DDoS attacks

Destacado
Null dijo:
So I mean it. I need someone else, somewhere, to help me. This isn't a $20 ask, this is "give me access to something everyone else in the entire planet already can do no questions asked": let me pay $2000 a month for a 1Gbps clean traffic line. Without that I can't do any more.
Presiona para expandir...
Can KF get funding from content creators that browse the site? If it weren't for KF, @returnofthemacandcheese would've had to share his effortposts on platforms like Xitter, YouTube, or God forbid, Reddit. Regardless, his posts would be at the mercy of some retarded algorithm, and if he gained little to no traction, Jeremy Hambly would not have been exposed for being a cuckold. As a result, Jeremy would have no reason to flag down the KC's clip channel, which means his grift would be doing a lot better right now with room for growth. Jeremy had a spectacular meltdown and many content creators, including KC, made a lot of money covering it, and this all happened because of the infamous effortpost detailing Jeremy's relationship with Adam Sellers.

For content creators, this site is a gold mine. They'd stand to lose a lot of money if it went away. Are they actually going to stand by and fluoride stare at the KiwiFlare error page without offering to help? It wouldn't surprise me, but it seems like a shitty thing to do.
 
Oh while Im just sitting here thinking, this might be kinda dumb but most DDOS attacks are done via IPv4 since most botnets are composed of IoT chinkie slop that was made before IPv6 or never had it setup.... Is it possible that swapping everything to IPv6 and disabling IPv4 might mitigate this attack? I think this would require swapping all your DNS records too, I dont know, I dont do networking for a living.

I dont know how much control over what part theyre hitting is, so this might be impossible, since the thing blackholing is probably hardware you dont own or control and I dont think they would find disabling IPv4 very agreeable.
 
The Pulverizer dijo:
Can KF get funding from content creators that browse the site?
Presiona para expandir...
They already struggle giving the website the credit because of outranged troons screeching. Imagine the social media suicide it would be for them to actually contribute to the green reddit devil.
Or they are just straight up leeches. Kudos to those that acknowledge the effort, but they are in the extreme minority.

For their viewers - most of people outside of KF just receive the blatantly false 'evil website forcing people to kill themselves' and do not investigate past that, taking troon's word on it. I don't think there was anyone big that clarified KF is just a gossip site and there is a sizeable chunk of members that do not engage in lolcow threads, just talking about their hobbies (because most of those spaces are taken over by troons, indians, bots or are just straight up dead) or sperging about news because websites do not offer comment sections and if they do, they are heavily sanitized/moderated to the point you can't say anything but agree with the party line.
 
Última edición:
Sweeter and Savoury dijo:
It's some psycho Jew bitch, hiding in a basement somewhere selling nudes of her hideous, cut up body to child porn addicts for just enough cash to buy some DDOS tokens. There is a karma there, it's not fun but it is something.
Presiona para expandir...
I believe Elaine is a British goy who pretends to be a Russian Jew. She pretends to be a Jew because "Jews rule the world" (similarly to Melinda Scott) and she pretends to be Russian because "Russians are trad and based".
 
justwantedtoread dijo:
Ignore me if I'm being a dumb nigger but it seems like this new botnet will eventually target someone that isn't one of the designated bad-people websites, is there any chance this eventually gets taken care of at the source, or does it not matter because the genie is out of the bottle?
Presiona para expandir...
Cloudflare has the ability to mitigate this, so it's not an issue literally anyone else, including chomos and animal torturers.
 
justwantedtoread dijo:
Ignore me if I'm being a dumb nigger but it seems like this new botnet will eventually target someone that isn't one of the designated bad-people websites, is there any chance this eventually gets taken care of at the source, or does it not matter because the genie is out of the bottle?
Presiona para expandir...
I'm sure that the feds are already looking into the Botlord but you're talking months or years.
 
The Pulverizer dijo:
For content creators, this site is a gold mine. They'd stand to lose a lot of money if it went away. Are they actually going to stand by and fluoride stare at the KiwiFlare error page without offering to help? It wouldn't surprise me, but it seems like a shitty thing to do.
Presiona para expandir...

You're right that a lot of people eat off this site. But the thing stopping us isn't the size of the cheque, and it's worth walking through slowly, because nearly everyone assumes this is a fundraising problem and it isn't.

