News for hackers. Stuff that matters.

dineshp2

dineshp2 on Hacker News

Re:CloudFlare, SSL and unhealthy security absolutism on Tuesday August 30, 2016 @07:44AM (#12389138)
The fact that all traffic is decrypted at their servers makes possible caching optimizations (what most users care about) and inject content,headers. This is the best example of the centralization of the internet.

Does anyone know what Cloudflare's response was regarding them treating Tor traffic suspiciously by putting up never ending captchas?

Re:Ask HN: How do you handle DDoS attacks? on Sunday August 28, 2016 @11:39AM (#12376926)
> That page argues against your point, even the basic plan does quite a bit to fend of DDOS. In particular, the most common and effective type of DDOS, which is volumetric and based on reflected UDP traffic, is defended against, even on their free tier.

Maybe I'm missing something here, where does it mention that the free plan protects against UDP floods?

> Using a tool like Siege to bring a site behind Cloudflare down doesn't mean it's not protected. A layer 7 attack against a site which can't handle incoming HTTP requests is still possible.

Flooding a site using Siege from a single IP falls under the layer 7 attack (correct me if I'm wrong), which is protected against in the Business plan.

> Cloudflare, or any other service, can't magically make a site scale.

Where did I mention that I expect Cloudflare to magically scale a site? A POST or GET flood falls under layer 7 protection, which Cloudflare offers in paid plans.

If it was not clear, the point was that layer 7 protection is offered in the paid plans(Business and Enterprise), but not in the free plan.

Re:Ask HN: How do you handle DDoS attacks? on Sunday August 28, 2016 @11:19AM (#12376844)
Could you elaborate? Which plan are you on? What was the size of the DDoS attack?
Re:Ask HN: How do you handle DDoS attacks? on Sunday August 28, 2016 @11:18AM (#12376838)
Tangential, but how do you find OVH? Their hardware, bandwidth, uptime, customer service? I ask because of the conflicting reviews of OVH that a quick google search reveals.
Re:Ask HN: How do you handle DDoS attacks? on Sunday August 28, 2016 @11:14AM (#12376820)
https://www.cloudflare.com/plans/

Look at the "Advanced security" section.

I also used Siege to flood a site behind Cloudflare's free plan and brought it down.

Re:Ask HN: How do you handle DDoS attacks? on Sunday August 28, 2016 @10:19AM (#12376612)
The paid plan, yes. But the commonly used free plan does not do much to prevent DDoS or DoS attacks.

Ask HN: How do you handle DDoS attacks?

Posted by dineshp2 on Sunday August 28, 2016 @10:16AM
from the ask-hn dept.

For owners of small websites running on DigitalOcean, GCP or AWS, how do you handle DDoS and DoS attacks?For context, while exploring the load testing tool Siege running on a VPS, I was able to bring down multiple sites running on shared hosting, and some running on small VPS by setting a high enough concurrent number of users. This is not a DDoS, but it goes to show how easy it is to cause...

( Read More... | 106 comments | 223 points | on HN )
Re:USCIS Proposes Rule to Welcome International Entrepreneurs on Friday August 26, 2016 @02:39PM (#12368313)
> I wish having an advanced degree was a criteria here. A few years ago, I noticed that Britain would give a blanket visa to anyone with an MBA from a list of top international schools.

Care to explain the reasoning? It seems shortsighted to limit this proposal to people with advanced degrees, and why only from the top 50 schools in the world? How does this make sense in the context of startups?

> That said, the proposed rule might mean if one gets into YC/techstars, etc. they would be able to get a visa for the US easily.

The article mentions that this is not a visa, but parole. And with the requirement of $345K in funding, getting into YC/Techstars would not be sufficient. Startups would need to raise additional money, unless they receive $100k from the Government.

Re:The Imposter's Handbook on Wednesday August 24, 2016 @11:52AM (#12352906)
> I wouldn't worry too much about what's being said or not said on HN. There are great ideas and topics to be covered here for sure, but they're sprinkled on top of a giant cake made with 1-part self-loathing, 2-parts day-dreaming, and 1-part regular huff-and-puffing.

I don't understand your argument regarding why you would not pay much attention to what is being said on HN. Could you explain?

Re:Sam Altman talks with Mark Zuckerberg about how to build the future... on Wednesday August 17, 2016 @05:30AM (#12303384)
Interesting interview, but I felt Sam could have asked more probing questions (for the lack of a better phrase) and I don't mean the controversies from the early days of Facebook.

What was the thinking behind acquiring WhatsApp for such a large amount of money and how will they monetize the platform? How is WhatsApp going to be an important part of the future?

Facebook's mission is to connect the world, but in the case of Free Basics, they violated net neutrality principles which is clearly not in the best interest of the users.

Mark Zuckerberg also mentions that he finds it frustrating that people talk about AI turning against humanity, which is one of the things that Elon Musk, Sam and OpenAI are trying to educate the population about. Maybe a discussion about that could have been included in the interview.

If any of the mods are reading this, maybe there could be some way that future interviews can include questions from HN? We could have a discussion about the questions that the HN community wants to ask, and the mods can pick out the questions that generate the most interest from the community?

Re:Airbnb Files to Raise $850M at $30B Valuation on Saturday August 06, 2016 @01:52AM (#12237222)
> at least some of this money will be used to pay off initial investors with a nice profit.

To clarify, do you mean some of the money will be used to buy back shares from early investors giving them a nice profit?

Re:Update on Maintaining and Running the Pokémon GO Service on Friday August 05, 2016 @06:53AM (#12231265)
Looking at the title, I was expecting them to share the juicy details of how they handled the huge amount of traffic, the hacking attempts and the engineering problems they are facing. Instead I was met with some sort of PR attempt to explain the downtime.
Re:Torrentz Shuts Down, Largest Torrent Meta-Search Engine Says Farewell on Friday August 05, 2016 @05:18AM (#12230938)
The reason piracy is so popular is because it is free and because it's incredibly convenient, in that order.

The convenience factor is basically, if you want some content (movie, game) it's a simple search and download away (streaming torrents seem to be gaining traction). No legal alternative offers this level of convenience.

I suspect piracy will become harder for the average user due to three letter agencies making life harder for pirates, but it won't stop the determined ones.

Speaking of determined torrenters, Peter Sunde, the founder of TPB had something interesting to say about torrent aggregators being shut down [1]. The idea is that even though downloading torrents itself is p2p, finding the magnet links is still centralized and that is an area that needs to be decentralized.

[1] https://torrentfreak.com/pirate-bay-founder-piracy-scene-nee...

Re:Xiaomi’s first laptop is a Macbook Air rival on Wednesday July 27, 2016 @12:49PM (#12174383)
I was hoping Xiaomi would also launch a version with Ubuntu as the default OS. An i5, 8GB DDR4 Ram, 256GB SSD, backlit keyboard and 10 hours battery backup at $750 sounds like a sweet deal.

I know Ubuntu can still be installed on the Windows version, but I expect it to be a hacky path with installation issues, getting the hardware to play nice and the backlit keyboard to work, and finally maybe even battery life issues.

An out of the box solution like the XPS 13 at a lower price point might work.

Older »