DDoS attacks

  • 🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.
  • Want to keep track of this thread?
    Accounts can bookmark posts, watch threads for updates, and jump back to where you stopped reading.
    Create account
'99 demo disk said:
I'm able to use the site fine on my android phone with firefox, but cant without tor on my pc. Is this a known thing?
Click to expand...
Android with home WiFi (so same WAN IP as your PC), or over mobile data? Most of the attacks seem to be IPv4 based so IPv6 traffic can get through, and mobile data is basically all IPv6 at this point.
 
jimbraps said:
if they didn't deny you they would have harvested all the traffic and build out their goyim database to eventually dox everyone using the site
Click to expand...
I don't know what Radware offers specifically, and I don't know the specifics of the latest attacks, but L3/4 DDoS mitigation doesn't do that, they would only get IP information. It's L7 DDoS mitigation that terminates your TLS (MITMs your own users) and allows the provider to collect detailed data on users and their activities.
 
Hantavirus said:
I don't know what Radware offers specifically, and I don't know the specifics of the latest attacks, but L3/4 DDoS mitigation doesn't do that, they would only get IP information. It's L7 DDoS mitigation that terminates your TLS (MITMs your own users) and allows the provider to collect detailed data on users and their activities.
Click to expand...
Imagine thinking the Jews aren't smart enough to do traffic fingerprinting of encrypted traffic to figure out who users are. (It's getting more advanced every day.)
 
DavidS877 said:
Imagine thinking the Jews aren't smart enough to do traffic fingerprinting of encrypted traffic to figure out who users are. (It's getting more advanced every day.)
Click to expand...
ISPs already do deep inspection of your packets to determine if you go to unkosher sites even if you use HTTPS and an alternative DNS, that's why tools like goodbyedpi exist
 
DavidS877 said:
Imagine thinking the Jews aren't smart enough to do traffic fingerprinting of encrypted traffic to figure out who users are. (It's getting more advanced every day.)
Click to expand...
jimbraps said:
ISPs already do deep inspection of your packets to determine if you go to unkosher sites even if you use HTTPS and an alternative DNS, that's why tools like goodbyedpi exist
Click to expand...
Fair enough. I know about DPI and correlation attacks, my point was just that there is, in fact, a big difference between "here's a 10 Gbps pipe that performs a sanity check on connections" and "let us MITM your users to collect every single packet they send to your site, unencrypted."
 
Last edited:
Null said:
I haven't updated in a few days but this is what my week has looked like:
- Got cheap protection from one smaller provider
- Got three more lined up from existing services we use that I am going to mesh together
- Word of our situation has reached two big boys who I've spoken to and have softened their stances on "never KF"
- Got a quote from three of the largest providers in the world that are within the realm of possibilities.
- Asked a very big boy (very serious company) to double-triple check KF is OK on their networks with suits. Getting them in our anycast is basically DDoS problem solved forever.
Click to expand...
Well sounds like things are working out after all.
 
MarvinTheParanoidAndroid said:
Well sounds like things are working out after all.
Click to expand...
no why do people keep saying that? i have nothing. we've gotten one upstream and they can cancel at any time basically.

"I called some people"
"well well well I guess everything's taken care of"

like no I have no transit access, I am DDoS mitigated at the charity of others, and big companies are turning away $5000/mo contracts I can't even afford.
 
Null said:
no why do people keep saying that? i have nothing. we've gotten one upstream and they can cancel at any time basically.

"I called some people"
"well well well I guess everything's taken care of"

like no I have no transit access, I am DDoS mitigated at the charity of others, and big companies are turning away $5000/mo contracts I can't even afford.
Click to expand...
Your description made it sound like things were improving and people were coming around to help us.
 
MarvinTheParanoidAndroid said:
Your description made it sound like things were improving and people were coming around to help us.
Click to expand...
Nah, just that there is a tiny glimmer of light visible in the dark cave of Kiwi Farms. Maybe it's sunlight, maybe it's some horrible bioluminescent cave monster that will try to eat everyone, but it's way to early to tell.
 
Null said:
no why do people keep saying that? i have nothing. we've gotten one upstream and they can cancel at any time basically.

"I called some people"
"well well well I guess everything's taken care of"

like no I have no transit access, I am DDoS mitigated at the charity of others, and big companies are turning away $5000/mo contracts I can't even afford.
Click to expand...
I’ve been listening to a lot of MATI backlogs. Every time that we have faced adversity and things looked fucking super grim somehow, through pure determination on your part, we are still here.

That’s you Josh. You truly have stood your ground even if it felt like it was absolutely fucking hopeless. And honestly that’s the most inspirational pill we can take. You are our true Positive Polly in the end. Even baby steps are something.

And I’m about to fucking say it…..
I hope you have a good pizza day if you wanna know da truth bout it bish.
 
MarvinTheParanoidAndroid said:
Your description made it sound like things were improving and people were coming around to help us.
Click to expand...
Have you never worked on a job where fear ticked over to despair and then wrapped back to jovial optimism? I've written reports telling suits "It's Over" with an ACK sfx at the end and nothing but red text and recommendations for corporate bankruptcy and then listed all the optimistic possibilities and self-delusions as good signs for future progress, like the parking lot resealing finishing only 5 weeks behind schedule and the explosion recall thankfully being delayed due to the scope of the recall expanding to include an elementary school instead of just a hospital.
 
Null said:
no why do people keep saying that? i have nothing. we've gotten one upstream and they can cancel at any time basically.

"I called some people"
"well well well I guess everything's taken care of"

like no I have no transit access, I am DDoS mitigated at the charity of others, and big companies are
Click to expand...
Don’t blackpill, Jersh. That’s how your enemies think they’re winning.
 
Merton J. Dingle said:
Have you gotten the impression that they have learned that everything the media has said about this being a harassment site is false?
Click to expand...
It don't matter. They know sites objectively worse than kf in every way, say CP hosting ones or ones recruiting westerners for meatgrinders in ME or Ukraine. You know what these portals of evil don't have? A cavalcade of terminally online morons blowing their HR and social media with loud complaints that ruin their reputation and cause a constant headache not worth the ~2k/month kf can afford.
Fat Bum said:
Don’t blackpill, Jersh. That’s how your enemies think they’re winning.
Click to expand...
I can cheerlead too, if Cool Hand Luke gets into trouble it's not my ass.
 
given how hard and how often this site is attacked by various bad actors of every kind i have often wondered if that could be turned into some type of positive selling point. like how there was that thing with stanley mugs surviving a car fire that made people want to buy them more.

any service that is able to properly protect this place and not be overwhelmed would in theory instantly have massive proof that what they offer not only works but it works when dealing with the level of attacks a place like this deals with on the daily. something which IIRC even cloudflare struggled with to a degree.
 
You must log in or register to reply here.
Back
Top Bottom