GitHub hit by DDoS attack second day in a row • Hacker News Board

Re: GitHub hit by DDoS attack second day in a row

#11

Post by rcthompson » Fri, Oct 19, 2012, 8:55 PM UTC

JoeCortopassi wrote: post #10

Tipzntrix wrote: post #8

Earlier quoted context omitted.

I know a few governments who would be more than happy for github to be disabled.

Care to elaborate why GitHub would be a target for a state sponsored DDOS attack? Seems a little far-fetched, for a website that is virtually unknown outside of the developer community

In the broadest sense, github is a site where anyone can upload and publicize any file of reasonable size. Depending on who is uploading what, that could easily make them a target.

Re: GitHub hit by DDoS attack second day in a row

#12

Post by boomzilla » Fri, Oct 19, 2012, 8:55 PM UTC

ihuman wrote: post #2

Who would try to disable github?

It could just be some rogue deployment script running from EC2 that are a little more active that it should be. Imagine someone is deploying their 1GB repo from GitHub to 100 small EC2 instances :)

Re: GitHub hit by DDoS attack second day in a row

#13

Post by Tipzntrix » Fri, Oct 19, 2012, 9:00 PM UTC

JoeCortopassi wrote: post #10

Tipzntrix wrote: post #8

Earlier quoted context omitted.

I know a few governments who would be more than happy for github to be disabled.

Care to elaborate why GitHub would be a target for a state sponsored DDOS attack? Seems a little far-fetched, for a website that is virtually unknown outside of the developer community

While not as famous as Tor in Iran, for example, there are VPN implementations on GitHub, in addition to what rcthompson said.

Re: GitHub hit by DDoS attack second day in a row

#14

Post by Dirlewanger » Fri, Oct 19, 2012, 9:03 PM UTC

JoeCortopassi wrote: post #10

Tipzntrix wrote: post #8

Earlier quoted context omitted.

I know a few governments who would be more than happy for github to be disabled.

Care to elaborate why GitHub would be a target for a state sponsored DDOS attack? Seems a little far-fetched, for a website that is virtually unknown outside of the developer community

There's some statistic out there somewhere from some paper which found out that like 3 out of every 4 (or something ridiculous like that) cyber attack on the US government comes from China so...it's not that farfetched.

Re: GitHub hit by DDoS attack second day in a row

#15

Post by kmfrk » Fri, Oct 19, 2012, 9:07 PM UTC

onyxraven wrote: post #7

Anyone else having trouble connecting to GitHub via SSH from AWS?

Just SSH in general. I can't push to my repo from my laptop in most cases.

Re: GitHub hit by DDoS attack second day in a row

#16

Post by jsanroman » Fri, Oct 19, 2012, 9:07 PM UTC

Maybe I'm naive, but could they be stealing someone's code? Otherwise I think it's just someone who's trying to prove something.

Re: GitHub hit by DDoS attack second day in a row

#17

Post by carlosaguayo » Fri, Oct 19, 2012, 9:11 PM UTC

redsymbol wrote: post #6

Maybe it's because I just personally identify with the founders of github (i.e. entrepreneurial sw engineers), but I'm starting to get mad at whoever keeps doing this. Here's hoping that with all the smart people this is affecting, the people responsible will be tracked down and exposed.

may whoever is doing this be doomed to use SVN the rest of their lives ...

Re: GitHub hit by DDoS attack second day in a row

#18

Post by rorrr » Fri, Oct 19, 2012, 9:15 PM UTC

ihuman wrote: post #2

Who would try to disable github?

It's the standard weapon of botnet blackmail. Target a large site, bring it down, ask for money.

Fighting DDoS attacks is not trivial, especially if you're against a sophisticated botnet, and your code has multiple slow parts.

Re: GitHub hit by DDoS attack second day in a row

#19

Post by donavanm » Fri, Oct 19, 2012, 9:16 PM UTC

redsymbol wrote: post #6

Maybe it's because I just personally identify with the founders of github (i.e. entrepreneurial sw engineers), but I'm starting to get mad at whoever keeps doing this. Here's hoping that with all the smart people this is affecting, the people responsible will be tracked down and exposed.

From what I've seen it's usually a rational business or policy decision. And your adversaries are in, or acting through, states with a weak rule of law. "Exposing" these actors is impossible/useless until you address that.

Re: GitHub hit by DDoS attack second day in a row

#20

Post by Cherian » Fri, Oct 19, 2012, 9:24 PM UTC

boomzilla wrote: post #12

ihuman wrote: post #2

Who would try to disable github?

It could just be some rogue deployment script running from EC2 that are a little more active that it should be. Imagine someone is deploying their 1GB repo from GitHub to 100 small EC2 instances :)

My startup cucumbertown.com is hit with similar issues.

Initially we blocked all Ec2[1] & spamhaus ip list. But then realized Flipboard proxies[2], some blog aggregation proxies etc are based on Ec2 machines.

What would be a good way to block such rogue machines? Is there a community sponsored list or Ec2/Rackspace ips that are creating issues?

https://forums.aws.amazon.com/ann.jspa?annID=1528

http://flipboard.com/browserproxy/