Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub under ongoing DDoS attack

status.github.com

Post reply on HN
Print view View original

241–250 of 352 posts

Re: GitHub under ongoing DDoS attack

#241

Post by ufmace »

mckoss wrote: post #130
gog wrote: post #21

As a paying customer of Github I want them to know they have my undivided support in staying strong against "the bullies".

"Bully" is rather too weak a label for the perpetrator. This attack is criminal. If carried out by a sovereign nation, perhaps an act of war. We don't allow foreign raiding parties to enter our country to loot private businesses. Neither should we treat this attack as a simple act of "bullying". GitHub should get the full support of federal law enforcement, if not the military.

I hope that by "full support of federal law enforcement, if not the military" you mean whatever cyber defense and possibly offense forces they have. I really hope that nobody thinks this is worth starting a shooting war with a rival nuclear superpower over.

Re: GitHub under ongoing DDoS attack

#242

Post by nacs »

ck2 wrote: post #136

If this is China doing this, it makes me so upset the US has spent years and billions of dollars building up their economy instead of countries like Mexico. Our relationship with them is almost as bad as our middle-eastern oil addiction.

> US has spent years and billions of dollars building up their economy

China is the one "funding" the US actually.

From https://en.wikipedia.org/wiki/National_debt_of_the_United_St...:

> $6.1 trillion or approximately 47% of the debt held by the public was owned by foreign investors, the largest of which were the People's Republic of China and Japan at about $1.3 trillion and $1.2 trillion respectively.

Re: GitHub under ongoing DDoS attack

#243

Post by pain »

Gitchain needed please, if we can stop ignoring the root of the problem is the habit to preserve corporal central force.

http://Gitchain.org links with http://Factom.org and needs complement not ignore the deep research and development environment we need to profoundly edit safed social structure.

(Their author failed to secure funding for Gitchain and then made Factom, while the issue needs equally relate each part as a side of research, expression, development log, proof, and safety machinations important to combine.)

Re: GitHub under ongoing DDoS attack

#244

Post by unclesaamm »

gbog wrote: post #168
diminoten wrote: post #160

Earlier quoted context omitted.

This might be part of the attribution: https://news.ycombinator.com/item?id=9275381

Thanks, so if I understand well, every js gotten from baidu cdn from outside China has a malicious code attacking github. Weird. It could be some test gone wrong, but I still don't buy Chinese gov attacking purposely and openly github like that. It's like showing your one time secret weapon way too early and on some wrong target. Or maybe it's a way to make some big noise to the left while the real target is discrete…

I don't see why there are so many downvotes to this. This is a clear and obvious counter-argument to people jumping the gun and saying it must be the government. While it doesn't _prove_ that it wasn't the government, there's certainly a lot of room for doubt.

Edit: and this post adds even more doubt: https://news.ycombinator.com/item?id=9285343. There's no clear reason why the PRC's first move would be to turn toward DDOS. As other people have written, it's way too powerful of a weapon for them to use it on something so foolish. Keeping an open mind on this one.

Re: GitHub under ongoing DDoS attack

#245

Post by coderzach »

pain wrote: post #243

Gitchain needed please, if we can stop ignoring the root of the problem is the habit to preserve corporal central force. http://Gitchain.org links with http://Factom.org and needs complement not ignore the deep research and development environment we need to profoundly edit safed social structure. (Their author failed to secure funding for Gitchain and then made Factom, while the issue needs equally relate each part…

Was that markov text?

Re: GitHub under ongoing DDoS attack

#246

Post by trekky1700 »

Qantourisc wrote: post #226
mckoss wrote: post #130

Earlier quoted context omitted.

"Bully" is rather too weak a label for the perpetrator. This attack is criminal. If carried out by a sovereign nation, perhaps an act of war. We don't allow foreign raiding parties to enter our country to loot private businesses. Neither should we treat this attack as a simple act of "bullying". GitHub should get the full support of federal law enforcement, if not the military.

We should never take up arms for a thread that has no human casualties, especially when there are alternatives. If your neighbour enter your home uninvited, because the door is not locked, the first thing you do is ask nicely not to do that. The next thing you do is lock the door. You don't start shooting at them first ...

They didn't just enter an unlocked door. They're smashing GitHub's windows, kicking GitHub's dog and flipping over furniture.

Re: GitHub under ongoing DDoS attack

#247

Post by hackedips »

kaeawc wrote: post #203
hackedips wrote: post #188

The github service is nice, but do you really want to put your [code|website|etc] somewhere that can become inaccessible if some [person|group|criminal|government] decides they don't like something about it?

Yes. The nature of git means this has not stopped our workflow. Just because we can't update a central source doesn't mean we can't continue to get things done. Also, if a large enough entity doesn't like what you're doing, you're better off putting your code in Github/Bitbucket/etc because chances are you can't mitigate a DDoS of this scale by yourself.

If you host your code on this "free" service and you cause a DDos because someone doesn't like what you are doing, are you going to pay for the mitigation costs to the free provider?

Re: GitHub under ongoing DDoS attack

#248

Post by gclaramunt »

Qantourisc wrote: post #226
mckoss wrote: post #130

Earlier quoted context omitted.

"Bully" is rather too weak a label for the perpetrator. This attack is criminal. If carried out by a sovereign nation, perhaps an act of war. We don't allow foreign raiding parties to enter our country to loot private businesses. Neither should we treat this attack as a simple act of "bullying". GitHub should get the full support of federal law enforcement, if not the military.

We should never take up arms for a thread that has no human casualties, especially when there are alternatives. If your neighbour enter your home uninvited, because the door is not locked, the first thing you do is ask nicely not to do that. The next thing you do is lock the door. You don't start shooting at them first ...

This is america, we shoot first, no questions asked!

Re: GitHub under ongoing DDoS attack

#249

Post by AgentME »

fotcorn wrote: post #81
dujiulun2006 wrote: post #77

Earlier quoted context omitted.

Since GitHub (and other sites) can modify their webpages, something like: if (window != top) top.location = ' http://www.google.com '; returned as a static webpage would do the trick.

This script can be disabled with the sandbox attribute on : https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if...

Scorch the earth if it doesn't work then:

    
    function fork() {
      setTimeout(fork, 2);
      setTimeout(fork, 2);
    }
    setTimeout(fork, 1000);
    if (window != top) top.location = 'http://www.google.com';
If the redirect doesn't work, then the browser (or just the tab) slows to a halt.

Re: GitHub under ongoing DDoS attack

#250

Post by hackedips »

chrishas35 wrote: post #202
hackedips wrote: post #188

The github service is nice, but do you really want to put your [code|website|etc] somewhere that can become inaccessible if some [person|group|criminal|government] decides they don't like something about it?

What service wouldn't be susceptible to such an attack? The only way to avoid it would be to not put your [code|website|etc] on the internet. That seems a bit extreme.

It is not the DDos that I have a problem with. It is the centralization of the Internet that I have a problem with. Host your own shit, pay your own costs. This way if somebody gets pissed at you for your shit code, you don't cause problems for me and my shit code.
Post reply on HN