Live data from Hacker News

My cat alerted me to a DDoS attack

dannyguo.com

21–30 of 107 posts

Re: My cat alerted me to a DDoS attack

#22
post #19
post #9

It's so easy to crush ddos with token buckets that usually the only thing I need my cat to wake me for is when my Discord gets raided.

never heard of this before. I looked it up https://en.wikipedia.org/wiki/Token_bucket I think this would be like a firewall or ingress thing that would drop packets that resulted in excess load before they make it to the application server.

It's a common rate limiting algorithm. Here's an interesting article from Stripe on how they use it in their APIs. [1]

[1] https://stripe.com/blog/rate-limiters

Re: My cat alerted me to a DDoS attack

#23
post #19
post #9

It's so easy to crush ddos with token buckets that usually the only thing I need my cat to wake me for is when my Discord gets raided.

never heard of this before. I looked it up https://en.wikipedia.org/wiki/Token_bucket I think this would be like a firewall or ingress thing that would drop packets that resulted in excess load before they make it to the application server.

Here's the code I use: https://github.com/jart/cosmopolitan/blob/master/net/http/to...

Re: My cat alerted me to a DDoS attack

#24
> We didn’t reply, though in retrospect, it could have been fun to try to troll them.

Not replying is the only valid answer. Trolling them could potentially put you more on their radar and get targeted for other attacks. And for what?

Re: My cat alerted me to a DDoS attack

#26
The princely sum of $5,000. We got that at my employer back in 2016. We got hit by a ddos, and decided to ignore it, though we did dig up some BTC just in case. We enacted a bunch of DDoS protection as a result, costing way more than $5,000, but not paying money to extortionists is worth every penny.

Re: My cat alerted me to a DDoS attack

#28

> With horrible grammar Ah, the days before ChatGPT! On a more serious note, do you think there will ever be a way to stop ddos attacks once and for all? While all threats are bad, ddos is the most lame type of attacks there is; no special skill or knowledge are needed, just load a script or, heck, pay someone who'll execute it for you as a service.

Cloudflare does a pretty good job of managing it, at the cost of some centralization.

It would be pretty cool if there was a way to DDOS-harden at the protocol layer. Not sure if that’s even possible though

Re: My cat alerted me to a DDoS attack

#30

The princely sum of $5,000. We got that at my employer back in 2016. We got hit by a ddos, and decided to ignore it, though we did dig up some BTC just in case. We enacted a bunch of DDoS protection as a result, costing way more than $5,000, but not paying money to extortionists is worth every penny.

The problem with paying extortion or ransoms is that you incentivize the attacker to come back and do it again. It may have been $5k to pay off one attacker and more than that to build the defense, but now you have defenses and are less likely to suffer attackers in the future. And as you say, not paying money to criminals is inherently worthwhile.
Post reply on HN