Ironically I can't read this article due to the ongoing Cloudflare explosion.
Yup, many links I have tried to access without success. Well, sucks to have such a centralized Internet.
Azure hit by 15 Tbps DDoS attack using 500k IP addresses
281–290 of 318 posts
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#282[deleted]
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#283Earlier quoted context omitted.
Because then the ISPs have to provide support on how to secure those devices.
I will say most of the time the ISPs themselves provide the routers at residential homes
Sure, but if they now go out and say do this and that to secure them a big portion of the users will have support issues. They don't understand the instruction, the pressed the wrong button, they entered the wrong value, all sorts of things could go wrong and the ISP has to dedicate resources in fixing it while they don't gain anything in return.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#284> by exploiting compromised home routers and cameras, mainly in residential ISPs in the United States and other countries, Presumably it’s possible to log the residential IP of the source of these packets. Why isn’t there any industry group pushing for the ISPs to a) send the owners an email telling them or b) blocking off all traffic for a period to get them to do something - or is the economic cost higher than caus…
The economic costs of that fall on the (residential) ISPs and they aren't really incurring very much cost in additional bandwidth from the outgoing attacks. In most cases it will be 0. It's not 'good', as it could affect quality to a certain extent for other subscribers and it's theoretically possible it could result in a slightly higher transit bill, but ultimately it's just not really a problem for them. Setting up…
This is why we need an external rogue actor to send those notification emails without ISP consent.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#285> by exploiting compromised home routers and cameras, mainly in residential ISPs in the United States and other countries, Presumably it’s possible to log the residential IP of the source of these packets. Why isn’t there any industry group pushing for the ISPs to a) send the owners an email telling them or b) blocking off all traffic for a period to get them to do something - or is the economic cost higher than caus…
This already happens in the Netherlands, your router will be put in quarantine mode and you have to prove that the "virus" is gone This happened to me, at the time I thought it was strange but seeing this event happen it makes a lot more sense now
What percentage of the population would have any idea how to do this? How long does it take to go through the process? Is your work, education, and safety just put on pause during this phase?
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#286Earlier quoted context omitted.
Name a few.
https://en.wikipedia.org/wiki/XZ_Utils_backdoor https://medium.com/@aleksamajkic/fake-sms-how-deep-does-the-... https://blog.linuxmint.com/?p=2994 https://www.bleepingcomputer.com/news/linux/malicious-packag... https://www.cnx-software.com/2021/04/22/phd-students-willful... I could go on but I trust this is a sufficient number of examples.
Only two of these were actual malicious commits. Two others were malware inserted into the repositories (if Twitter could be thought of as a meta-repo), which is bad but not on the same scale.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#287Impressive. Just reacting to the headline since the article is inaccessible.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#288> by exploiting compromised home routers and cameras, mainly in residential ISPs in the United States and other countries, Presumably it’s possible to log the residential IP of the source of these packets. Why isn’t there any industry group pushing for the ISPs to a) send the owners an email telling them or b) blocking off all traffic for a period to get them to do something - or is the economic cost higher than caus…
Hmm is there a haveibeenpwned for IP addresses found in botnets? Perhaps correlated at the time of known incidents.
I would like to know if I'm serving a rogue machine and not been paying attention.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#289Ironically I can't read this article due to the ongoing Cloudflare explosion.
I am surprised no one has mentioned that today is Microsoft's conference keynote.
Re: Azure hit by 15 Tbps DDoS attack using 500k IP addresses
#290Earlier quoted context omitted.
This exchange is somewhat hilarious. Oh how on earth do we keep things safe and secure if everyone can see the code and verify what it does! Who would keep us safe if we turn our backs to unverifiable, unvetted, unprofitable security fixes, by for-profit companies!
> how on earth do we keep things safe and secure if everyone can see the code and verify what it does! That's not always the silver bullet you seem to think it is. Have you ever tried to build something like Chromium, Firefox, or LLVM yourself? It's not realistic to do that on a mid tier let alone low end device. Even when you go to the trouble of getting a local build set up, more often than not the build system imm…
LLVM isn't so bad compared to the browsers. Relatively standard CMake build with mostly self contained c++ codebase and few third party dependencies. You don't need a crazy thread ripper workstation to do a build in reasonable time. A somewhat modern 8-16 core desktop CPU should be able to do it in 10-20 minutes or faster. Based on compilation benchmarks I have seen even some of 15 year old 4 core CPUs or 5year old mid/low tier mobile CPUs do it under hour.
Most importantly you need to pay attention to RAM usage, if necessary reducing parallelism so that it doesn't need to swap.