6 ms·
Python infrastructure DDoS ongoing
- 9wzYQbTYsAIc 6y agoThat’s some seriously correlational timing - anyone else notice that?
- marvel_boy 6y agoCould you elaborate?
- killingtime74 6y agoHe can’t he has no evidence
- 9wzYQbTYsAIc 6y agoThe evidence is literally in the link: Dec 14th was the day after Solar Winds hack was revealed. Dec 14th was the day that PyPi began experiencing an outage, as indicated in their status page.
- 9wzYQbTYsAIc 6y agoNow that the post isn’t flagged, yes, I can: the two dates are correlated in time (one day apart), begging the question of whether or not anyone else had noticed that and whether or not anyone else had noticed similarly correlated reports of outages in what could be considered to be key infrastructure in the academic and business community. I was trying to pip search for a library, and not being a regular python user, first became aware of this through the pip error message. Read through the status page and was amazed that the issue was going on for so long. Also, I thought I remembered that Solar Winds attack was revealed around then. Did a search, it was the day before. Nothing in the status page indicated having reached out to law enforcement to assist, which also struck me as odd, but whatever.
- asplake 6y agoInteresting but no mention of SolarWinds there at all. What justifies the title?
- dralley 6y agoNothing
- shinryuu 6y agoSolarwinds was exposed on 13th of December. This seems to have started on the 14th of Dec.
- Redoubts 6y agoGo on...
- dang 6y agoOk, I've truncated the title. Is it accurate now? I can't really tell from a quick look. The submitted title was "Python infrastructure DDoS ongoing since day after SolarWinds hack revealed". Submitters: it's against the site guidelines to use titles to editorialize, so please don't do that. https://news.ycombinator.com/newsguidelines.html https://news.ycombinator.com/newsguidelines.html
- 9wzYQbTYsAIc 6y agoThanks for the feedback, I was wondering why it got flagged. I don’t necessarily agree that the title I chose fits the definition of editorialization, as I wasn’t expressing an opinion, but I could understand if people though of it as clickbait. Edit: anyhow, apparently getting downvotes again. I’m a bit of an ignoramus when it comes to what makes people get upset, but given the current climate of fear, I’ll just chalk it up to that. Would greatly appreciate a moderator taking a moment to explain to me the nuances, but again, given the current climate, I’ll avoid posting anything security related.
- dang 6y ago
- pencilcode 6y agoMaybe cloudflare could help?
- dknecht 6y agoCloudflare would be happy to help.
- 9wzYQbTYsAIc 6y agoChilling responses, thanks all
- bonfire 6y agoHow difficult is it to just deny access for a few IPs? Firewall, ACL, something?
- 9wzYQbTYsAIc 6y ago“Due to the huge swath of IPs we were unable to make a more targeted block without risking more severe disruption”