Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tech Startups Are Targets of Ransom Cyberattacks

bits.blogs.nytimes.com

Post reply on HN
Print view View original

11–19 of 19 posts

Re: Tech Startups Are Targets of Ransom Cyberattacks

#11

Post by tlrobinson »

jiggy2011 wrote: post #8
hoggle wrote: post #7

Earlier quoted context omitted.

Namecoin, Ethereum and Open Transactions come to mind. Maybe the future is much more evenly distributed and we all make a living by offering energy and computing power to those services? Why did PGP never take off? I would love to set up my own "miner" for it to play its part in a truly decentralized and secure Email service. Open source as the "business model" is key in that scenario. I don't have enough energy nor…

The problem here is that the money is made by providing commodity services rather than engineering effort. So the person who designs the innovative decentralized system makes much less money than the person who can throw a lot of cheap servers into a rack.

Bitcoin itself is possibly one of the first exceptions to that.

We could see more opportunities for distributed services to be monetized in similar ways. It needs to be done carefully, as there's a strong bias against "pre-mined" schemes.

Read up on DAO/DACs if you're interested ("Decentralized/Digital Autonomous Corporations/Organizations" https://en.wikipedia.org/wiki/Digital_Autonomous_Corporation https://en.bitcoin.it/wiki/Distributed_Autonomous_Community_...). It's still mostly theoretical stuff, but Ethereum, ProtoShares, etc are working on these ideas.

Re: Tech Startups Are Targets of Ransom Cyberattacks

#12

Post by hoggle »

jiggy2011 wrote: post #8
hoggle wrote: post #7

Earlier quoted context omitted.

Namecoin, Ethereum and Open Transactions come to mind. Maybe the future is much more evenly distributed and we all make a living by offering energy and computing power to those services? Why did PGP never take off? I would love to set up my own "miner" for it to play its part in a truly decentralized and secure Email service. Open source as the "business model" is key in that scenario. I don't have enough energy nor…

The problem here is that the money is made by providing commodity services rather than engineering effort. So the person who designs the innovative decentralized system makes much less money than the person who can throw a lot of cheap servers into a rack.

Maybe if there was some kind of token connected with paying the services the originator would be able to stash a lot of them very cheaply at the very beginning of the network's lifecycle - think Bitcoin/Namecoin again.

Re: Tech Startups Are Targets of Ransom Cyberattacks

#13

Post by theboss »

eertami wrote: post #9
hopfog wrote: post #3

I was speaking to someone in the esports industry yesterday who said that DDoS attacks have become a real problem in high tier tournaments. Apparently you can get a bot net which is more than capable of blowing out the whole opposing team for as low as $100.

The problem of DDoS in high tier gaming isn't a new one, probably 10 years or longer. What I don't understand however, is why these players who are affected by DDoS are still leaking their IP with Skype all the time. Uninstall Skype, get a new IP, and it'll probably never happen to them again.

Or use a secret skype if it is necessary... A lot of streamers use skype to provide content of them interacting with others in an interesting way (and skype is pretty good for this without the hassle of ventrilo, mumble, teamspeak, or whatever alternative).

I don't see why more of them don't make token skype accounts regularly. It isn't much of a hassle and it raises the security bar quite a lot compared to always using the same account.

Re: Tech Startups Are Targets of Ransom Cyberattacks

#14

Post by nraynaud »

zackliscio wrote: post #4
rguzman wrote: post #2

heh...basecamp, meetup, vimeo, and bit.ly are 'small'. Are there any documented instances of this happening to smaller startups? And, relatedly, are a set of best practices emerging to deal with this sort of a thing?

I'd be really curious to see best practices for smaller startups. We've never been hit with a DDOS, but bot attacks seem pretty commonplace. I'd love to see the open source community come together to create some mitigation strategies, though I admit I don't know what they would entail.

I naively think I could just go to cloudflare with my attacked site, am I wrong?

Re: Tech Startups Are Targets of Ransom Cyberattacks

#16

Post by rickr »

rguzman wrote: post #2

heh...basecamp, meetup, vimeo, and bit.ly are 'small'. Are there any documented instances of this happening to smaller startups? And, relatedly, are a set of best practices emerging to deal with this sort of a thing?

While certainly not a startup I manage an altcoin pool and DDOS seems to be a big deal in this space. In fact my pool (http://awesomehash.com) just got his this morning.

It's a really bad feeling. Our miners really have no reason to stay with us. For a majority of them, as long as the servers are up there's no difference between pools. If our servers go down, even through no fault of our own we stand to lose a bunch of our members, and who knows if they'll come back.

As for solutions, we implemented a few new iptables rules, and we ended moving from DO to another VPS provider who has DDOS mitigation. There really isn't much you can do.

Re: Tech Startups Are Targets of Ransom Cyberattacks

#18

Post by kylemaxwell »

eertami wrote: post #9
hopfog wrote: post #3

I was speaking to someone in the esports industry yesterday who said that DDoS attacks have become a real problem in high tier tournaments. Apparently you can get a bot net which is more than capable of blowing out the whole opposing team for as low as $100.

The problem of DDoS in high tier gaming isn't a new one, probably 10 years or longer. What I don't understand however, is why these players who are affected by DDoS are still leaking their IP with Skype all the time. Uninstall Skype, get a new IP, and it'll probably never happen to them again.

Also Twitch uses IRC for its chatting, so streamers (which have a lot of overlap here) frequently leak their addresses without realizing it.
Post reply on HN