Bitcoin Forum

Other => Meta => Topic started by: Joel_Jantsen on October 29, 2016, 06:42:38 PM



Title: Another DDOS ?
Post by: Joel_Jantsen on October 29, 2016, 06:42:38 PM
I wasn't able to login for almost 30 minutes.First connection timed out error,later SMF unable to connect to the database followed by forum's please post about it in meta message.If it was ddos,was the ransom asked ?


Title: Re: Another DDOS ?
Post by: theymos on October 29, 2016, 07:05:37 PM
I think that it was/is some sort of upstream networking failure. I'm still seeing an above-normal level of packet loss, but it seems usable now at least. I'll keep an eye on it.


Title: Re: Another DDOS ?
Post by: crairezx20 on October 29, 2016, 07:43:07 PM
I can't browse in this forum if i'm use vpn or proxy.. always error or error access this site.. any problem about the site admin.?
Or this is just the effect of price increase?


Title: Re: Another DDOS ?
Post by: mixan on October 29, 2016, 09:02:30 PM
Noticed the down time too. Knew it was something access to the site. It was 30 minutes but thought it was longer because I was away for 4 hours.
Have to be concerned about account details being leaked this time again?


Title: Re: Another DDOS ?
Post by: actmyname on October 29, 2016, 11:10:26 PM
As far as I can tell, the connection is still spotty but relatively stable at this point - there were some short disconnects, but for the most part the connection troubles have settled down.

Have to be concerned about account details being leaked this time again?

Probably not.


Title: Re: Another DDOS ?
Post by: monbux on October 29, 2016, 11:15:57 PM
As far as I can tell, the connection is still spotty but relatively stable at this point - there were some short disconnects, but for the most part the connection troubles have settled down.

Have to be concerned about account details being leaked this time again?

Probably not.
It's pretty spotty for me right now.  I'm getting the "This site can't be reached, bitcointalk.org took too long to respond" or something like that.
Been happening on and off for the past hour


Title: Re: Another DDOS ?
Post by: U2 on October 29, 2016, 11:24:36 PM
I keep getting a lot of errors. I think it's active at this point. I was about to make a thread but saw this one and the fact that Theymos has already said he's looking into it just means they're trying to fix the issue (obviously ;))


Title: Re: Another DDOS ?
Post by: botany on October 30, 2016, 02:05:33 AM
As far as I can tell, the connection is still spotty but relatively stable at this point - there were some short disconnects, but for the most part the connection troubles have settled down.

Have to be concerned about account details being leaked this time again?

Probably not.
It's pretty spotty for me right now.  I'm getting the "This site can't be reached, bitcointalk.org took too long to respond" or something like that.
Been happening on and off for the past hour

It has been patchy for the last two hours for me.
Seems to be settling down now.


Title: Re: Another DDOS ?
Post by: theymos on October 30, 2016, 02:07:52 AM
I just changed something, post here if it seems to have helped or not.


Title: Re: Another DDOS ?
Post by: botany on October 30, 2016, 02:15:23 AM
I just changed something, post here if it seems to have helped or not.

Forum seems to be functioning normally for the last 15 minutes or so.


Title: Re: Another DDOS ?
Post by: monbux on October 30, 2016, 02:15:45 AM
I just changed something, post here if it seems to have helped or not.
Seems to be working normally now, thanks!


Title: Re: Another DDOS ?
Post by: jaceefrost on October 30, 2016, 02:43:42 AM
I was not able to log in for a while ago but everything seem to be working fine now. I'm no longer receiving a connecting error.


Title: Re: Another DDOS ?
Post by: The Sceptical Chymist on October 30, 2016, 02:54:13 AM
I was getting all the errors mentioned above for about an hour or so.  Right now it's working just fine.  I spend too much time on the forum whilst I'm at work anyway.  Happy Halloween, all.


Title: Re: Another DDOS ?
Post by: eaLiTy on October 30, 2016, 05:50:30 AM
I was not able to log in for the past several hours and it is working fine now ,hope everything is resolved and if there was any hack,admins n mods pls send a mass SMS regarding changing the password.


Title: Re: Another DDOS ?
Post by: OmegaStarScream on October 30, 2016, 06:09:45 AM
I think that it was/is some sort of upstream networking failure. I'm still seeing an above-normal level of packet loss, but it seems usable now at least. I'll keep an eye on it.

