Google mitigated the largest DDoS attack to date, peaking above 398M rps

Re:Google mitigated the largest DDoS attack to date, peaking... by Analemma_ on Tuesday October 10, 2023 @10:32AM (#37832617)

I don't think it's true that 0 actions are being taken. When new vectors for amplification attacks are found, they get patched - you can't do NTP amplification attacks on modern NTP servers anymore, for example. But it takes a long time for the entire world to upgrade and just a handful of open vulnerable servers to launch attacks. And in the meantime people are always looking for new amplification vectors.

> The solution is to finally hold accountable attack origins (ISPs, mostly), so that monitoring their egress becomes something they have an incentive to do.

Be careful what you wish for. The sort of centralized C&C infrastructure and "list of bad actors everybody has to de-peer" that you would need to this effectively would we a wonderful juicy target for governments to go, "hey, add [this site we don't like] to the list, or go to prison".

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by handoflixue on Tuesday October 10, 2023 @03:14PM (#37836197)

> "hey, add [this site we don't like] to the list, or go to prison".

Aren't there already a dozen or so such lists? I don't see how one more list really increases the risk.

You can make the list public - most of the bad actors are obsolete, compromised equipment for which the owner is unaware of the problem. Once the list is public, it's pretty easy to detect anyone trying to abuse the list as a tool of censorship.

[ Parent | on HN ]

Re:Google mitigated the largest DDoS attack to date, peaking... by tristan9 on Tuesday October 10, 2023 @08:10PM (#37839420)

IP reputation is already a thing. And plenty enough ASNs are well-known for willfully hosting C2 servers and spam, DoS, etc sources…

[ Parent | on HN ]