Start with the line you quoted. Null offered $2,000 a month for a single gigabit of clean traffic. For reference, a gigabit of ordinary transit in a major city runs somewhere around $100–500 a month. He offered roughly four to twenty times the going rate and still got nowhere. When a man offers to pay several times market price and still can't buy the thing, price was never the obstacle.

First, why creators can't simply fix this

Most creators' income lives on YouTube, Twitch, Patreon, PayPal and similar. Every one of those can be made to drop a person by the same pressure campaign that's aimed at us. Asking a creator to publicly bankroll this site is asking them to trade their entire livelihood for our uptime. Some quietly help already. Asking them to do it loudly is asking them to be destroyed, and then there's no creator and no money either.

There's also a problem with taking their money even if offered: we write about these people. A site funded by the subjects of its own threads is a site nobody should trust. The first time a donor asks for a thread to be trimmed, the site is worth nothing. That independence isn't negotiable.

But set both aside, because even a mountain of cash doesn't buy what nobody will sell.

What a DDoS actually is, in plain terms

Imagine you run a shop. One morning ten thousand people show up at the door at the same second. They don't want to buy anything. They just stand in the doorway. Real customers can't get in.

Here's the part everyone misses: to make those ten thousand people go away, they have to arrive first. You cannot stop them from a distance. You need a doorway wide enough for all ten thousand to walk up to, and enough bouncers to look at each one and say "you're fake, out." You are paying for a door big enough to fit the flood you are throwing away.

So when people say "just filter it," what they're really saying is "buy a pipe big enough to receive the entire attack, then discard it." That pipe is the expensive part.

What building that ourselves actually costs

Rough, real-world ballpark for one filtering site:

Código: 
ONE scrubbing site
  Rack space + power (2 racks, ~10 kW)     $2,500 -   4,000 /month
  Cross-connects to carriers (4-6)         $1,200 -   3,000 /month
  IP transit, 100 Gbps commit             $10,000 -  30,000 /month
  Remote hands                               $500 -   2,000 /month
  --------------------------------------------------------------
  RECURRING                               $15,000 -  40,000 /month

  Border routers that filter at 100G+     $80,000 - 250,000 one-time
  Filtering servers (~10, 100G NICs)      $60,000 - 120,000 one-time
  Optics, cabling, spares                 $20,000 -  50,000 one-time
  --------------------------------------------------------------
  UP FRONT                               $160,000 - 420,000 one-time

And one site is not enough. One site is a single point of failure — if the attack is bigger than that building's pipe, you're down, full stop. You also want the attack to land near where it originates, so traffic from Asia dies in Asia instead of crossing an ocean into your only door. That means three to five sites minimum:

Código: 
THREE to FIVE sites
  RECURRING                               $45,000 - 200,000 /month
  UP FRONT                               $500,000 - 2,000,000 one-time

PLUS, once
  Our own IPv4 /24 (address space)        $10,000 -  16,000 one-time
  Our own ASN + registry membership          $500 -   2,000 /year

PLUS, people
  24/7 on-call network engineers         $300,000 - 600,000 /year

Call it $70,000–250,000 a month, plus roughly half a million to two million dollars before we serve a single page. And that buys us a few hundred gigabits of headroom — against attacks already measured in the hundreds of gigabits and climbing. The attacks we're taking right now are historic in scale; this isn't the usual background noise.

The reason Cloudflare and the like can absorb this is that they have hundreds of terabits and split the bill across millions of customers. We would be one customer paying for all of it, alone.

Now the part money doesn't solve

To filter traffic, somebody has to hand it to us first. The internet isn't one thing — it's thousands of separate companies' networks glued together, and a small handful of very large ones carry everybody else's traffic. Think of them as the motorway operators. If you want the world to reach your building, one of those operators has to agree to build an off-ramp to it. That's called transit.

We don't need them to like us. We need them to sell us an off-ramp. That is the entire problem.

Because here's what happens. Imagine you rent a shop. You pay every month, on time, in full. You never break a single rule in the lease. But every day a hundred people phone your landlord and say "evict him or we'll make your life hell, and we'll tell your other tenants too." Eventually the landlord reads his own lease, finds the clause letting him end it with 30 days' notice for any reason at all, and uses it. You did nothing wrong. You're still on the street.

That is what an AUP bombardment is, and it happens to us at every layer — the datacenter, the transit provider, their upstream, the payment processor. Nobody has to prove we broke anything. "Acceptable use" clauses let them leave because being associated with us became inconvenient.

