Live data from Hacker News

Arxiv.org is experiencing a DDoS attack

blog.arxiv.org

11–20 of 49 posts

Re: Arxiv.org is experiencing a DDoS attack

#11

These requests originated from over 200 IP addresses – almost all owned by an ISP for a particular province in China. The confirmation emails for this volume of requests overwhelmed our email service. As a result, many arXiv users may not have received their daily emails. And other users may not have received their confirmation emails for registering accounts, or legitimate email change requests. this should be easy…

They said a million email change requests, originating from over 200 IP addresses.

The email requests already happened. So blacklisting the IP addresses wouldn't prevent the email overload.

Re: Arxiv.org is experiencing a DDoS attack

#13

A million password resets is shockingly low for a DDOS, could this have been an university assignment gone wrong? I can imagine some clueless dean ordering all their engineering grads to submit research to arXiv. If they have 100-200K students, a single poorly written script to link the institution's SSO with automatically created arXiv accounts could easily overwhelm the system.

The question to ask yourself is: After seeing the service clearly degrade, why wouldn't you stop?

Also there may be a good reason why arXiv call it a DDoS attack - they can probably see the same emails being flipped multiple times, which would not be inline with an accidental script issue.

Re: Arxiv.org is experiencing a DDoS attack

#16
post #15

Earlier quoted context omitted.

Gatekeepers who hate open access. https://x.com/emilymbender/status/1696374958652522612

There is nothing in the tweet you are linking against open access.

The tweet says "arxiv is a cancer". It's obviously reasonable evidence that some people don't like arxiv. You are splitting hairs.

Re: Arxiv.org is experiencing a DDoS attack

#17
post #16
post #15

Earlier quoted context omitted.

There is nothing in the tweet you are linking against open access.

The tweet says "arxiv is a cancer". It's obviously reasonable evidence that some people don't like arxiv. You are splitting hairs.

and the context really isn't "gatekeepers hate open access", is it.

Re: Arxiv.org is experiencing a DDoS attack

#18
post #3

Who would have the incentive to bring arxiv down?

Gatekeepers who hate open access. https://x.com/emilymbender/status/1696374958652522612

Awesome "error message" from x.com:

  y
That's it. Beautiful.

To reproduce

   curl https://x.com/username

   curl https://x.com
The second one gets a different "error message":

  x
That's it.

How to get a "z".

Re: Arxiv.org is experiencing a DDoS attack

#19
post #16
post #15

Earlier quoted context omitted.

There is nothing in the tweet you are linking against open access.

The tweet says "arxiv is a cancer". It's obviously reasonable evidence that some people don't like arxiv. You are splitting hairs.

The author of that tweet clearly has an issue with the arxiv being an open repository where everyone can upload anything. There is nothing about open access in the tweet. And arxiv is not same as the concept or movement of open access. Most articles on Arxiv doesn't even have a proper license to fulfill the definition of Open Access in the BOAI declaration.

Further proof that the authors tweet is not about or against open access is that she publishes open access herself:

https://jlm.ipipan.waw.pl/index.php/JLM/article/view/292

https://nejlt.ep.liu.se/article/view/4017

https://dl.acm.org/doi/10.1145/3498366.3505816

Re: Arxiv.org is experiencing a DDoS attack

#20
post #19
post #16

Earlier quoted context omitted.

The tweet says "arxiv is a cancer". It's obviously reasonable evidence that some people don't like arxiv. You are splitting hairs.

The author of that tweet clearly has an issue with the arxiv being an open repository where everyone can upload anything. There is nothing about open access in the tweet. And arxiv is not same as the concept or movement of open access. Most articles on Arxiv doesn't even have a proper license to fulfill the definition of Open Access in the BOAI declaration. Further proof that the authors tweet is not about or against…

Doesn't change the point. Also doesn't refute the point.
Post reply on HN