Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Arxiv.org is experiencing a DDoS attack

blog.arxiv.org

Post reply on HN
Print view View original

31–40 of 49 posts

Re: Arxiv.org is experiencing a DDoS attack

#31

Post by pera »

elashri wrote: post #4

> We will shortly be reaching out to the abuse desk of the affected ISP for assistance. Does anyone here have experience working with an ISP in abuse cases like this one, specially a Chinese ISP?

Not from China but yes, usually they are very quick to respond, it's crucial for most ISPs to maintain a good reputation.

Re: Arxiv.org is experiencing a DDoS attack

#35

Post by smohare »

Angostura wrote: post #26
plaguepilled wrote: post #20

Earlier quoted context omitted.

Doesn't change the point. Also doesn't refute the point.

The original suggested "Gatekeepers who hate open access." The example was actually a Gatekeeper who values peer review before publication.

[dead]

Re: Arxiv.org is experiencing a DDoS attack

#36

Post by quickthrower2 »

Angostura wrote: post #25
KirillPanov wrote: post #24

Look, arxiv.org is awesome and I love them, but they really can't expect the ITU or abuse-reporting groups to bail them out here. If you have some web service that sends emails, it's on you to pick a sensible rate limit for it ( not 1,000,000 messages per day unless you're Fastmail) and to hierarchically bucket that ratelimit by the routable prefix (first 24 bits) of the requester's IP address. As the bucket empties,…

> Alright go ahead, downvote me to negative-billion. I can handle it. I tried, but HN seems to implement some kind of rate limiting. D'Oh

It’s an ego preservation system, it only shows downvotes to -4 :-)

Re: Arxiv.org is experiencing a DDoS attack

#37

Post by gcanyon »

KirillPanov wrote: post #24

Look, arxiv.org is awesome and I love them, but they really can't expect the ITU or abuse-reporting groups to bail them out here. If you have some web service that sends emails, it's on you to pick a sensible rate limit for it ( not 1,000,000 messages per day unless you're Fastmail) and to hierarchically bucket that ratelimit by the routable prefix (first 24 bits) of the requester's IP address. As the bucket empties,…

I upvoted you out of spite :-)

Re: Arxiv.org is experiencing a DDoS attack

#39

Post by cbf66 »

bagels wrote: post #8
KRAKRISMOTT wrote: post #6

A million password resets is shockingly low for a DDOS, could this have been an university assignment gone wrong? I can imagine some clueless dean ordering all their engineering grads to submit research to arXiv. If they have 100-200K students, a single poorly written script to link the institution's SSO with automatically created arXiv accounts could easily overwhelm the system.

What school has 200k engineering students?

It was from about 10 accounts. Which we suspended. But it appears that they created new accounts overnight (daytime in China). arXiv is not well-equipped to play whack-a-mole.

And 10 accounts using 100 different IP addresses, would seem unlikely for an innocent project. And creating new accounts ...

Re: Arxiv.org is experiencing a DDoS attack

#40

Post by qmarchi »

cbf66 wrote: post #38
elashri wrote: post #4

> We will shortly be reaching out to the abuse desk of the affected ISP for assistance. Does anyone here have experience working with an ISP in abuse cases like this one, specially a Chinese ISP?

Well, no reply from the ISP so far.

Have you tried blocking only endpoint for the IPs in question?

Happy to help discussing mitigation techniques. Long time user of ArXiv. Email in Bio.

Post reply on HN