6 ms·
GitHub was experiencing a DDoS
- topbanana 13y agoDo we really need to be notified every time GitHub or Twitter go down temporarily? It's inconsequential in the grand scheme of things.
- pwelch 13y agoTwitter I don't think so but I feel like the majority of people visiting Hack News use Github in some way. Remote Repo, Deploying, Open Source tools that are hosted on Github. Maybe just me...
- Hovertruck 13y agoWouldn't that just mean that they're bound to find out that Github is down without needing to see it on the front page of HN?
- JeremyMorgan 13y agoGood point.
- kamakazizuru 13y agothe might assume that its a problem on their end / on their ISP end.. Clearly enough people think its relevant for it to make its way onto the Homepage via upvotes ;)
- darkchasma 13y agoThere is a reason there are controls to allow you to upvote, or downvote stories. If you don't like a story, and have nothing to contribute to the story, downvote it. If the story is in the top few, it's because people (that aren't you) are interested in knowing that github is getting attacked. EVERYTHING is inconsequential in the grand scheme of things. Edit: Heh, there are no downvotes on HN for stories. My bad.
- scribu 13y agoOT: How much karma do I need to have to see the downvote button?
- InclinedPlane 13y agoThere is no downvote button on submissions only upvote and flag.
- nonchalance 13y agoShould there be downvote buttons for submissions?
- InclinedPlane 13y agoMaybe? I could go both ways. I think downvoting is important but it's also very easily abused. I like stackexchange's downvoting system where it comes at a cost.
- deleted 13y ago[deleted]
- nsmartt 13y agoIt is, or was, 500 points.
- hahainternet 13y agoThe downvote on users only appeared for me as I pushed past about 650 I believe.
- 6thSigma 13y agoI got an error message when trying to connect to the App Store yesterday. The first thing I did was refresh HN to see if there was an outage or issue.
- kmfrk 13y agoMaybe it's a sign someone should look into an expanded notification system. I imagine someone could cook up an interesting IF case for IFTTT. A good way for a company like GitHub to do it might be an RSS feed. That won't necessarily allow to define a status message type indicating the occurrence of the problem vs. the resolution - and the severity of the status problem.
- IvyMike 13y agoThe do have the linked website (status.github.com) and a twitter account (@githubstatus) which honestly seem pretty sufficient already.
- mh- 13y agounfortunately, the status page is fairly inaccurate and delayed. (note that I'm not agreeing we should post to HN for every blip)
- mh- 13y agoit's not an RSS feed, but: https://status.github.com/api/messages.json https://status.github.com/api/messages.json see: https://status.github.com/api https://status.github.com/api
- astrodust 13y agoAn outage of either has a measurable impact on productivity.
- joshuak 13y agoSubversion rebels attack again!
- areski 13y agoThey joined force with the Bazaar empire!
- regularfry 13y agoThis is your periodic reminder that deploying directly from Github is a bad plan.
- j546 13y agoAnyone know what they put at the front of their stack? Nginx? Varnish? HAProxy?
- dkhenry 13y agoI really need to start monitoring GitHub vrs Bitbucket for uptime. I can't think of the last time Bitbucket was down.
- hillbillyjack 13y agoIt was down when they changed to a new datacenter[1]. I think github is just a much bigger target right now is why it goes down more often. [1] http://blog.bitbucket.org/2013/07/02/scheduled-downtime-bitbucket-moves-data-centers-on-july-7/ http://blog.bitbucket.org/2013/07/02/scheduled-downtime-bitb...
- woah 13y agoIt was down a few weeks ago, right in the middle of the last big deploy I did. Just had to laugh honestly.
- DrJokepu 13y agoThat was scheduled maintenance, however. They had big banners with warnings everywhere on Bitbucket for several days before the event.
- dkhenry 13y agoI think the problem with BitBucket and GitHub is that i never need to go to the website for most things. All the interfacing I do is thought the Git or mercurial Interface.
- mrweasel 13y agoWe've had some minor issues with Bitbucket being down, or at least inaccessible. Never anything really disconcerting, but it's always a pain when you can't get to your code, even if it's only for a few hours. Mostly Bitbucket has moments where it seems a little slugish and a pull or push takes what seems like forever.
- octo_t 13y agoThere was another one of these, slightly older, that just got deleted... Also the red banner looks a bit off to me, the "More Status History" just seems plonked in the middle of it.
- nonchalance 13y agoGithub seems to attribute every issue initially to a DDoS
- aroch 13y agoI'm willing to give them the benefit of the doubt and operate under the impression that they know more about their network than you or I do.
