14 ms·
Hacker News was down
I'm getting an untrusted certificate warning... DDoS attack or server issue, anyone knows?
- fein 13y agoI'm getting connection timed out here. Had to hop on an AWS box and get on here via Lynx. Not sure why lynx is fine but my work network isn't.
- reustle 13y agoYou're determined.
- Sam121 13y agoWhy it was checking my Browser compatibility again and again, I am using chrome and use HN on this. Is there any issue with my browser ?
- terinjokes 13y agoAre you allowing cookies in your browser? They should be same origin.
- SebastianB 13y agoThey probably turned down a DDoS startup ;)
- martin-adams 13y agoPhew, wasn't just me. Thought someone might have happened to my computer.
- bbrizzi 13y agohttp://downforeveryoneorjustme.com/ http://downforeveryoneorjustme.com/ ;)
- brbcoding 13y agohttp://isup.me http://isup.me is much easier to remember :P ... it did say that HN was up when it wasn't for me though.
- xerophtye 13y agoactually today i just discovered how cool DuckDuckgo is. i queried "is HN down?" it automatically searched on those kind of sites and showed "no, HN.com seems up for us. We got a reply from <IP> in <Time> " I thought, ooo! This looks interesting! And i tried "is news.ycombinator.com down" and it said yes, we got no reply, so that is down. I tried the samething on google, apparently they are too stuck up to ask other sites to do this (though they did provide links to them). But I apprecaited the automatic answer more, just like i appreciate when google automatically converts currencies and fetches timezones and solves expressions.
- emiunet 13y agosame thing here. protected by CloudFlare..blah..
- overshard 13y agoSeems back up now, maybe they were just switching to CloudFlare? I didn't think HN was on CloudFlare before.
- mavus 13y agoTraffic seems to be going through cloudflare. Probably to defend against a DDoS. Hitting the URL directly gave me an untrusted certificate. Going via http://ycombinator.com/ http://ycombinator.com/ works fine.
- krallin 13y agoIf you get the SSL warning on Chrome, you can enter "proceed" and then press enter at the keyboard. Even if there's no "I understand the risks, let me proceed" button, this will work.
- panacea 13y agoSo Hacker News is being 'hacked' by hackers, and clicking 'proceed' past the security warning about insecurity is safe behaviour? ;]
- krallin 13y agoWell, that's only if you understand the risks! ;) The invalid certificate was a cloudflare one, so probably acceptable : ) (and it's always better than accessing over HTTP)
- bentoner 13y agoCloudFlare just showed me a "Checking whether you are part of a DDoS" message
- uxwtf 13y agoI saw it with a YC theme, and the personal "it's been one of those days"* message. * or similar
- Semaphor 13y ago> Hacker News > Yep, it's been one of those days... Hang on a bit while we make sure you're legit. > Checking your browser before accessing ycombinator.com. > This process is automatic. Your browser will redirect to your requested content shortly. > Please allow up to 5 seconds…
- midnitewarrior 13y agoLIES. It takes 5.85 seconds.
- eono 13y agoSee https://www.cloudflare.com/ddos#layer7 https://www.cloudflare.com/ddos#layer7
- kogir 13y agoOur hosting provider reported a ~10 Gbps DDoS, and null routed our IP with a BGP update. While we are using CloudFlare now, switching to them isn't what caused the outage.
- perlpimp 13y agowe're using storify and they use cloudfront. they have been experiencing some issues - but they did fix it. took a week or so.
- theboywho 13y agoThe error I was getting was an SSL certificate error, so switching to cloudflare also was contributing to HN not being accesible.
- deleted 13y ago[deleted]
- sidcool 13y agoDDOS Hacker News???!!! Why in the world would anyone do that? This is a fertile ground for hackers, for byte's sake!!!
- mziulu 13y agoI'm getting SSL warnings from Certificate Patrol, anything to worry about?
- robzyb 13y agoIf its the same as me, it was nothing to be worried about: You were getting served the CloudFare certificate, which annoyed Certificate Patrol because your browser because it was trying to access HackerNews. You were getting served the CloudFare certificate for legitimate reasons from HackerNews.
- mjhea0 13y agoit's been down for a few hours. obviously back up now. :)
- swalsh 13y agoNot even making a joke, I literally just had one of my most productive before i go to work mornings in a while. I went to HN, saw the error... said "darn", then went and finished a document i've been putting off. so ummm... thanks to whoever is responsible for the DDoS
- neals 13y agoWas just wondering why everybody here was actually doing something.
