3 ms·

This is only if you have _no_ idea how to use very basic open-source tools to wreak havoc via some open proxies. The real cost of launching small-scale attacks

This is only if you have _no_ idea how to use very basic open-source tools to wreak havoc via some open proxies. The real cost of launching small-scale attacks like this is $5/month on your favorite VPS provider.

deleted 4y ago
[deleted]
jorvi 4y ago
I imagine your VPS provider will gladly give your info to law enforcement whereas a DDoS company might not.
- alexforster 4y ago
  Unfortunately, this type of abuse is essentially only acted on if you either (a) cause some kind of problem for ops at the VPS company, or (b) the victim tells on you. Even then, the absolute worst thing that will happen to you is your account will be closed. There is just no way on the modern internet to investigate/prosecute these kinds of things. That's why one of our primary goals with the free Cloudflare plan is to invert the problem: make DDoS go away by making it it free to mitigate.
fasterthanlime 4y ago
For anyone reading this: Alex knows about the attack and has my permission to talk about it publicly.
FooBarWidget 4y ago
Open proxies? I heard about this more than a decade ago, but why would anybody in 2022 run an open proxy? Or are these open proxies unintentional, i.e. misconfigured?
- acatton 4y ago
  Some are misconfigured, but others are just honeypots to sniff out some traffic. https://www.youtube.com/watch?v=0QT4YJn7oVI https://www.youtube.com/watch?v=0QT4YJn7oVI
- oefrha 4y ago
  Misconfigure your squid/privoxy and you’ll probably end up on an open proxy list within hours. Been there.
- alexforster 4y ago
  Many of them are unintentional: a device sitting on the open internet has some vulnerability and gets exploited. Bad guy sets up a proxy on the device and uses it to click a bunch of ads using bots, or crawl Google results, or launch attacks, etc. Or, as mentioned below, they could simply be the result of misconfiguration. Some of them are very intentional: https://www.torproject.org/ https://www.torproject.org/
zufallsheld 4y ago
Isn't the problem to find enough of these open proxies to do meaningful damage?

deleted 4y ago

[deleted]

jorvi 4y ago

I imagine your VPS provider will gladly give your info to law enforcement whereas a DDoS company might not.

alexforster 4y ago
Unfortunately, this type of abuse is essentially only acted on if you either (a) cause some kind of problem for ops at the VPS company, or (b) the victim tells on you. Even then, the absolute worst thing that will happen to you is your account will be closed. There is just no way on the modern internet to investigate/prosecute these kinds of things. That's why one of our primary goals with the free Cloudflare plan is to invert the problem: make DDoS go away by making it it free to mitigate.

fasterthanlime 4y ago

For anyone reading this: Alex knows about the attack and has my permission to talk about it publicly.

FooBarWidget 4y ago

Open proxies? I heard about this more than a decade ago, but why would anybody in 2022 run an open proxy? Or are these open proxies unintentional, i.e. misconfigured?

acatton 4y ago
Some are misconfigured, but others are just honeypots to sniff out some traffic. https://www.youtube.com/watch?v=0QT4YJn7oVI https://www.youtube.com/watch?v=0QT4YJn7oVI
oefrha 4y ago
Misconfigure your squid/privoxy and you’ll probably end up on an open proxy list within hours. Been there.
alexforster 4y ago
Many of them are unintentional: a device sitting on the open internet has some vulnerability and gets exploited. Bad guy sets up a proxy on the device and uses it to click a bunch of ads using bots, or crawl Google results, or launch attacks, etc. Or, as mentioned below, they could simply be the result of misconfiguration. Some of them are very intentional: https://www.torproject.org/ https://www.torproject.org/

zufallsheld 4y ago

Isn't the problem to find enough of these open proxies to do meaningful damage?