Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Canonical/Ubuntu have been under DDoS

status.canonical.com

Post reply on HN
Print view View original

21–30 of 76 posts

Re: Canonical/Ubuntu have been under DDoS

#21

Post by Hnrobert42 »

sig-11 wrote: post #20
piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

We're at the stage where we blame AI for anything as a first reaction? (Love the tv pickup story. I also thought of that, in other situations)

Indeed. It is far more likely to be the copyfail issue.

Re: Canonical/Ubuntu have been under DDoS

#22

Post by Yoric »

piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

Well, that and the rush to upgrade for copy.fail.

Has Ubuntu published patches yet?

Re: Canonical/Ubuntu have been under DDoS

#23

Post by ImJasonH »

piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

In the US we have the Super Bowl Flush: https://medium.com/nycwater/the-big-flush-on-super-bowl-sund...

Re: Canonical/Ubuntu have been under DDoS

#24

Post by piker »

sig-11 wrote: post #20
piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

We're at the stage where we blame AI for anything as a first reaction? (Love the tv pickup story. I also thought of that, in other situations)

I wasn't blaming this issue on that in particular, just making an more general observation in line with the post. I'll make that clearer.

Re: Canonical/Ubuntu have been under DDoS

#25

Post by wafflemaker »

ForHackernews wrote: post #8
Wxc2jjJmST9XWWL wrote: post #5

Noticed it because snap didn't work, snap has its own status page just fyi: https://status.snapcraft.io/

Frustrating because the Slack snap is broken so every day you have to downgrade it and I guess you can't without connectivity. This might be the incentive I need to finally purge snap.

Snap recently got much more polished.

I used to have to find a script to purge excess old snaps that would fill up my hard drive. Now Ubuntu only keeps two versions of each snap.

I was wondering why the script didn't have to ever clean more than one version, even when I took longer between running updates.

Re: Canonical/Ubuntu have been under DDoS

#26

Post by ramon156 »

kubb wrote: post #3
Faaak wrote: post #2

Tinfoil hat mode: a competitor wants to exploit copy.fail on some ubuntu servers, and is DDoSing canonical so that they can't update and thus patch the vuln

s/competitor/intelligence services/

+1, it hasnt even been 24 hours and I already see these stupid CyberSec companies trying to squeeze themselves between this.

Re: Canonical/Ubuntu have been under DDoS

#27

Post by jamessb »

Yoric wrote: post #22
piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

Well, that and the rush to upgrade for copy.fail. Has Ubuntu published patches yet?

Yes, but I can currently only load the page about them via the Wayback Machine: https://web.archive.org/web/20260430191621/https://ubuntu.co...

Re: Canonical/Ubuntu have been under DDoS

#28

Post by tgv »

ImJasonH wrote: post #23
piker wrote: post #16

Though this outage may be more related to the copy.fail upgrade cycle, it reminds me of a thought I've had recently in respect of agents. In the UK they have this issue called "TV pickup" ( https://en.wikipedia.org/wiki/TV_pickup ). TV pickup is where everyone in the UK watching a popular TV show gets up to boil a high-powered tea kettle at the same time on an ad break. This causes a temporary surge in electricity de…

In the US we have the Super Bowl Flush: https://medium.com/nycwater/the-big-flush-on-super-bowl-sund...

It's literally the plot of https://en.wikipedia.org/wiki/Flushed_Away

Re: Canonical/Ubuntu have been under DDoS

#30

Post by [deleted] »

loufe wrote: post #17
bjackman wrote: post #14

Earlier quoted context omitted.

If you can access AF_ALG on a server you don't need to do shenanigans like that. It's much easier to just find another bug and exploit that one instead. The copy.fail website is very silly, it is not a special bug. If anyone gets compromised by that vuln their node architecture was broken anyway, patching copy.fail doesn't help.

In what way is it "not a special bug"? It's a publicly known root access from RCE exploit. Those cannot be a dime a dozen. I'm sure it's especially interesting for any shared hosting services which might be affected, and could be delayed. I could find any places running containered services and exfiltrate secrets parallel services, no? What constitutes "special" for you, out of curiosity? Something chaining with a hy…

[deleted]
Post reply on HN