gabriel-samfia
Re:We Executed a Critical Supply Chain Attack on PyTorch
on Tuesday January 16, 2024 @07:40AM (#39012650)
Ouch! This is why ephemeral runners should be used. Preferably virtual machines. On an infrastructure that can define security group rules to prevent lateral movement.
Re:Zerigo DNS services down for 6+ hours due to massive DDoS
on Thursday August 02, 2012 @05:22AM (#4327948)
We've seen the same kind of attack. We ended up limiting our DNS resolvers only to our own prefixes. It's a simple ACL in bind that allows recursion (domains your DNS server is not authoritative for), only to our subnets.
Re:Zerigo DNS services down for 6+ hours due to massive DDoS
on Sunday July 29, 2012 @05:38AM (#4307985)
There are many types of DDoS. Some max out your CPU, some your network. Given that a DDoS (Distributed Denial of Service) involves potentially thousands of willing or unwilling systems, it's relatively easy to make a server unresponsive.
I have a 100 Mb/s internet connection. Scale that up to 10000, and you have saturated even the fastest of internet connections.
Mitigating a DDoS is not easy. Heck, its damn near impossible, considering the fact that DNS DDoS attacks are done via UDP, which allow you to spoof the source IP address. Even if you do block the IP address of al the attackers, your upstream provider is still impacted by the packets trying to come into your server. Most upstream ISPs will blackhole your server IP to diminish the impact on their network.