- kclay 13y agoSomeone doesn't like GitHub, this has been going on for months.
- pplante 13y agothere are individuals/groups out there who launch a ddos attack against a site, then contact the owners demanding money and they will stop.
- Intermernet 13y agoSeems to be working again... Hopefully didn't type too soon
- lewisflude 13y agoWho would do something like this?
- bencollier49 13y agoRussian mafia?
- mh- 13y agohg extremists!
- mackwic 13y agoEven if there are attacks everyday everywhere, I wonder how/if it can be linked with recent attacks of Apple, Ubuntu forums, and OVH networks. That's a lot of techies services attacked for such a short time. EDIT: typo
- mconstable 13y agoeveryone ping github to show your support
- asitkumar 13y agoah no! plzzzzz hackers don't ddos github! this is just not fair
- adyus 13y agoCoincidentally, I just finished setting up Gitlab and Gitlab CI on a private server. If I could set up repo mirroring between it and Github, it would add a layer of protection for getting critical work done (security by distribution?).
- mitchty 13y agoJust have both gitlab and github as upstreams and push to both every time. aka in your .git/config: [remote "origin"] url = https://github.com/somerepo.git url = https://gitlab.yourdomain.tld/somerepo.git fetch = +refs/heads/*:refs/remotes/origin/* And nothing to worry about when github is down.
- jimktrains2 13y agoHuh. I wasn't aware you could do that. What happens if the repos aren't in sync and you pull?
- mitchty 13y agoI honestly don't know, should test it and find out. Will look at it later today. Edit: curiosity got the better of me https://gist.github.com/mitchty/0c2089445c1400d46cb9 https://gist.github.com/mitchty/0c2089445c1400d46cb9 Basically exactly what you'd think.
- mh- 13y agothe space-time continuum collapses?
- Proleps 13y agoWhy would someone DDoS GitHub? Is there some movement against GitHub? Or is it just for fun?
- SkyMarshal 13y agoCould be a shakedown.
- brbcoding 13y agoSkiddies gon' skid
- hijinks 13y agoplot twist.. it's github doing it to github to get bigger companies to pay for github enterprise.
- ufo 13y agoAdvertisement/testing for their botnet.
- BrenNG 13y agoI manage newgrounds.com which gets quite a bit of traffic. We'll get what I think are DDoS attacks at least once a month. I can see our connection tracking stats go up to the millions and traffic spikes way up of course. I don't know WHY they do this, but last time it happened we got an abuse report saying that we were reported for port scanning from our main firewall / proxy box. Somehow they had reflected traffic off our firewall / proxy to make it try to connect to a bunch of IPs on a known trojan port. I have no idea how they did this, but it appears that this time around we were being used to scan ports. This is just a stock Debian box with a firewall and port 80 open. Scary.
- andrewaylett 13y agoThey wouldn't necessarily have received useful data from it. Consider what happens if you spoof the sender IP and port in the first packet of a TCP handshake: the recipient will send a response to the spoofed IP, making it look like they are the bad guys. Someone isn't filtering Martians properly, or those spoofed packets would have been filtered before they reached you.
- JeremyMorgan 13y agoIf there is a hell, anyone who would attack GitHub has an express ticket there.
- dj-wonk 13y agoChances are good that the attackers are DDOS'ing Github using software consisting of some open source components... hosted for free on Github.
- fotcorn 13y agoDoes someone now what "Pages Builds Failure Rate" means on the page? 4.5% Server errors is a bit much...
- asdfaoeu 13y agoI think they could be talking about github pages. Considering that's user uploaded content 4.5% seems pretty low.
- ancarda 13y agoLooks like everything is still up though. What is being DDOS'd exactly?
- yaddayadda 13y agoDistributed Denial of Service - https://en.wikipedia.org/wiki/Ddos https://en.wikipedia.org/wiki/Ddos
- mrweasel 13y agoI don't think that was the question. The question was, I assume: Which services are being ddos'ed?
- guiomie 13y agoYou must be really evil if you are attacking github!
- hearty777 13y agoThis is akin to robbing a police convention.
- domodomo 13y agoIsn't Github having it's annual employee family picnic this week in SF? This is literally going to ruin someones picnic.
- WestCoastJustin 13y agoIf you are looking to host an internal git server, then you should watch my screencast, where I talk about how to configure a central git server and manage user access with gitolite. http://sysadmincasts.com/episodes/11-internal-git-server-with-gitolite http://sysadmincasts.com/episodes/11-internal-git-server-wit...