3 ms·

IMO what is surprising about this is that the service didn't already have DDOS protection of some sort (or did it?) It's been a pretty standard practice to add

IMO what is surprising about this is that the service didn't already have DDOS protection of some sort (or did it?) It's been a pretty standard practice to add that to any public-facing service for a decade or two now, hasn't it? Cloudflare is free/cheap for smaller services and there are many other options too. I'd just assume that any service is going to get randomly DDOSed soon after launch, even without any sort of blackmail/targeted attack. Even if you can figure out who did it, there's pretty much no chance of chasing them down. My takeaway from this wouldn't be "this shouldn't be possible" but "this has been commonplace for decades, and will keep happening, and we should prepare for the next one". It doesn't really matter whether it's some corrupt local agency or some script kiddie... half the world's connected, on various shitty devices, and DDOSes are gonna keep happening.

whatevaa 3y ago
Sourcehut is big enough that Cloudfare is neither cheap nor free, I think there was a discussion about this in another post. Nor is it a good thing that Cloudfare has keys to half of the internet.
- solardev 3y ago
  Wasn't talking about Sourcehut, but this comment's parent. And there are alternatives to Cloudflare. The point is just that DDOSes have been common for decades and they shouldn't be a surprise for anyone. They're an inherent part of the internet protocols we have and the freedom of routing. Saying "they shouldn't exist" is like saying bad actors shouldn't exist. Sure, that's a nice thought, but they do exist (and have existed long before Cloudflare) and we can't just pretend otherwise and believe that our service won't be affected. It's just a matter of time/luck.
- AzuraIsCool 3y ago
  Is sr.ht free?
BeFlatXIII 3y ago
> I'd just assume that any service is going to get randomly DDOSed soon after launch, even without any sort of blackmail/targeted attack. Even if you can figure out who did it, there's pretty much no chance of chasing them down. My takeaway from this wouldn't be "this shouldn't be possible" but "this has been commonplace for decades, and will keep happening, and we should prepare for the next one". I treat this as a foundational flaw in the protocols powering the internet. People shouldn't need to pay off DDoS protection companies as a standard line of business.
soap- 3y ago
> Connections from CloudFlare’s reverse proxy are dropped. Do not help one private company expand its control over all internet traffic. https://web.archive.org/web/20231005165737/https://srht.site/limitations https://web.archive.org/web/20231005165737/https://srht.site...

whatevaa 3y ago

Sourcehut is big enough that Cloudfare is neither cheap nor free, I think there was a discussion about this in another post. Nor is it a good thing that Cloudfare has keys to half of the internet.

solardev 3y ago
Wasn't talking about Sourcehut, but this comment's parent. And there are alternatives to Cloudflare. The point is just that DDOSes have been common for decades and they shouldn't be a surprise for anyone. They're an inherent part of the internet protocols we have and the freedom of routing. Saying "they shouldn't exist" is like saying bad actors shouldn't exist. Sure, that's a nice thought, but they do exist (and have existed long before Cloudflare) and we can't just pretend otherwise and believe that our service won't be affected. It's just a matter of time/luck.
AzuraIsCool 3y ago
Is sr.ht free?

BeFlatXIII 3y ago

> I'd just assume that any service is going to get randomly DDOSed soon after launch, even without any sort of blackmail/targeted attack. Even if you can figure out who did it, there's pretty much no chance of chasing them down. My takeaway from this wouldn't be "this shouldn't be possible" but "this has been commonplace for decades, and will keep happening, and we should prepare for the next one". I treat this as a foundational flaw in the protocols powering the internet. People shouldn't need to pay off DDoS protection companies as a standard line of business.

soap- 3y ago

> Connections from CloudFlare’s reverse proxy are dropped. Do not help one private company expand its control over all internet traffic. https://web.archive.org/web/20231005165737/https://srht.site/limitations https://web.archive.org/web/20231005165737/https://srht.site...