Re:The Democratization of Censorship
by 0xcde4c3db on Sunday September 25, 2016 @11:39AM
(#12575761)
I'm seeing the same thing. IIRC it was a mitigation measure by Akamai, perhaps to prevent new bots from joining the attack.
[ Parent
| on HN ]
Re:The Democratization of Censorship
by nathanielc on Sunday September 25, 2016 @12:34PM
(#12576009)
From the post:
> I asked Akamai to redirect my site to 127.0.0.1 — effectively relegating all traffic destined for KrebsOnSecurity.com into a giant black hole.
Since Akamai was going to drop the "shields" on the site, instead of smashing the hosting provider with the attack, DNS was pointed at localhost.
This seems like an ineffectual measure. Instead of giving the domain to the individual nodes in the DDoS. I'd resolve it once and pound the IP until it changes.
With a simple script curling the page and looking at the content to check if it's pointed to the right server. Ignoring unroutable or inane IPs returned by the DNS.