14 ms·
Ask HN: Plenty of large sites down; Reddit.com, GNU.org, Discord, coincidence?
- asdojasdosadsa 8y agoI'm not the best at interpreting this map[0] but seems that something is going on? [0] http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&list=0&time=17754&view=map http://www.digitalattackmap.com/#anim=1&color=0&country=ALL&...
- user5994461 8y agoLooks like an ongoing DNS reflection attack from all over the world to the US.
- sonofblah 8y agoWhat's the significance of Poland in the output? A tracking thing? I noticed problems with Reddit earlier, too.
- wildrhythms 8y agoWhere are you seeing 'Poland in the output'? >Edit: Nevermind, I see what you mean (on the map). I'd be interested to know too... maybe PL is a big player in their attack monitoring?
- seba_dos1 8y agoI don't think so - when you look at historical data, labels change. Seems like Poland is simply a significant actor in this particular attack.
- DmenshunlAnlsis 8y agoReddit is up as of this writing, although GNU.org is down.
- JonathanBouman 8y agoPretty unstable here, it loads but all the user specific pages return 'error code: 503'
- digi_owl 8y agoAnd their status page shows all green... https://reddit.statuspage.io/ https://reddit.statuspage.io/
- nolok 8y agoAlthough I like the concept at this point status pages are very disappointing to me, between those that stay green when everything is failing because they're not updated properly, those that stay green because "it was a localized partial failure only" even though the whole thing breaks (hi aws !), ... Sure some are reliable, but enough aren't that it feels like you can't trust them. You can't look at the status page and believe what it says, so you go and ask people anyway (on irc, reddit, hnews, whatever community you like). Meaning that page might as well not have existed.
- zaarn 8y agoStatus pages shouldn't need any manual intervention. I setup mine to automatically monitor my website from another service provider in a different datacenter. That way I know if the server is down for any reason and it updates automatically. If my server goes down, within 5 minutes the status page is red. End of story. If it's backup the status page goes green again. Manual status pages are a mistake.
- RileyJames 8y agoCouldn’t agree more. I pushed for one to be implemented at my last job (api) as I felt it was ridiculous that we didn’t have a means to communicate downtime, outages, issues. Initially the status page worked. But as more and more people subscribed to it, it became a bigger issue, to issue an alert. And unfortunately an issue couldn’t be raised only to those it was relevant for. All this lead to was, not updating the status page and thus it becoming a useless tool to determine if an issue was occurring. Back to Twitter... I feel the product needs a lot work in practice, and possibly in implementation and training.
- gjvc 8y agodefcon week
- digi_owl 8y agoThat, and various incidents on twitter etc over the years makes me really question the professionalism of _sec...
- fibers 8y agoBut why gnu? They seem like a static site that can only be taken down by simple ddos?
- stephengillie 8y agoEveryone has to start somewhere - maybe some script kiddies are at their first Defcon and saw an easy target?
- aviau 8y agoWhy does the fact that the site is static make it easier to take down by a simple ddos? I have a static website at https://alexandreviau.net/ https://alexandreviau.net/. It sits behind AWS CloudFront. Good luck taking it down.
- wild_preference 8y agoIt will DDoS your wallet with CloudFront charges which is even worse. They just need to hit you over a longer time scale and avoid making obvious peaks so that you can’t ask for the DDoS refund.
- williamdclt 8y agoThat's not what the parent said, they just said that the only thing that can take down GNU.org is DDoS
- rbanffy 8y agoIt's not simpler - quite the contrary. Dynamic sites can be taken down by a number of different attacks. Static sites are a much harder target.
- thiscatis 8y agoTurkey?
- batuhanicoz 8y agoI don't understand the relation/reference. I'm Turkish and have been watching the news but I don't see any reason why someone correlates large websites being down with Turkey. With no explanation too. Can you elaborate please? This is an honest question and I would like to know if my government is hacking foreign sites in retaliation for sanctions.
- helpme420 8y agoThey would if they could.
- oneplane 8y agoRetaliation would make sense, but I haven't dug deep in Turkeys APT crews lately. Most of the stuff I hear/read about is talking about Iranian, Russian, Chinese and roaming APT groups doing attacks. It also would make attacks from Turkish AS's more logical as the government would not likely do something about 'their own' for free.
- deleted 8y ago[deleted]
- thiscatis 8y agoWell Trump obliterated any chance of a decent lira value for the next years with his tweets and sanctions.
- terminalcommand 8y agoWhy would you think that Turkey would retaliate against Trump's tweets by taking down reddit and GNU.org? I don't think that the Turkish government has nearly enough technical knowledge to pull of something like that. That is the problem with Turkey right now, it seems to me that the government doesn't want to work with qualified people.
- IloveHN84 8y agoIs AWS/Azure/GCE down? Remember: the cloud is someone's else computer. When it's broken, you cannot do anything
- dullgiulio 8y agoWould be big news to discover that GNU.org runs on some cloud hosting ...
- solarkraft 8y agoI'd rather expect it to be a problem with some other provider. Proxy, or something.
- ajeet_dhaliwal 8y agoI’d need to see some spy shots of Stallman in an Uber, talking on an iPhone and tapping out a denial on a Surface to really believe this news was true.
- nik736 8y agoSo what? I would rather have Google/Amazon employees on the issue than some random DevOps dude.
- jrs95 8y agoThis just doesn’t make sense. Google/Amazon employees basically are some random DevOps “dudes”. Whereas your own people would be...whoever you decided to hire to work on your infrastructure.
- based2 8y agohttps://kb.isc.org/article/AA-01639/74/CVE-2018-5740%3A-A-flaw-in-the-deny-answer-aliases-feature-can-cause-an-INSIST-assertion-failure-in-named.html https://kb.isc.org/article/AA-01639/74/CVE-2018-5740%3A-A-fl...
- Twirrim 8y agoWhat evidence do you have to support this claim? I could sit here and just pull out random CVEs too, with as much validity.
- JonathanBouman 8y agohttps://status.discordapp.com https://status.discordapp.com states that Discord identified and resolved the problem.
- mrdrozdov 8y agoLooks like wunderground.com is down too. If you're wondering, high chance of thunderstorms this evening in New York, NY.
- slavojastoria 8y agoI was wondering, thanks. Rain has been wild recently
- CPUstring 8y agoWhatever is happening, it got me out of bed instead of browsing endlessly
- noobermin 8y agoI suppose I came late because only gnu.org is down of those mentioned.