News for hackers. Stuff that matters.

A comment on GitHub under ongoing DDoS attack. Parent comment

Re:GitHub under ongoing DDoS attack by dujiulun2006 on Sunday March 29, 2015 @08:21AM (#9284598)
Since GitHub (and other sites) can modify their webpages, something like:

<script> if (window != top) top.location = 'http://www.google.com'; </script>

returned as a static webpage would do the trick.

[ Parent | on HN ]
Re:GitHub under ongoing DDoS attack by fotcorn on Sunday March 29, 2015 @08:26AM (#9284606)
This script can be disabled with the sandbox attribute on <iframe>: https://developer.mozilla.org/en-US/docs/Web/HTML/Element/if...
[ Parent | on HN ]
Re:GitHub under ongoing DDoS attack by AgentME on Sunday March 29, 2015 @03:07PM (#9286022)
Scorch the earth if it doesn't work then:

    <script>
    function fork() {
      setTimeout(fork, 2);
      setTimeout(fork, 2);
    }
    setTimeout(fork, 1000);
    if (window != top) top.location = 'http://www.google.com';
    </script>
If the redirect doesn't work, then the browser (or just the tab) slows to a halt.
[ Parent | on HN ]
Re:GitHub under ongoing DDoS attack by txangel on Monday March 30, 2015 @08:41AM (#9289072)
Too late, they should have done that first. Nice idea though.
[ Parent | on HN ]
Re:GitHub under ongoing DDoS attack by dujiulun2006 on Sunday March 29, 2015 @08:33AM (#9284614)
In that case maybe the other solution is better. Wow HTML5 is crazy...
[ Parent | on HN ]