5 ms·
There's really no way around a DDOS, except to pay for enough servers to swallow all the fake requests and real requests. That's probably far too expensive to d
by cryptoz 16y ago
There's really no way around a DDOS, except to pay for enough servers to swallow all the fake requests and real requests. That's probably far too expensive to do - at least for now. Maybe the cloud can bring a solution to this, with the idea of spinning up new VMs as needed.
Basically, if your site is open to the public then it's open to bots. And there are far more bots than people. So if someone directs their bots to your site, you'll go down.
End of story.
- jacquesm 16y agoThere are plenty of ways to defend against this kind of attack, with varying degrees of efficiency and automation.
- cryptoz 16y agoYeah, it looks like I'm wrong about that. But then, I'd have to raise the question why MC hasn't done anything (successfully) yet to defend against this? They must be losing hundreds of thousands of dollars (per hour? not sure of volume here) because of the SecureCode payments failing all over the place. Also, a falling trust from consumers and vendors. It seems mission-critical to get their site back up, but they haven't. I assumed that was because they couldn't. But if you say they can....why haven't they?
- jacquesm 16y agoMy guess would be that they incorrectly estimated the magnitude of any attack that they would have to deal with and are now scrambling to get a procedure in place that allows them to forward lists of 'known bad' ip addresses to their upstream providers to be placed in ACLs. Everything is hard the first time.
- marknutter 16y agoI wonder if it would be viable to offer DDOS protection in the form of a huge bank of servers that the victim could rent for a specific period of time to help alleviate the affects. Companies could pay for it like it's insurance.