Live data from Hacker News

Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

gizmodo.com

11–20 of 50 posts

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#11
post #9

Dyn, Inc. is toast. They created a central point of failure for the Internet. Major sites will stop using their services within hours. Things need to get more distributed. Don't load Jquery from some central site. Don't load fonts from Google. Make sure your site will work if all the trackers and ad sites are not responding. Use multiple independent DNS providers. It's also time for serious litigation. Find some vuln…

can you imagine the cost of doing and having everything nX times ??

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#14
post #9

Dyn, Inc. is toast. They created a central point of failure for the Internet. Major sites will stop using their services within hours. Things need to get more distributed. Don't load Jquery from some central site. Don't load fonts from Google. Make sure your site will work if all the trackers and ad sites are not responding. Use multiple independent DNS providers. It's also time for serious litigation. Find some vuln…

Junk IoT manufacturers need to feel fear.

We've reached the point where any clueless business type who pooh-poohs and wishes away security concerns needs to get the idiot bit flipped on them. Today's networked computing environment has reached the point, where this stuff is toxic. It might have been okay for a few isolated frontier weirdos to play with mercury to extract gold, but then when that became a full blown industry, it resulted in toxic consequences we are still dealing with over 150 years later. Maker hipsters playing with a few hardware hacks did little harm. Now that IoT is becoming household, the situation has changed in an analogous way.

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#15
post #10
post #9

Dyn, Inc. is toast. They created a central point of failure for the Internet. Major sites will stop using their services within hours. Things need to get more distributed. Don't load Jquery from some central site. Don't load fonts from Google. Make sure your site will work if all the trackers and ad sites are not responding. Use multiple independent DNS providers. It's also time for serious litigation. Find some vuln…

Please. Dyn has performed pretty well in the past, and any other provider (be it UltraDNS, CloudFlare or anybody else) would be a single point of failure as well. As you said, the only protection (somewhat) is to have redundant/multiple DNS providers. Doesn't mean Dyn can't be one of many.

They had one job. To stay up no matter what. That's the only justification for using Dyn. They failed.

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#16
post #5

It seems like some eyeball and distribution networks should get together and run a private subset of the Internet, with good filtering (BCP38 style), etc. internally. You could get pretty good coverage with just ~10 eyeball networks in the US, a few cloud providers, and maybe some key infrastructure. Operate normally most of the time, but when under attack, be able to fall back to just vetted networks, transports, an…

So, these DDOS attacks take advantage of IoT devices so how would you tell the difference using vetting when they are on the same networks as regular users?

I would just ban the ips for 24hrs if I detect an IP that is part of a ddos. After that people will wise up and unplug their nanycam/toaster/iotwhatever

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#17
post #15
post #10

Earlier quoted context omitted.

Please. Dyn has performed pretty well in the past, and any other provider (be it UltraDNS, CloudFlare or anybody else) would be a single point of failure as well. As you said, the only protection (somewhat) is to have redundant/multiple DNS providers. Doesn't mean Dyn can't be one of many.

They had one job. To stay up no matter what. That's the only justification for using Dyn. They failed.

Yes, they did. But, depending on the details of the attack, I am not sure if any other provider could have withstood the attack without problems. In other words, I doubt there's a single provider/alternative.

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#18
post #12

Why are Gizmodo articles even getting upvoted here? They are always sensational and low information density.

I thought it raises a few good points, even though it doesn't propose any solutions. The current sorry state of IoT security is something worth thinking about.

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#19
post #13
post #2

Twitter and GitHub have been down for me for a while now.

they're not down you just can't resolve the URL

as a temp solution, add these to your /etc/hosts file: 192.30.253.113 github.com 151.101.44.133 assets-cdn.github.com

Re: Today's Brutal DDoS Attack Is the Beginning of a Bleak Future

#20
post #9

Dyn, Inc. is toast. They created a central point of failure for the Internet. Major sites will stop using their services within hours. Things need to get more distributed. Don't load Jquery from some central site. Don't load fonts from Google. Make sure your site will work if all the trackers and ad sites are not responding. Use multiple independent DNS providers. It's also time for serious litigation. Find some vuln…

> load fonts from Google.

Not sure, but isn't this yet another beacon?

Post reply on HN