Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Jerks on the Internet: what my first DDoS taught me

sergiomattei.com

Post reply on HN
Print view View original

21–30 of 95 posts

Re: Jerks on the Internet: what my first DDoS taught me

#21

Post by nocman »

astura wrote: post #15
pravda wrote: post #14

Why not just block all visitors with user agent curl? Let me just say, that's a really dumb DDOS attack. Edit: one other thing, we spell it psych and not sike .

>we spell it psych and not sike. I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days. Wikionary lists it as a variant of "psych." https://en.wiktionary.org/wiki/sike

I guess that depends on who is doing the spelling. Seems to me that the 80's spelling of it was "sike". This website seems to agree:

http://www.inthe80s.com/glossary.shtml

Re: Jerks on the Internet: what my first DDoS taught me

#22

Post by sergiomattei »

yoongkang wrote: post #11

Good steps to take in the article. But I'd also add that Django REST Framework, which they seem to be using, has throttling capabilities built-in which I would have attempted before changing the API: https://www.django-rest-framework.org/api-guide/throttling/ Adding pagination seems reasonable, but it may have broken clients who didn't expect pagination to be there.

Hi! Thanks for the recommendation, I did go with that approach

Re: Jerks on the Internet: what my first DDoS taught me

#23

Post by sergiomattei »

paulie_a wrote: post #17

>which hosts other in-development apps too Don't do that >I trust my users completely. Don't do that >Prioritize bugfixes over new features while that is a nice thought, it is unlikely to be so simply followed. "the road to hell is paved with good intentions" >people editing other’s tasks for example, haha That's a very cavelier attitude to take. Quite frankly that should have been baked in from the get go with tests…

It was actually all unit tested - bugs happen though, and that one was a particularly nasty one.

It was patched though and there was no evidence that anyone ever used it.

Re: Jerks on the Internet: what my first DDoS taught me

#25

Post by astura »

pravda wrote: post #16
astura wrote: post #15

Earlier quoted context omitted.

>we spell it psych and not sike. I have been informed by someone a generation younger than me that "the kids" are intentionally spelling it "sike" these days. Wikionary lists it as a variant of "psych." https://en.wiktionary.org/wiki/sike

oh..gosh. well, that makes sense, in a way. I confess I did have to google how to spell 'psych' properly. started from 'pysch'.

I always was sure it was spelled psych, since it's basically short for "psyched out" and I had always seen it spelled that way.

But the topic recently came up in conversation with my teenaged niece, she claims it's definitely spelled "sike" even though she's fully aware of the etymology.

I chocked it up to a "kids these days" generational kinda thing, like how we got "phat" in the 70s and "kewl" in the 90s, both of which are now in the Oxford English Dictionary.

Re: Jerks on the Internet: what my first DDoS taught me

#29

Post by fxfan »

Does anybody have experience in getting DDOS'd? All i see are 3 ip addresses (offending) in the screenshot and it makes me wonder how many is typical?

I have never been ddos's and all I ever receive are failed ssh attempts with simple passwords. Pretty much the easiest thing to tackle. But I'd love to know from DDOS'd people how their attacks looked?

From cloudflare logs all I see is a single IP address being blocked (multiple times? Or is it their multiple actions being blocked?).

EDIT: Thanks all, these were helpful answers.!

Post reply on HN