4 ms·
GitHub was down
- pachydermic 13y agoAnyone know who they're getting hit by yet?
- fjordan 13y agoMaybe someone from GitHub can tell us. I'm having a difficult time reasoning as to the motivation behind all the DDOS attacks. Why would anyone want to disrupt a tool for open, public collaboration used by many free and open-source technologies. Anyone have any insight?
- nodesocket 13y agoJust a theory, but perhaps some hackers trying to flex their muscles and stroke their ego's by taking down GitHub.
- obituary_latte 13y agoWould make sense. Saw a bunch of that at the Rio during defcon. Print my boarding pass? Nope. Somebody broke all of the machines. Order a movie or checkout on the TV from my room? Nope. Someone broke the outdated system. Tools gonna tool.
- at-fates-hands 13y agoTo a degree this is pretty funny. Are you sure the hotel didn't do it on purpose just to remove the opportunity for hackers to get over on the hotel?
- obituary_latte 13y agoYes. These systems weren't disabled, they were broken. Not trying to be a buzkill, but I fail to see how it's funny. So you can break an old - undoubtedly unpatched - win xp box that people use to print boarding passes. Congrats.
- sargun 13y agoGithub.com is a profitable entity that makes a fairly large amount of money. Additionally, Github.com hosts a lot of content. Content that other people may not like. Possibilities are: 1) Extortion of some sort i.e. We want your money, or we'll DDoS you every week 2) Content i.e. Remove repositories a, b, and c with content we don't like, or we'll DDoS you every week 3) Weapons demonstration i.e. We want to show off what l33t hax0rs we are, so we'll DDoS Github.com every week
- at-fates-hands 13y agoDo they not have the bandwidth or resources to stop or mitigate something like this from happening? I would've thought they'd have better resources in place in case of something like this.
- zalew 13y ago> Why would anyone want to disrupt a tool for open, public collaboration used by many free and open-source technologies and a lot of closed source commercial projects.
- holman 13y agoNope.
- shaaaaawn 13y agoBeen a bad week for Github availability
- dzlobin 13y agoSince this has been more frequent as of late, can anyone shine some light on who might DDOS someone like github? Is there anything to gain or is this just sadism?
- Shank 13y agoProbably cyber-terrorism, along the lines of "pay us $500,000 to stop this attack before hit hits," to blackmail startups like Github into paying.
- dzlobin 13y agoThat's what I originally assumed, but is this actually ever successful with companies like that?
- meowface 13y agoI honestly doubt it's successful for anyone. No matter the size of the site, the amount of money you would pay a DDoS mitigation provider, either on a full-time basis or just to stop a current attack, would generally be considerably less than the ransom asked for, with the bonus of having your site be available much more often.
- radagaisus 13y agoSounds like that's successful for the DDoS mitigation provider.
- joshlegs 13y agodoes github really count as a startup still? they're not inducted into programmatic canon yet?
- Shank 13y agoI suppose they're past the startup phase; you're right - I just never noticed the transition from 'startup' to 'company,' because the culture has stayed the same (as well as development pace, and quality).
- scottlinux 13y agohttp://www.akamai.com/html/technology/dataviz1.html http://www.akamai.com/html/technology/dataviz1.html > Attacks
- WestCoastJustin 13y agoAnyone thinking about hosting locally should check out Git and Gitolite. I've created a screencast about them @ http://sysadmincasts.com/episodes/11-internal-git-server-with-gitolite http://sysadmincasts.com/episodes/11-internal-git-server-wit...
- frakkingcylons 13y agoDo you know how it compares to GitLab? I've been thinking of deploying it when I have a spare weekend. http://gitlab.org/ http://gitlab.org/
- WestCoastJustin 13y agoGit and Gitolite are command lines tools only. So, you basically install git-daemon, which allows you to run a central git server, and then you have gitolite, which allows you to do user management. GitLab is basically a GUI that fronts this (I'm not sure about their user access implementation though; doubt it is gitolite). There are other tools like Gerrit [1], Gitweb [2], and cgit [3], that you can use to front your git repos though. GitLab is just a really slick one! [1] http://code.google.com/p/gerrit/ http://code.google.com/p/gerrit/ [2] https://git.wiki.kernel.org/index.php/Gitweb https://git.wiki.kernel.org/index.php/Gitweb [3] http://git.zx2c4.com/cgit/ http://git.zx2c4.com/cgit/
- frakkingcylons 13y agoOh I see. I didn't realize how many different tools are available for Git. Thanks!
- csense 13y ago> you basically install git-daemon, which allows you to run a central git server AFAIK, git-daemon is to allow the specific use case of anonymous, public access to git repositories [1]. You don't need it to have a "central git server", though: If you have an ssh account on yourhost.com and a git repo in /home/you/yourproject on that machine, you can simply git clone git+ssh://yourhost.com/home/you/yourproject. Give out multiple ssh keys to that account, and it's a minimal but functional "central git server"! Of course, doing the above the easiest, quickest way, with a single UNIX user account, results in (A) giving git client users access to a shell and (B) giving git client users read/write access to each others' repos. Gitolite uses authorized_keys restrictions to avoid (A) and a clever SSH_ORIGINAL_COMMAND hack to avoid (B). > doubt it is gitolite Gitlab in fact did use Gitolite for actually serving the git client until quite recently. The largest change in 5.0 was reimplementing a subset of Gitolite's functionality and losing the dependency [2]; the project's major version number is still at 5, although 6.0 is promised soon [3]. [1] http://git-scm.com/book/en/Git-on-the-Server-Git-Daemon http://git-scm.com/book/en/Git-on-the-Server-Git-Daemon [2] http://blog.gitlab.org/gitlab-5-dot-0-has-been-released/ http://blog.gitlab.org/gitlab-5-dot-0-has-been-released/ [3] http://blog.gitlab.org/gitlab-5-dot-4-released/ http://blog.gitlab.org/gitlab-5-dot-4-released/
- Watabou 13y agoSeems to be working for the moment for me.
- IterationMonkey 13y agoAnyone know what the motivation of these attacks might be? I can't imagine anything to gain from DOSing Github and I certainly can't imagine any of their direct competition doing it.
- _JamesA_ 13y agoBitbucket is also down for the count.
- pktgen 13y agoSounds like they need to be talking to Prolexic...
- zalew 13y agodoes every downtime have to be submitted? it happens every other day and interested parties already know that and the status page.
- timtamboy63 13y agoPossible motivation: Someone just finished their hack at the facebook hackathon (going on right now), and is DDOSing github to stop everyone else in their tracks :)
- vinhnx 13y agoIt is up right now. https://status.github.com/ https://status.github.com/
- deleted 13y ago[deleted]