Skip to main content
 

Did someone say DNS DDoS Attack? Remembering PharmaMaster vs Blue Security, 2006

1 min read

Did someone say DNS DDoS Attack? Remembering PharmaMaster vs Blue Security, 2006

Yeah, I was there... Back in May of 2006 Typepad, LiveJournal and TuCows got taken down by a massive (at the time) DDoS. I recall it was 2-4 GBps of reflective DNS traffic. Scott Berinato covered it pretty well in the Wired article Attack of the Bots[1].

For the record we were able to get back up using Akamai DNS Hosting, MCI/UUNet DDoS mitigations, and a cleverly placed GRE tunnel. Oh and a bunch of great Ops work from Lisa Phillips , Matt Peterson, Peter Wohlers  and others. I think I still have the commemorative t-shirt we did with TuCows.

And here we are 10 years later. Same stuff, yet in many ways worse.

It's high time we get to fixing the underlying protocols and infrastructure to make these types of attacks a thing of the past. It's time to Redecentralize[2].

[1] https://www.wired.com/2006/11/botnet/

[2] https://www.decentralizedweb.net/

 

Did someone say DNS DDoS Attack? Remembering PharmaMaster vs Blue Security, 2006

1 min read

Blue Security Graph

Yeah, I was there... Back in May of 2006 Typepad, LiveJournal and TuCows got taken down by a massive (at the time) DDoS.  I recall it was 2-4 GBps of reflective DNS traffic.  Scott Berinato covered it pretty well in the Wired article Attack of the Bots.

For the record we were able to get back up using Akamai DNS Hosting, MCI/UUNet DDoS mitigations, and a cleverly placed GRE tunnel.  Oh and a bunch of great Ops work from Lisa Phillips, Matt Peterson, Peter Wohlers and others.  I think I still have the commemorative t-shirt we did with TuCows.

And here we are 10 years later.  Same stuff, yet in many ways worse.

It's high time we get to fixing the underlying protocols and infrastructure to make these types of attacks a thing of the past.  It's time to Redecentralize.

 [Fancy graph from: Netcraft, Blue Security Shuts Down, Citing DDoS Attacks]

 

 

I call mine my "Macbook-C"  Seriously awesome hardware.

1 min read

I call mine my "Macbook-C"  Seriously awesome hardware.

Originally shared by Google Chrome

Introducing the HP Chromebook 11, designed and built in partnership with our friends at HP. It has all the speed, simplicity and security benefits you've come to expect from a Chromebook, with unique design elements that makes it easier to get stuff done. And all for $279. 

Look for it starting today in the US at Best Buy , Amazon.com and Google Play and in the UK at Currys, PC World and more. It will also be coming to other countries in time for the holidays.  

Find out more on the Chrome blog: http://goo.gl/tzyHvs

 

 

Would people be interested in a periodic hangout where me and my weekly Google guest makeover your web site with...

1 min read

Would people be interested in a periodic hangout where me and my weekly Google guest makeover your web site with Googley features? We'd have a special guest each time and go over things like authorship markup, security, performance, APIs, widgets etc?

+1 this post if you're interested. Feel free to nominate your favorite site you'd like me to put under the microscope in the comments...

[nifty CC BY-NC-SA 2.0 photo from flickr user spike55151]

 

Privacy International - Fools

1 min read

I see that Hi5 made the list of Privacy International as posing a substantial threat to users' privacy.  I find that their methodology is extremely suspect.  I can't spot any consistency in the way they treat sites.


These guys dinged us because our point of contact for Privacy is our legal counsel.  He is, but he's also the guy calling Malaysia at 3AM to get phishing sites shut down.  We do a lot around here.

Also, these guys claim they had a pop-up advertisement show up when they clicked on the privacy page.  I know for a fact that this is not possible.  No advertising code is used on those pages, never has, never will.  These idiots must have had some kind of malware installed to cause that to occur.

In any case, we'll let Google and them fight it out.  We don't need validation from some poor excuse for a privacy group.  We protect our users and give them the tools to protect their privacy.