Recent submissions

Comment · 10 years ago
Email me if you want proof, don't be a little bitch and make me email you. Want proof? Email me
Comment · 10 years ago
Opposing view? I worked there you stupid shit. Keyboard commander, email me if you want proof of the astroturfing. Otherwise fuck right off back to whatever game you were playing :)
Comment · 10 years ago
If you have problems with my threads, make one response, don't detach my threads like a bitch and multiple responses.
Comment · 10 years ago
So tired of this bullshit. You and your boss Matthew Prince make money off booter websites, actively host known ISIS sites, yet blog about how bad they are.

You know the illegal websites on your network, you knew the ISIS websites. And the booter sites as mentioned are obvious.

But as long as your marketing team can blog something cute up, you don't look like the shysters you are. Take responsibility for your network and stop using the 'reverse proxy' file a legal request course. There's due process and just hiding behind the DMCA to host terrorists and booters alike.

You shits know that someone who is being attacked, or knows of an ISIS / extremist website they won't go through the full legal written request. That's when it's your term to police your own network in some way.

Hiding behind asking for a legal written notice makes you and your Abuse Team sound useless, like you are.

Comment · 11 years ago
Wow.

I mentioned FastNetMon to them, but I just read the status update. They're blocking entire continents by communities... Holy shit. This is not some skiddie, this is likely state sponsored or BTC ransom.

Worrisome how the attacker knows so much of their infrastructure, makes me think ex-employee as he knows where to hit their servers, etc.

So glad I replied 'nope' to taking the cheaper SysAdmin position, after hand feeding them how I did mitigation. They asked me how, and were very interested in why. This was a week before this happened.

It's all making sense now. But even FastNetMon couldn't help this, you need a shitload of bandwidth (OVH size) and thousands (hundreds in cases for arbor) of equipment to match.

They need to GRE their /24's from Voxility or some large ass provider, as this is beyond fucked. I just read the status, they're cutting off parts of the internet to VMs. What in actual fuck.

I've worked in cloud for 10 years, and recently left, and will not be going back. Bare metal and OVH FTW. I can understand the 'going above and beyond' during holidays, but the lawyers I work for just want their 'f email online NOW' (direct quote)

Comment · 11 years ago
So I'm not the only one who saw this quickly disappear.

Couldn't find it on the 2nd or 3rd page, very odd.

Comment · 11 years ago
Whoever has the most transit wins the mitigation game. You need to take in that traffic, then process it with a shitload of power.

OVH has 3 large datacenter PoPs to absorb attacks and do just that, then push the traffic clean back to your server.

They may blow at support and response times, but once I have a dedicated server from them, their Manager is intuitive enough to get going.

Add the fact I can get 64G server on a brand new E5 chassis with 255 free IPs for VPS of my own, and I've been moving more and more sites there as hosts get arbitrarily hit.

Piss off some competitor or skiddie and you get tested. It's ridiculous, but sadly DDoS mitigation is becoming a must.

Good time to leave being a SysAdmin in cloud and go back to web design full time as I watch a lack of best practices and SPOF take over.

Finally, I backup everything to 2 off-site locations and hope for the best.

Comment · 11 years ago
Work in IT. Server was stable & online for 189 days before the 25th, knew them for stability.

No notification from them, just a handful of downtime alerts during time with the family. They were completely gone from BGP tables in Newark.

Used backups and moved sites to OVH. Don't know who they pissed off, I suspect another NJ competitor, who is known for taking cheap shots at other VPS companies.

It's a pain in the ass, but at the same time, how is their network so fragile? You would think at least some of the fragile systems being attacked would be firewalled or at least ACL'd off from the public net.

This is what happens when you don't run your own network and rely on other ASN's and uplinks to do the work for you. When it comes to other customers being affected, they will simply null you. Unlike your network ops who would be trying anything they could from OOB to rectify such.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton