Live data from Hacker News

The Internet Archive is under a DDoS attack

mastodon.archive.org

101–110 of 227 posts

Re: The Internet Archive is under a DDoS attack

#101

Earlier quoted context omitted.

Paywalled sites?

let me go further: the whole of the copyrighted industry including all media conglomerates (obviously) and all scientific, literary, etc, publishing houses. also, there's a global war, so it well may be a fog-of-war technique or like somebody else also mentioned: someone needs something to stay quite for a little bit as part of some larger operation

Doubt this is coordinated - more likely a singular (m/b)illionaire wanted a post/photo/video, or multiple of, deleted for good, perhaps for suppression of legal evidence, and this was one way of bringing some firepower to a… library. One of the internets biggest libraries too. Odd.

Re: The Internet Archive is under a DDoS attack

#102
post #79
post #73

Earlier quoted context omitted.

What makes that curious?

Cloudflare's "protection" is basically a racket. e.g. https://robindev.substack.com/p/cloudflare-took-down-our-web...

While I think there might be valid arguments to support that claim, that blog post hardly qualifies. The author runs a gambling site and while the way Cloudflare handled the situation (according to the author) could certainly be improved, they clearly were affecting other users by "tainting" shared IPs.

Re: The Internet Archive is under a DDoS attack

#105
This is why I’ve gotten into the habit of maintaining my own WWW archive of sites I find interesting. Probably have around 1 TiB now, and One Of These Days I’d like to set my network up so it can serve arbitrary sites directly from local archive to revive any site I want.

I have a `wget-mirror` shell function invoking wget with all the trimmings that takes care of 99% of sites. I’ll edit the full command into this comment when I get home if anybody else wants to start doing the same :)

Re: The Internet Archive is under a DDoS attack

#107

What are the ways to manage a DDoS attack, preferably using open source? Don't say Cloudflare because they're an extortionist firm.

The only universal way IMHO, is to associate a small cost to every internet request. The cost has to be as small as possible, but it has to be there for million/billion/trillion requests to add up the cost and make it uneconomical to continue the attack past some point.

It is the same problem with email spam. What's stopping someone from sending billions of spam mails?

If we suppose that: a blockchain exists which is fast enough, cheap enough, and spread out enough on the globe (to mitigate latency), then there is no reason, for a tcp packet to not carry with it a small money transaction, in the order of a millionth of a cent. Information gets served back, only when the transaction is confirmed.

In that way, any request with no transaction gets discarded, and only requests with a small cost pass through. Suddenly by sending requests one after another and no end in sight, DDoS attacks and mail spam start to cost money. It is the serving of request that makes DDoS attacks and mail spam to be effective.

The problem however, is that no blockchain is fast enough and cheap enough as of today. But there will be one in a handful of years.

Re: The Internet Archive is under a DDoS attack

#108
post #23

Earlier quoted context omitted.

To sell your services as an arsonist. Being able to point to a big successful attack helps professional DDoSers sell their services.

more cynically, to sell fire-safety insurance

I always wondered if the NSA and Cloud flare do stuff like this with websites not behind cloud flares umbrella.

"Make em offer they can't refuse."

Re: The Internet Archive is under a DDoS attack

#110
post #84

Earlier quoted context omitted.

Doubt cloudflare has anything to do with it. The operators most likely don't want to openly expose their website's ip addresses.

It's obvious why a DDOS provider would want to use Cloudflare, but their point is that Cloudflare turns a blind eye to DDOS providers using their services. Actively helping to keep DDOS providers online while also selling DDOS mitigation isn't a good look to say the least.

Cloudflare is a data goldmine setup by people who love fedoras and newspapers. Professional DDOS providers won't use Cloudflare ever and have the skills, metal and (human) network to do everything in-house.
Post reply on HN