Re:Belgian ISP under 250 Gbps DDoS for days on end
by matheusmoreira on Saturday September 18, 2021 @04:24PM
(#28579011)
You could for example protect all networked computers with single packet authorization. They will ignore all network traffic unless a signed packet is sent first. To the unauthorized it's like the computer is not even there.
[ Parent
| on HN ]
Re:Belgian ISP under 250 Gbps DDoS for days on end
by kazen44 on Saturday September 18, 2021 @05:56PM
(#28579711)
this is basically how a vpn tunnel works in some way. (wireguard, ipsec if properly configured etc).
it has one, enourmous downside. it destroys reachability to your systems from the population at large because they need to trust some key, which is not universally distributed.
Re:Belgian ISP under 250 Gbps DDoS for days on end
by matheusmoreira on Monday September 27, 2021 @02:48PM
(#28674469)
> it destroys reachability to your systems from the population at large
Indeed.
Sometimes I think it was never meant to be. We're allowing our computers to talk to untrustworthy strangers. It was always a matter of time before one of them sent a crafted payload...
Perhaps computers shouldn't be so reachable. Can't exploit a computer that's not even there, zero days or not.