Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

GitHub hit by DDoS attack second day in a row

thenextweb.com

Post reply on HN
Print view View original

41–50 of 72 posts

Re: GitHub hit by DDoS attack second day in a row

#41

Post by adgar2 »

bkanber wrote: post #28
codinghorror wrote: post #23

Can we please use some of that 100 million investment to buy an infrastructure that is more resilient to these kinds of DDoS attacks? Pretty please? This is a service I pay for and my business relies on. Having it down three times in three days impacts our work.

Did it really impact your work, other than slightly inconveniencing you? "UGH GitHub down again, I guess I have to go work on something equally as important for upwards of an hour" I call shenanigans on you, good sir.

Because high availability is for legacy waterfall chumps. Github's too busy being rockstars.

Re: GitHub hit by DDoS attack second day in a row

#42

Post by adgar2 »

maratd wrote: post #4
tegansnyder wrote: post #3

Earlier quoted context omitted.

Thank is exactly what I was thinking. Who in their right mind would want to do that?

Someone who wants to test the limits of their botnet and technique. Can you think of a more tech savvy target?

Google. Amazon. Microsoft. Apple. Facebook. Most startups.

Re: GitHub hit by DDoS attack second day in a row

#43

Post by SethMurphy »

maratd wrote: post #4
tegansnyder wrote: post #3

Earlier quoted context omitted.

Thank is exactly what I was thinking. Who in their right mind would want to do that?

Someone who wants to test the limits of their botnet and technique. Can you think of a more tech savvy target?

Attacking a rails application, you would be proud of that? Rails sites are not exactly known for their performance.

Re: GitHub hit by DDoS attack second day in a row

#44

Post by zalambar »

peripetylabs wrote: post #38

Perhaps I'm misunderstanding: I thought one goal of DVCS was to remove central points of failure? In that sense, isn't a central "hub" regressive? I wonder if there's a way to host Git repositories with static files, say, on Amazon S3... That would be neat.

Git is distributed and there's no reason you should have to stop working, or committing, just because github is temporarily unavailable. At least for dependencies only on git. Losing access to wikis, pull requests, and issues may be a problem for some teams.

http://ozmm.org/posts/when_github_goes_down.html has a good summary of quick ways to keep using git without github.

Re: GitHub hit by DDoS attack second day in a row

#45

Post by Serplat »

jiggy2011 wrote: post #36
codinghorror wrote: post #29

Earlier quoted context omitted.

Since when is it OK for the services I rely on and pay for to even slightly inconvenience me ... for three days in a row? Since never. At least for businesses that want to remain an ongoing concern.

If high availability git is so critical then why not run your own git servers instead of or in addition to github? I find it slightly ironic that the entire point of git is that it is distributed version control but 90% of git use seems to be focused around a product from a single company.

Github isn't solely a git server. They also have issues, wikis, etc, that are harder to keep in multiple locations.

Re: GitHub hit by DDoS attack second day in a row

#46

Post by moe »

rcthompson wrote: post #11
JoeCortopassi wrote: post #10

Earlier quoted context omitted.

Care to elaborate why GitHub would be a target for a state sponsored DDOS attack? Seems a little far-fetched, for a website that is virtually unknown outside of the developer community

In the broadest sense, github is a site where anyone can upload and publicize any file of reasonable size. Depending on who is uploading what, that could easily make them a target.

In the broadest sense, about 10 million web-forums and similar sites also match your description...

Why would they go for github of all things?

Re: GitHub hit by DDoS attack second day in a row

#47

Post by dsl »

w1ntermute wrote: post #35

It's pretty crazy how just a couple thousand LOICs can incapacitate a site as prominent as GitHub. I wonder how many machines are involved this time.

LOIC is pretty easy to filter, it's about a 1 out of 10 on the difficulty scale. Either GitHub as a whole is technically incompetent, or they are getting hit with something built by big kids.

Re: GitHub hit by DDoS attack second day in a row

#48

Post by Tobu »

bkanber wrote: post #33
codinghorror wrote: post #29

Earlier quoted context omitted.

Since when is it OK for the services I rely on and pay for to even slightly inconvenience me ... for three days in a row? Since never. At least for businesses that want to remain an ongoing concern.

Devil's avocado here: let's say you pay $100/mo for a gym membership and they shut down three days in a row because somebody called in a threat. How upset would you be at the gym? A malicious attack by a third party is different from, say, the gym allowing black mold to grow in the locker room. I'd quit a gym if they had black mold. That's mismanagement. I wouldn't quit a gym if malicious third party intervention inc…

What makes DDOSes different from black mold? Both are expected risks and should be mitigated. Yeah, there are sentient actors behind the DDOS, but GitHub has to deal with it at the level of their infrastructure either way.

Re: GitHub hit by DDoS attack second day in a row

#49

Post by Tobu »

Serplat wrote: post #45
jiggy2011 wrote: post #36

Earlier quoted context omitted.

If high availability git is so critical then why not run your own git servers instead of or in addition to github? I find it slightly ironic that the entire point of git is that it is distributed version control but 90% of git use seems to be focused around a product from a single company.

Github isn't solely a git server. They also have issues, wikis, etc, that are harder to keep in multiple locations.

The wikis are git repos as well. Sync them periodically and you're good. Plus it's useful as a backup, because I don't think github archives your reflog.

Issues are normally mirrored to e-mails (caveat: you don't get mail for your own comments), so you can mostly pick up existing threads if your e-mail address book can find the github users involved. If they didn't obscure recipients (at least within an organisation — because I don't think address-book lock-in is worth inconveniencing paying clients), and made an auto self-bcc of your activity, issues would be entirely disaster resistant.

Re: GitHub hit by DDoS attack second day in a row

#50

Post by zrail »

peripetylabs wrote: post #38

Perhaps I'm misunderstanding: I thought one goal of DVCS was to remove central points of failure? In that sense, isn't a central "hub" regressive? I wonder if there's a way to host Git repositories with static files, say, on Amazon S3... That would be neat.

jgit, the version that Eclipse uses, has native S3 support. I run my own local git server that transparently backs up every push to S3 this way.

http://blog.spearce.org/2008/07/using-jgit-to-publish-on-ama...

Post reply on HN