News for hackers. Stuff that matters.

A comment on Google mitigated the largest DDoS attack to date, peaking above 398M rps. Parent comment

Re:Google mitigated the largest DDoS attack to date, peaking... by Swenrekcah on Tuesday October 10, 2023 @09:31AM (#37831863)
That actually sounds like a really good idea. This is already implemented in the physical world (in a much less efficient way) in the form of “no spam” stickers and registrations.

Is there a reason other than inertia for why it hasn’t been implemented?

[ Parent | on HN ]
Re:Google mitigated the largest DDoS attack to date, peaking... by codedokode on Tuesday October 10, 2023 @09:39AM (#37831957)
ISPs do not want to spend money for fighting against criminals.
[ Parent | on HN ]
Re:Google mitigated the largest DDoS attack to date, peaking... by Swenrekcah on Tuesday October 10, 2023 @09:42AM (#37831988)
That doesn’t sound convincing to me. I mean I understand they don’t want to spend money but if cost is the only barrier it seems like that could be overcome somehow by interested parties.
[ Parent | on HN ]
Re:Google mitigated the largest DDoS attack to date, peaking... by bombcar on Tuesday October 10, 2023 @10:34AM (#37832644)
It's not the costs, it's that some ISPs like getting money from spammers and criminals, and carefully look the other way.

And the other ISPs like getting paid for DDoS mitigation, so they also look the other way. There's no money to be made fixing the underlying problem.

[ Parent | on HN ]
Re:Google mitigated the largest DDoS attack to date, peaking... by bombcar on Tuesday October 10, 2023 @10:33AM (#37832634)
The main problem is how do you authenticate the request as being legitimate? It's already possible to spoof headers and "FROM-IP" (in fact, major DDoS attacks use just this as a replay attack, spoof a DNS request as coming from 1.1.1.1 and get a much larger response sent TO 1.1.1.1 from wherever).
[ Parent | on HN ]
Re:Google mitigated the largest DDoS attack to date, peaking... by codedokode on Tuesday October 10, 2023 @01:57PM (#37835279)
You can send back a reply with a token to confirm ban.
[ Parent | on HN ]