Live data from Hacker News

GitHub under ongoing DDoS attack

status.github.com

61–70 of 352 posts

Re: GitHub under ongoing DDoS attack

#61
post #20

Earlier quoted context omitted.

> > Which raises the question: when will the rest of the world kick China of the internet? Well, that's exactly what the DDoS wanted, so the government could just happily control all access to Internet in mainland China The DDoS targets github.com/greatfire and github.com/cn-nytimes by their so called "collateral freedom" [1] Suppose github could just ban Chinese IP all together, but @greatfire could easily jump to a…

If that was what the Chinese government wanted they could simply block all access from China to github. In fact they did that once but had to undo that because the damage to the IT sector would be too big. China doesn't want github inaccessible, they want github to take down repos which the Chinese censor doesn’t like.

Hmm, maybe Github could block all access from China except for these two projects, serve a special home page with install instructions, and make it so that with either of these installed you can access all of Github from China?

Re: GitHub under ongoing DDoS attack

#62
post #54

Earlier quoted context omitted.

Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…

It would be a huge mistake to cut of China from the internet. Whatever power the US wields militarily as well as economically is an absolute joke compared to the power it wields culturally. American culture through movies, tv and music dominates global culture, allowing it define what normal society looks like. You want the people in China consuming more and not less of it.

> You want the people in China consuming more and not less of it.

Want all you wish, the Chinese government is actively stopping and blocking the outside internet at an alarming rate. I was in Beijing a few weeks ago and couldn't load google, youtube, gmail, gmaps, instangram, facebook, twitter, various chatting apps, imgur, and on and on. Even using VPNs were difficult. I don't see this stopping anytime soon since it allows 1) control of the people and 2) growth from copying a western products and forcing the people inside the firewall to use the Chinese cloned version.

Re: GitHub under ongoing DDoS attack

#64

Blog post from GitHub related to this. https://github.com/blog/1981-large-scale-ddos-attack-on-gith...

I really wish they would post what the attacker wants removed so we could mirror it, post it, etc. The streisand effect is a good response to things like this I think.

It appears that the first attack was targeted at https://github.com/cn-nytimes/ and https://github.com/greatfire/ [1]. Accessing these two pages still responds with `alert("WARNING: malicious javascript detected on this domain")` which is supposed to be executed on the (innocent) client's browser.

[1] https://news.ycombinator.com/item?id=9275381

Re: GitHub under ongoing DDoS attack

#65
post #23

Earlier quoted context omitted.

Which raises the question: when will the rest of the world kick China of the internet? First it was redirecting Chinese internet users to random IPs, if the government didn't like their DNS queries and now they're doing ddos attack on a site that host a large percentage of open source code, used for a whole host of service and products. At some point it's going to make more economical sense to kick China of the inter…

Well, the USA engaged in a mass spying operation. Should we kick the USA off the internet?

* is constantly engaged in...

FTFY

Re: GitHub under ongoing DDoS attack

#66

Blog post from GitHub related to this. https://github.com/blog/1981-large-scale-ddos-attack-on-gith...

I really wish they would post what the attacker wants removed so we could mirror it, post it, etc. The streisand effect is a good response to things like this I think.

I think among the sites is the GreatFire repo: https://github.com/greatfire

Re: GitHub under ongoing DDoS attack

#68
This attack is perhaps just a taste of something nastier. The GitHub infrastructure is rock solid and gives valuable real time information via its status dashboard . This seems ideal for measuring the impact of an attack before choosing a more critical target.

Re: GitHub under ongoing DDoS attack

#69
post #40

Earlier quoted context omitted.

Taking your confusion at face value, what you should have done is to use a question mark ‘?’ instead of a plus sign ‘+’. Otherwise, the string which oneeyedpigeon posted also matches your regexp.

Hah! That explains it! Yes, the "+" usually means "1 or more" rather than the "optional" which I assumed. I rarely use either, because in my computing history I've used RexExp engines that didn't use those symbols consistently. I'll leave my comment there as a testament to writing from memory and experience, rather than taking the time to check modern standards, and how things might have changed. Thank you.

Now we have 2 problems.

Re: GitHub under ongoing DDoS attack

#70
post #58

Out of curiosity, would Cloudflare be able to sustain the amount of inbound requests they're handling?

Haven't seen many stats, but I'm pretty sure they could. If I remember correctly they deflected one of the largest we've ever seen which even made trouble for the Internet's infrastructure.
Post reply on HN