Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arxiv.org is experiencing a DDoS attack

blog.arxiv.org

Post reply on HN
Print view View original

21–30 of 49 posts

Re: Arxiv.org is experiencing a DDoS attack

#21

Post by [deleted] »

plaguepilled wrote: post #20
tokai wrote: post #19

Earlier quoted context omitted.

The author of that tweet clearly has an issue with the arxiv being an open repository where everyone can upload anything. There is nothing about open access in the tweet. And arxiv is not same as the concept or movement of open access. Most articles on Arxiv doesn't even have a proper license to fulfill the definition of Open Access in the BOAI declaration. Further proof that the authors tweet is not about or against…

Doesn't change the point. Also doesn't refute the point.

[deleted]

Re: Arxiv.org is experiencing a DDoS attack

#23

Post by KirillPanov »

elashri wrote: post #4

> We will shortly be reaching out to the abuse desk of the affected ISP for assistance. Does anyone here have experience working with an ISP in abuse cases like this one, specially a Chinese ISP?

If it's one ISP you don't work with them, you simply add a `drop` rule for their IP range.

I think this article is misleading; there's nothing terribly "distributed" about the DoS.

Re: Arxiv.org is experiencing a DDoS attack

#24

Post by KirillPanov »

Look, arxiv.org is awesome and I love them, but they really can't expect the ITU or abuse-reporting groups to bail them out here.

If you have some web service that sends emails, it's on you to pick a sensible rate limit for it (not 1,000,000 messages per day unless you're Fastmail) and to hierarchically bucket that ratelimit by the routable prefix (first 24 bits) of the requester's IP address. As the bucket empties, respond more and more slowly. This way the worst a DDoSer can do is mildly annoy people who happen to use the same ISP that they do -- but eventually even those people will still get through.

I'm sorry, but this is just the sort of thing everybody has to do in order to preserve a decentralized Internet. Because if we don't all do this sort of stuff, pretty soon it won't be the Internet anymore, it'll be the CloudflareNet.

Alright go ahead, downvote me to negative-billion. I can handle it.

Re: Arxiv.org is experiencing a DDoS attack

#25

Post by Angostura »

KirillPanov wrote: post #24

Look, arxiv.org is awesome and I love them, but they really can't expect the ITU or abuse-reporting groups to bail them out here. If you have some web service that sends emails, it's on you to pick a sensible rate limit for it ( not 1,000,000 messages per day unless you're Fastmail) and to hierarchically bucket that ratelimit by the routable prefix (first 24 bits) of the requester's IP address. As the bucket empties,…

> Alright go ahead, downvote me to negative-billion. I can handle it.

I tried, but HN seems to implement some kind of rate limiting. D'Oh

Re: Arxiv.org is experiencing a DDoS attack

#26

Post by Angostura »

plaguepilled wrote: post #20
tokai wrote: post #19

Earlier quoted context omitted.

The author of that tweet clearly has an issue with the arxiv being an open repository where everyone can upload anything. There is nothing about open access in the tweet. And arxiv is not same as the concept or movement of open access. Most articles on Arxiv doesn't even have a proper license to fulfill the definition of Open Access in the BOAI declaration. Further proof that the authors tweet is not about or against…

Doesn't change the point. Also doesn't refute the point.

The original suggested "Gatekeepers who hate open access."

The example was actually a Gatekeeper who values peer review before publication.

Re: Arxiv.org is experiencing a DDoS attack

#27

Post by woadwarrior01 »

davidgerard wrote: post #17
kawhah wrote: post #16

Earlier quoted context omitted.

The tweet says "arxiv is a cancer". It's obviously reasonable evidence that some people don't like arxiv. You are splitting hairs.

and the context really isn't "gatekeepers hate open access", is it.

The context is that the author of the tweet hates fast paced open research (which IMO is a net good for humanity) and makes up the strawman `"can't keep up" + "anything older than 6 months is irrelevant" in CS` quotes to justify that position.

There's timeless beauty in CS, but there's also a lot more fertile ground for research in CS, given how young the field is compared to the older sciences.

Re: Arxiv.org is experiencing a DDoS attack

#28

Post by woadwarrior01 »

timeon wrote: post #22
woadwarrior01 wrote: post #14

Earlier quoted context omitted.

Gatekeepers who hate open access. https://x.com/emilymbender/status/1696374958652522612

> Gatekeepers who hate open access. For some reason I can not access this link.

https://nitter.net/emilymbender/status/1696374958652522612#m

Re: Arxiv.org is experiencing a DDoS attack

#29

Post by mousetree »

bagels wrote: post #8
KRAKRISMOTT wrote: post #6

A million password resets is shockingly low for a DDOS, could this have been an university assignment gone wrong? I can imagine some clueless dean ordering all their engineering grads to submit research to arXiv. If they have 100-200K students, a single poorly written script to link the institution's SSO with automatically created arXiv accounts could easily overwhelm the system.

What school has 200k engineering students?

They would also have to be in the same class and all running their code at the same time.
Post reply on HN