5 ms·
DDos attack on GitHub
- detaro 9y agopreviously (original github post): https://news.ycombinator.com/item?id=16492832 https://news.ycombinator.com/item?id=16492832
- arekkas 9y agoWhy are developers of popular database solutions so reluctant to write secure-by-design software. You would guess that some basic form of authentication should be implemented in any internet-facing service. But here we are, after the MongoDB fiasko, still left with thousands of vulnerable services because someone didn't bother to implement basic auth.
- petee 9y agoI believe the intention of the feature is for private clusters; why slow things down by doing auth if everyone in that cluster is approved? The huge mistake was letting UDP be enabled-by-default
- harryh 9y agoBecause these tools follow the unix philosophy of building single use tools. There are a wide variety of authentication measures that can be composed with databases to secure them. There is really no need to build the authentication into the database itself and it fact doing so would violate a don't repeat yourself ethos.
- nik736 9y agoThe title is plain wrong. Oles from OVH posted a screenshot on Twitter around the same time with a DDoS attack that was even bigger: https://twitter.com/olesovhcom/status/969328679410110466 https://twitter.com/olesovhcom/status/969328679410110466
- nkozyra 9y agoI must be missing something, that looks about the same in severity.
- seba_dos1 9y agoKinda funny to see packet capture being called "a little-understood forensic process" :P
- xxxdarrenxxx 9y agoAnd after a 1000 years we still accept brittle transparent non bullet proof glass and doors made of wood as the global norm to protect our valuables from burglars. Welcome to humanity