SamyPesse

A quick update to this thread that the incident is resolved, and we'll be publishing a post-mortem in the next 24 hours covering what happened, the impact it had, what we did to resolve, and what'll we do next. You can get an update when this is out on GitBook status page.

This is not what we meant. We will be accountable and will post a complete post-mortem. But it’s important to understand that the attack was a lot more developed than what we’ve been used to with humans, especially in terms of pace and adaptability.

We’ll provide details in a long post-mortem. For now, it was important to notify our users as early as possible.

We summarized more information on this page from recent learnings, than what has been posted as updates on the status page (https://www.gitbookstatus.com/incidents/01M6FXDDGQRWHMYYWXY2...).

I’m genuinely sorry the end of friendco.de impacted you. It was 12-13 years ago; the service had little usage at the time, and we probably didn’t handle the end perfectly. I don’t recall exactly, but I can assure you that the team today is more experienced.

GitBook’s CTO here

We have been dealing with a security attack since yesterday. Our team has been all hands on deck since the start, and we took a large portion of our services offline to prioritize user security.

Our service is progressively coming back online (most of it already is), and we are actively monitoring the situation.

We’ll continue to actively keep our users updated through emails, Slack, and our status page as we monitor the situation and learn more.

Yes LLMs are an amazing technological breakthrough for knowledge base and document solutions.

You have a good understanding of what we are doing :)

With snippets:

* You can save Slack thread as a new document in GitBook; the document will be generated by a LLM (it's not a plain dump of the messages).

* You can record your work on VS Code (+ audio), and we'll translate it as a document (snippet)

With Insights:

* We analyze content (we have customers with more than 10000 pages in their docs) and identify contradictions or duplicate

* We don't auto-fix them yet, but it's planned ;)

With AI Search:

* We leverage LLM and a vector database to provide complete answers with sources to natural language questions

Today I’m proud to introduce the public alpha of GitBook Lens — a new semantic search tool powered by AI.

Lens indexes the content of documentations hosted on the platform, and provides an interface to ask questions. It’ll scan your documentation and give you a simple, semantic answer using OpenAI — with clickable references if you want to dive deeper.

While Lens is in open alpha, anyone can activate it at no extra cost.

We also provide an API to integrate GitBook Lens in your website / application.

GitBook founder here :)

We are working on multiple aspects of the products that should cover a lot of this (improved i18n, SEO, faster rendering)!

Would love to get your feedback on what you would like to see improved exactly on our SEO friendliness and i18n support. We have an open GitHub community for feedback; https://github.com/GitbookIO/community/discussions

And for anyone, if you are interested in building a "A SaaS to host product guides ", we are hiring engineers/designers/builders: https://jobs.gitbook.com/ :)

We only remove the domain from Cloudflare when the content is deleted. The main reason is to avoid broken links when users update their domain on GitBook.

Ex: 1. You configure docs.mycompany.com with your GitBook space 2. You share links to docs.mycompany.com on social medias 3. You update the domain to docs.anothercompany.com 4. It's better if the docs.mycompany.com links can continue working until you remove the DNS entry

In summary, we want the users to decide through their DNS config when GitBook should serve the content or not to avoid breaking links without an intentional action from the user.

Unfortunately, because of how Cloudflare doesn't use the DNS configuration to decide where to route the traffic, it causes issues atm. We'll look at what we can do on our side to mitigate this.

GitBook CEO, here.

We use Cloudflare to serve HTTPS traffic for all custom hostnames configured by our users.

When a user configures a custom hostname, they point their DNS via CNAME to one of our domains (which, at the end of the chain points to Cloudflare). We then request Cloudflare (using their Cloudflare for SaaS product) to generate an SSL certificate for this hostname and serve the traffic properly.

When users move away from GitBook, they often don't remove their content from GitBook and only change the DNS on their side. We don't request to remove the hostname from Cloudflare for SaaS until the content is deleted from GitBook, as the goal is to avoid breaking links for URLs that are still pointing to GitBook.

We'd expect Cloudflare to always use the DNS setup of the domain as the primary factor for deciding where to route the traffic.

We don't know the rationale behind why Cloudflare routing continues internally routing the traffic to GitBook when the domain is no longer pointing to the GitBook hostname. But it is not us doing that intentionally.

Our support can help unblock this situation by manually removing this domain from our Cloudflare for SaaS. You can reach out at [email protected].

We don't host user content under the gitbook.com, or at least we've stopped doing it a few years ago.

User content is stored under *.gitbook.io, similar to GitHub.

Google blocked all domains that contained "gitbook" in our account, even ones that are used for some infrastructure and are not accessible by the public. We don't know the exact reason for this, maybe they've blocked gitbook.com because we still have some redirect for content that was hosted under it years ago.

And yes we are going to make changes to host our status page under another domain.

We've just published a postmortem: https://blog.gitbook.com/tech/post-mortems/06-20-gitbook-dom...

let us know if you have any questions!

Yes, we've pivoted a few years ago to GitBook. Codebox was not working very well.

No we don't, we were already planning on consolidating everything on Cloduflare, we are just going to make the switch sooner.

We'll share more details in the postmortem.

Yes, after 6h without getting much responses from Google Domains support, we just got a notification that they unblocked our domains.

We are working on making sure that everything is correctly working.

Workaround that we've setup to allow our users to still access the platform through different hostnames will continue working.

GitBook CTO here:

Our production domains (gitbook.com and gitbook.io) have been blocked and locked by our registrar (Google Domains).

None of our infrastructure is impacted, all user content and databases are safe; our domains simply blocked by a heavy handed policy.

As mentioned on Twitter, we are all hands working with Google to fix this issues ASAP. We'll then share an in-depth post-mortem

https://twitter.com/GitBookStatus/status/1268554857411227648

GitBook also have conrefs (content reference): http://help.gitbook.com/format/conrefs.html

No he is not a contributor (I don't know him), I originally wanted to share this project on HN this week after finalizing some stuffs.

Yes it's basically an advanced use of Twilio API.

I'm the creator of the open source project, but somebody posted it on HN without me knowing it so I can't change the title or anything.

Already done :) https://raw.githubusercontent.com/SamyPesse/betty/master/pub...

Fixed!

Add an issue on Github (https://github.com/GitbookIO/gitbook/issues) ;)

Done https://github.com/GitbookIO/gitbook/commit/55d9bfbf1833376d...

Fixed, thank you

"Both of these libraries should be unnecessary and hopefully obsoleted by browsers someday. Browsers already implement techniques like this to process CSS styles efficiently. It's still unfortunate we have no native implementation of declarative event handlers, even though people have been doing this since 2006."

I think they believe jQuery will rapidly become the past so no reason to merge it.