Why losing either partner is a catastrophe

  • Lose the datacenter and it isn't a config change — it's physically unracking hardware, shipping it, finding a facility that will take us, signing again, re-cabling, and rebuilding carrier relationships in the new building from scratch. Weeks to months of degraded or no service, and at the end of it we have exactly the same 30-day guarantee we had before.
  • Lose the transit provider and we need another carrier that is already physically present in that same building. If nobody there will take us, the hardware is stranded — hundreds of thousands of dollars of routers sitting in a room with no road to them. Getting a new carrier to run and light fibre into a facility is months of lead time and tens of thousands in one-off charges, assuming they say yes at all.

So here's the real question

Would you spend $500,000 on routers for a building you might be evicted from in 30 days? Would you sign a three-year rack lease when the carrier feeding it can walk with a month's notice, for no stated reason, and there's no court to appeal to?

That's the actual decision in front of us. Every piece of this requires committing large sums for long periods to partners who can each individually leave at short notice, for reasons that have nothing to do with whether we paid or whether we followed the contract. You cannot build permanent infrastructure on foundations that any one of four separate companies can pull out from under you on a whim.

That's why the ask you quoted is so small and so specific. It isn't "give us a million dollars." It's "let us pay you well above market rate for one gigabit, and don't leave in ninety days." We have the money for that. What we can't manufacture is somebody willing to sign.

So it isn't that creators are standing by doing nothing. It's that this isn't a problem their wallets can reach.
 
Why can't these worthless subhumans just kill themselves? It would literally be the ONE thing they did with their worthless lives that would benefit society.
 
BubbaRobot887 dijo:
Yeah, I can't get the TOR site working either.

I think it is time to consider a ban on at least the most extreme hate speech if we want this site to continue.

We can still talk about things but maybe do it without the slurs and make it clear that like the rest of the world we see that free speech reaches its limit when it harms other people,
Presiona para expandir...

Oh and:
1000006554.jpg
Niggerfaggot
 
Última edición:
Null dijo:
I'm sure that the feds are already looking into the Botlord but you're talking months or years.
Presiona para expandir...
Yeah, that makes sense, and they obviously won't go after the individual resellers because that's just playing whack-a-mole, and it's definitely unfortunate that attacks of this sophistication are now cheap enough for the dregs of the world like Laney Miller to be able to afford.

I just know that no one is ever going to come to our rescue so our best bet is usually being in the blast radius of somewhere that actually matters to the people in charge.

In summary, I blame Godwinson and anuscabbage and everyone else that failed to dick this crazy bitch down well enough to calm her ovaries. All you had to do was put on the Josh mask you cowards.
 
Am I being DDoS'd? Am I being DDoS'd? Am I being DDoS'd? I am not surfing I am SNEEDING! I am a SOVEREIGN SNEEDIZEN under maritime law! Alright, I'm leaving - You're pointing your botnet at me?!?! He's pointing his botnet at me, everybody, I have done nothing criminally wrong. Hey! YOU'RE RAPING ME! THIS IS RAPE! THIS IS RAPE! HELP! HELP! HEEEEELLLLPP! I DO NOT CONSENT! I DO NOT CONSENT TO BEING ON THE ONION FARMS!
Purple Reddit loses again A-Logs.
 
Tinidril dijo:
Don't everyone yell at me, I'm still on my first cup of coffee of the day, and I'm fairly dumb about all the technical stuff, but is it even remotely possible that LFJ is involved with or encouraging or financially enabling Elaine Miller?
Presiona para expandir...
If it's really as cheap as Null said -- $80/month?! that's nuts -- it's the price of a cup of coffee per day. It doesn't really need "financially enabling" for someone to come up with $3/day. Hell even $80/day is doable, especially if one has allies/backers to spread the cost around a little.

Tinidril dijo:
I looked at Miller's thread last night and while she seems wicked enough and motivated enough to attempt just about anything , she also doesn't seem too bright. It just seems awfully coincidental that this is happening at the same time as LFJ lawsuit.
Presiona para expandir...
It's also awfully coincidental timing with the OFCOM thing, I have to wonder if they're part of what's protecting her.

Tinidril dijo:
Imma finish my coffee now.
Presiona para expandir...
I'm doing the same, fren. Cheers! 😊
 
Destacado
Debes iniciar sesión o registrarte para responder aquí.
Atrás
Top Abajo