4 ms·
ISPs already spend plenty of money on DPI and HTTP injection gear. It would cost next to nothing to do basic egress filtering and detecting+throttling known com
by vox_mollis 11y ago
ISPs already spend plenty of money on DPI and HTTP injection gear. It would cost next to nothing to do basic egress filtering and detecting+throttling known compromised customers.
And yet, we still get DDoS attacks. Why?
- mike_hearn 11y agoBecause these days "botnet" can easily mean "botnet of compromised Linux servers" or "botnet of WiFi routers". The biggest DoS attacks are often based on exploiting UDP based protocols and so you end up being attacked by ISP/university-sized DNS or NTP servers.