USA? Or Europe? Or basically "the west"?
When does it sound like cultural imperialism?
Are countries (and their citizens) only permitted to be connected to the internet if their culture matches that of your country/federation?
How is that not an offensive idea?
Usually, I reverse statements and if I find them offensive in reverse they are probably offensive full stop. This one is pretty offensive.
Re: GitHub under ongoing DDoS attack
#56Earlier quoted context omitted.
Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…
> > Which raises the question: when will the rest of the world kick China of the internet? Well, that's exactly what the DDoS wanted, so the government could just happily control all access to Internet in mainland China The DDoS targets github.com/greatfire and github.com/cn-nytimes by their so called "collateral freedom" [1] Suppose github could just ban Chinese IP all together, but @greatfire could easily jump to a…
The first attack based on the Javascript wasn't actually using Chinese IPs to do the attack. As otherwise it'd indeed be very easy to block by just blackholing Chinese traffic.
What it was actually doing was a massive MITM attack against non-SSLd HTTP connections from inbound connections to China, from Chinese users abroad visiting Chinese websites. It's an extremely clever trick that is only possible if you have the ability to mount mass MITM attacks on an entire country, but what it gives you is a massive ever shifting botnet.
The lesson I draw from this is that we need more SSL, we need it everywhere and we need it yesterday. I hope this stuff puts to rest the idea that some websites aren't worth being encrypted.
Re: GitHub under ongoing DDoS attack
#57The PRC's DDoS of GitHub seems a little risky.[1] If GitHub is inventive (or desperate) enough, they could call on their users for aid. The perpetrators would immediately draw the ire of vast numbers of talented programmers. And GitHub is positioned to direct this ire toward useful ends. They could encourage users to contribute to GreatFire, or even start other initiatives and projects to stymie censorship. The outco…
Looks to me like it's time for a DDoS X-Prize. 1. SSDP Flood 21% 2. SYN Flood 19% 3. UDP Flood 13% 4. UDP Fragment 12% 5. NTP Flood 8% 6. GET Flood 7% 7. CharGEN Attack 5% 8. DNS Flood 5% 9. ICMP Flood 2% 10. SNMP Flood 2% Eliminating these 10 attack vectors would account for 94% of DDoS attacks according to this visualization[1], as witnessed by Akamai over the last 30 days. Just the top 3 is more than 50%. Seems li…
SYN Flood is already mitigated a long time ago with SYN cookies. The rest ..... well, it's basically just packets.
I see this latest development as good news. The Javascript MITM trick was very clever because forcing github to render and serve a page is a lot more resource consuming than just firing packets at servers that ignore them (like a UDP or SYN flood). The latter can saturate network links until the sources are blocked, but those sources tend to be somewhat focused and don't shift much. An HTTP level attack driven by random web users means every request might have a different IP and it requires running way more of the app stack to be able to filter them out. If China is now resorted to SYN flooding then it means they ran out of better techniques.
Re: GitHub under ongoing DDoS attack
#58Out of curiosity, would Cloudflare be able to sustain the amount of inbound requests they're handling?
Re: GitHub under ongoing DDoS attack
#59Blog post from GitHub related to this. https://github.com/blog/1981-large-scale-ddos-attack-on-gith...
I really wish they would post what the attacker wants removed so we could mirror it, post it, etc. The streisand effect is a good response to things like this I think.
Re: GitHub under ongoing DDoS attack
#60high level - how does one mitigate against a DDOS attack?
In brief, you have more bandwidth than your attacker.