mylifeistrash
Banned
-
- Joined
- Dec 28, 2017
- Posts
- 14,882
anyone coming here from a link shouldn't be able to view the board and hence prevent the downtime happening right now.
iiiTeMpeR said:we are as slow as lookism right now, who linked us, we are out of reddit, normies fuck off! reeeeeee!
avsky1 said:3510 guests... this isn't fucking discount day at the zoo
mylifeistrash said:they used nginx. they could easily give everyone who comes from an outside link a cookie, then make it so anyone with that cookie can only use one of max N requests per second
i could fix this site in like 2 minutes max if they just copy and paste the shit i say
FeminismsCancer said:Isn't this a DDOS? I assume in that case cookies get thrown away between requests.mylifeistrash said:they used nginx. they could easily give everyone who comes from an outside link a cookie, then make it so anyone with that cookie can only use one of max N requests per second
i could fix this site in like 2 minutes max if they just copy and paste the shit i say
mylifeistrash said:a DDOS would just flood TCP connections, not send http requests, that's too inefficient
but even if they were flooding http requests then block every request without an incels.is cookies so regular users can view the site
FeminismsCancer said:What are you saying?mylifeistrash said:a DDOS would just flood TCP connections, not send http requests, that's too inefficient
but even if they were flooding http requests then block every request without an incels.is cookies so regular users can view the site
It IS more efficient to send http requests since
1. It's ports 80/443 that are open and forwarded to the server by the firewall
2. Occupies more layers than just tcp
3. Saturates the SQL server as well
4. Causes the php script to use resources too
TCP alone wouldn't show up as guest accounts so whatever came in was https but idk from where as I'm not the one with access to the logs.
mylifeistrash said:You asked if it was a DDOS. A DDOS is typicaly just flooding TCP.
I did not suggest this was a DDOS nor did I suggest it was TCP only.
Regardless all TCP requests on port 80/433 are not HTTP requests. You need to send request headers for nginx to process a request.
Never make assumptions.[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]An [font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]application layer DDoS attack[/font](sometimes referred to as [font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]layer 7 DDoS attack[/font]) is a form of DDoS attack where attackers target the [font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]application layer[/font] of the [font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]OSI model[/font].[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][10][/font][font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][11][/font] The attack over-exercises specific functions or features of a website with the intention to disable those functions or features. This application-layer attack is different from an entire network attack, and is often used against financial institutions to distract IT and security personnel from security breaches.[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][12][/font] As of 2013, application layer DDoS attacks represent 20% of all DDoS attacks.[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][13][/font]According to research by the company Akamai, there have been "51 percent more application layer attacks" from Q4 2013 to Q4 2014 and "16 percent more" from Q3 2014 over Q4 2014.[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][14][/font] In November 2017; Junade Ali, a Computer Scientist at [font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif]Cloudflare[/font] noted that whilst network-level attacks continue to be of high capacity, they are occurring less frequently. Ali further notes that although network-level attacks are becoming less frequent, data from Cloudflare demonstrates that application-layer attacks are still showing no sign of slowing down.[font='Helvetica Neue', Helvetica, 'Nimbus Sans L', Arial, 'Liberation Sans', sans-serif][15][/font][/font]
mylifeistrash said:all of this could be fixed in 3 lines of "code" in nginx.conf