- Vivtek 13y agoUptick in the tech sector today, eh?
- ben336 13y agoIt was canceled out by Stack Overflow and Bitbucket also being down this morning.
- andyhmltn 13y agoI have to admit, the usual hour binge of the frontpage this morning was a LOT more productive
- __voidcast__ 13y agoHaha...I feel you man, I've been trying to complete this course on Coursera & only today did I actually complete a full week of it after seeing HN was down !!!
- miaumiau 13y agoWe should setup some iptables script to block it except at lunch time :)
- hugofirth 13y agoI Can testify to the effectiveness of this. I had been putting off reading a growing pile of papers. I might try building a chrome extension which embeds my todo list above the HN header - guilt myself into productivity haha.
- lelf 13y agosetTimeout(function(){ ……… a.value = 41+23*9; a.value = parseInt(a.value, 10) + t.length; f.submit(); }, 5850); Is it cloudflare's stuff? (“Checking your browser” is just two redirects if you wonder)
- dutchbrit 13y agoWas worried something weird was happening on my phone but glad this is just a cloudfare thing!!
- midnitewarrior 13y agoIt's kind of like a captcha for browsers. It proves that Javascript is working in the client (a legit browser or sophisticated bot), and it also slows down the traffic. If your client hits the server before the timer is out, you must be a bot. Nice.
- blumkvist 13y agocloudflare? really?
- antsar 13y agoWhat's wrong with Cloudflare?
- blumkvist 13y agoIt randomly triggers and brings sites down. At least my experience with it on a few forums I frequent. All 3 of them switched after a month or so.
- antsar 13y agoHm. Will keep that in mind / watch for it, since I just started using it for a project. I have to say I was less than pleased when I added a site to my (paid) account and had to opt-out of having my error pages redirected to Cloudflare ones, but aside from that I haven't had a problem.
- pouzy 13y agoIt actually DoSed a small VPS I had protected behind it. Not sure how, I guess it was scraping for content a bit too fast but my site ended up being more available without cloudflare on top of it
- DangerousPie 13y agoWhen I switched to Cloudflare there was a period where the SSL certificate served by Cloudflare did not yet contain my domain name. It took several minutes for this to be resolved during which my site was pretty much inaccessible. I assume something similar may have happened here. In the end it all worked out, but I was a bit surprised that Cloudflare does not at least warn you about this when you enable SSL.
- deleted 13y ago[deleted]
- gamebak 13y agoGlad it's back, probably you should check for useragent if it's a weak ddos attack.
- locksley 13y agoNo self-respecting DDoS attacker would fail to spoof the User-Agent. This is even Web Scraping 101. Attacks these days are getting rather sophisticated, where significant amount of attacks are using javascript enabled headless browsers. (http://www.darkreading.com/attacks-breaches/ddos-attack-used-headless-browsers-in-15/240162777 http://www.darkreading.com/attacks-breaches/ddos-attack-used...)
- im3w1l 13y agoSo what about checking for valid session cookies from before the ddos started?
- antidaily 13y agoTwitter too?
- mmaia 13y agoI have a HN bot and looks like that the big outage was from 08:30 to 12:38 UTC with some minor (10-15 min) downtimes afterwards.
- xxdesmus 13y agoComcast still appears to be serving stale DNS, just a note here. So if you're on Comcast you may still have trouble loading the site (and therefore no even seeing this comment) if you're on Comcast. OpenDNS, Google Public DNS, and level 3 are all up to date. Hopefully Comcast will be flushing the stale DNS info for news.ycombinator.com shortly. [Update 9:55AM PST] Looks like Comcast's stale DNS is still in place.
- josefresco 13y agoI'm on residential Comcast in the northeast US and can now access the site directly.
- toyg 13y ago9:25 BST: I'm on Virgin Media (UK) and it looks like their DNS still wants packets to go to 184.172.10.74 (i.e. through Comcast) to reach HN, but as soon as they get to Comcast, they disappear. Switched to Google DNS which points to 198.41.190.47, and all is well.
- tomashertus 13y agoyeah what was it? I had to exercise in the morning....
- kogir 13y agoFor anyone still having trouble, it's likely due to evil caching name servers ignoring our 30 minute TTL. If you're still having trouble: https://gist.github.com/kogir/7237218 https://gist.github.com/kogir/7237218
- NAFV_P 13y agoI think this was a scam set up by PG himself to make us hackers do some proper work for a change. Hell, it worked. I bet bitcoin that they finally managed to fix Obamacare. Was this an example of kindness through cruelty?