Live data from Hacker News

Internet Attack Spreads, Disrupting Major Websites

nytimes.com

201–210 of 263 posts

Re: Internet Attack Spreads, Disrupting Major Websites

#201
post #45

Irony alert: > "But technology providers in the United States could suffer blowback. As Dyn fell under recurring attacks on Friday, Mr. York, the chief strategist, said such assaults were the reason so many companies are pushing at least parts of their infrastructure to cloud computing networks, to decentralize their systems and make them harder to attack." Pushing your infrastructure to cloud computing is not decent…

This is one of the many reasons AWS and cloud computing in general are way overrated. I know of a company that pays an AWS bill sufficient to buy the equivalent of their pre-cloud datacenter's hardware every 1.5 months. The extra staff required to perform hardware maintenance would also cost about 2 months' worth of AWS each year (that means they're paying ~3x more than they would with hardware). Yet they moved to th…

I think in some cases it might simply be the means to dump 1) people/groups that just don't have a large scale mindset and 2) bypass business processes that are absolutely not designed for large scale systems.

In that scenario you have a bunch of entrenched groups fighting about capex, capacity planning and budget all to get barely enough hardware to account for what you're doing in the next 3-12 months. Instead of taking a step back and creating a long term simple process for regular growth and replacement they get caught in the weeds because they have very old school mindsets.

Then you have your old school finance groups who are using terrifyingly delicate and complex interconnected spreadsheets to manage hardware expenditures and depreciation while maintaining old school draconian policies concerning CapEx budgets but allowing you to basically go nuts with OpEx.

You could try to change the culture in these entrenched groups who will view your attempts to make things better as political moves against them or you could just say "we're moving everything into the cloud" and make a complete end run around all of the people and baggage. The former is probably the "right" thing to do but the latter is going to let you focus on your product letting you get you back to being competitive.

Re: Internet Attack Spreads, Disrupting Major Websites

#202
post #33
post #27

Earlier quoted context omitted.

Hopefully it's not related threats about hacking during the election. Remember that recently Biden openly threatened cyber attack on Russia if they make any attempt to tamper with the election. Which is completely unprecedented, as is the notion that DOD is openly saying Russia was behind DNC and other attacks.

Also what amazed me is that he would casually threaten to strike Russia. It seems that no one considers these attacks as an act of war. But that's what they are.

God I fucking hope not. I'd much rather lose access to some services and focus on technical mitigations than literally start a war over it. I don't want me or my family to die just because services go down or businesses lose some income.

Re: Internet Attack Spreads, Disrupting Major Websites

#203
post #121

Earlier quoted context omitted.

> Enable private consultants and companies to provide this as a service. If I am an AWS customer I expect AWS to handle/prevent DDoS, same way as they do with S3 to achieve 11 9's availability (the files are saved in multiple AZs in the same region - Glacier IIRC copy files on different regions to avoid data loss in case of physical disaster). One of the reason for choosing AWS is because AMZ has deep pockets and has…

When you are DDOSed they will keep supplying the resources for you to consume and pay them extra. Cloud is commodity so don't expect to be treated like a special snowflake. Your distress is their opportunity to make extra money. Offtopic but relevant. One of my customer moved their email to O365 without understanding the differences from being ON-Prem. Now they are struggling to adopt their business processes to then…

>When you are DDOSed they will keep supplying the resources for you to consume and pay them extra.

If the attack is tiny, sure. Otherwise they'll just cut you off.

Re: Internet Attack Spreads, Disrupting Major Websites

#204

Is this the end of the Internet that news.com predicted back in 1995?

Are you talking about this Newsweek article? http://www.newsweek.com/clifford-stoll-why-web-wont-be-nirva...

Looks like that author has continued down the path of that line of though though, if you look at the books listed on his Wikipedia page: https://en.wikipedia.org/wiki/Clifford_Stoll#Books

Re: Internet Attack Spreads, Disrupting Major Websites

#205

Earlier quoted context omitted.

When you are DDOSed they will keep supplying the resources for you to consume and pay them extra. Cloud is commodity so don't expect to be treated like a special snowflake. Your distress is their opportunity to make extra money. Offtopic but relevant. One of my customer moved their email to O365 without understanding the differences from being ON-Prem. Now they are struggling to adopt their business processes to then…

>When you are DDOSed they will keep supplying the resources for you to consume and pay them extra. If the attack is tiny, sure. Otherwise they'll just cut you off.

> If the attack is tiny, sure. Otherwise they'll just cut you off.

Yet they get to claim inexhaustible capacity.

Re: Internet Attack Spreads, Disrupting Major Websites

#206
post #171
post #121

Earlier quoted context omitted.

> Enable private consultants and companies to provide this as a service. If I am an AWS customer I expect AWS to handle/prevent DDoS, same way as they do with S3 to achieve 11 9's availability (the files are saved in multiple AZs in the same region - Glacier IIRC copy files on different regions to avoid data loss in case of physical disaster). One of the reason for choosing AWS is because AMZ has deep pockets and has…

> do with S3 to achieve 11 9's availability I see so many people confused about this. Eleven nines is their durability guarantee, their availability that they guarantee is only 99.99% https://aws.amazon.com/s3/faqs/

What's the difference between durability and availability?

Re: Internet Attack Spreads, Disrupting Major Websites

#207
post #33

Earlier quoted context omitted.

Also what amazed me is that he would casually threaten to strike Russia. It seems that no one considers these attacks as an act of war. But that's what they are.

God I fucking hope not. I'd much rather lose access to some services and focus on technical mitigations than literally start a war over it. I don't want me or my family to die just because services go down or businesses lose some income.

I am not sure you will think the same if someone in your family is at the local hospital and the electricity has been shut down

Re: Internet Attack Spreads, Disrupting Major Websites

#208
post #171

Earlier quoted context omitted.

> do with S3 to achieve 11 9's availability I see so many people confused about this. Eleven nines is their durability guarantee, their availability that they guarantee is only 99.99% https://aws.amazon.com/s3/faqs/

What's the difference between durability and availability?

durability means you'll get your bits eventually.

availability means you'll get your bits immediately.

Re: Internet Attack Spreads, Disrupting Major Websites

#209
post #171

Earlier quoted context omitted.

> do with S3 to achieve 11 9's availability I see so many people confused about this. Eleven nines is their durability guarantee, their availability that they guarantee is only 99.99% https://aws.amazon.com/s3/faqs/

What's the difference between durability and availability?

Availability is the % of times you try to access your data that you get it back. So 52.5 minutes of downtime a year is still within SLA.

Durability is the % of your data that doesn't die. Eleven 9s means that if you store 1TB on AWS S3 you can expect to lose 10 bytes and still be within SLA.

Re: Internet Attack Spreads, Disrupting Major Websites

#210
post #209

Earlier quoted context omitted.

What's the difference between durability and availability?

Availability is the % of times you try to access your data that you get it back. So 52.5 minutes of downtime a year is still within SLA. Durability is the % of your data that doesn't die. Eleven 9s means that if you store 1TB on AWS S3 you can expect to lose 10 bytes and still be within SLA.

No, it means that if you store your data there that there is a .000000001% chance that you will lose all of it.
Post reply on HN