I'm not sure If this helps you out or not but while trying to access the forums when It was down, I got different types of error messages :

1. The usual that probably most of people received (Server is not responding , connection timed out)
2. an SSL error about the connection not being secure (which is the one I'm mostly worried about) , I didn't keep a screenshot but Firefox was linking me to this https://support.mozilla.org/en-US/kb/what-does-your-connection-is-not-secure-mean (I didn't receive the error message as the first screenshot)
3. I also received this at some point and I guess the path shown here is from my PC but not sure what caused it :

https://i.imgur.com/9x2AXZ0.png


Title: Re: Another DDOS ?
Post by: TriggerX on October 30, 2016, 06:14:25 AM
Not sure what happened. I couldn't log in early this afternoon and yesterday at around 6pm PST. The website itself is still kinda flaky as I've been having trouble logging in just a couple of minutes ago.


Title: Re: Another DDOS ?
Post by: Wei H on October 30, 2016, 06:24:15 AM
The forum is unstable for the last 24 hours but it back online now, with a new IP (54.221.201.137, some might use it for hosts file).


Title: Re: Another DDOS ?
Post by: BitMaxz on October 30, 2016, 10:07:38 AM
I thought that i have some problem in my internet but now its working fine for me.. I just clear all history and cache in my browser. for those who still halving problem clearing cache and cookies may help..


Title: Re: Another DDOS ?
Post by: crairezx20 on October 30, 2016, 11:38:02 AM
Halving problem again using vpn i just disable it again to login in this forum and i think the issue still not fix or this is hosting problem  for this forum..
Admin please check..


Title: Re: Another DDOS ?
Post by: pereira4 on October 30, 2016, 12:28:26 PM
I can confirm right now that the forum is insanely slow. I use TOR Browser in order to browse this forum at work because they have it blocked with a firewall or something, so it makes it even slower. I tried with a VPN, it's more usable but I dont like to pay for a VPN. Tor was working just fine until today which became super slow. Please help.


Title: Re: Another DDOS ?
Post by: shorena on October 30, 2016, 01:38:30 PM
Its very unstable, my attempts to post this started at 1422, its now 1438.

When its working, its working fine though. When not its just time out after time out.


Title: Re: Another DDOS ?
Post by: btcdevil on October 30, 2016, 01:55:20 PM
for the last some days i was also feeling same of getting login very late and in between the site is just hanged up and i have to refresh the page but still i was not able to login for some time. after that it is working fine, i thought that my internet or computer was having problem but after seeing this thread now i got to know that the site got some problem.

Hope that all problems are sorted out.


Title: Re: Another DDOS ?
Post by: redsn0w on October 30, 2016, 02:04:41 PM
Again down, at the moment it's really slow.


Title: Re: Another DDOS ?
Post by: 27QVUTZj8rgZP1 on October 30, 2016, 02:26:31 PM
I'm noticing connection problems since yesterday. And it is still happening.

I dislike when this happens.  :(


Title: Re: Another DDOS ?
Post by: Shiroslullaby on October 30, 2016, 02:38:37 PM
Just got a message that my session token was invalid, please log out and log back in again.
Was able to sign out and sign back in but site is still lagging randomly.


Title: Re: Another DDOS ?
Post by: Lauda on October 30, 2016, 02:51:39 PM
Just got a message that my session token was invalid, please log out and log back in again.
Was able to sign out and sign back in but site is still lagging randomly.
This happened to me while I was trying to delete some posts. However, there was no need to actually log out and log back in. A simple refresh and secondary attempt fixed it.

It keeps becoming inaccessible from time to time here as well.


Title: Re: Another DDOS ?
Post by: gamerfan on October 30, 2016, 03:19:47 PM
It's very unstable since yesterday morning. Some subforums seems slower than others.


Title: Re: Another DDOS ?
Post by: crairezx20 on October 30, 2016, 03:24:25 PM
I can confirm right now that the forum is insanely slow. I use TOR Browser in order to browse this forum at work because they have it blocked with a firewall or something, so it makes it even slower. I tried with a VPN, it's more usable but I dont like to pay for a VPN. Tor was working just fine until today which became super slow. Please help.
How vpn works to you? what vpn you use.. honestly mine is not working i am using flyvpn.. and i am still halving issue even a normal browsing without proxy or vpn.. just like now i just reloading until the page load successful sometime time out or error. .


Title: Re: Another DDOS ?
Post by: theymos on October 30, 2016, 04:32:43 PM
Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.


Title: Re: Another DDOS ?
Post by: BAGOBO on October 30, 2016, 04:34:40 PM
Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.

I was not able to access the site half hour ago also the site loading very slow


Title: Re: Another DDOS ?
Post by: U2 on October 30, 2016, 04:41:14 PM
Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.

Thank Theymos. It's not like yesterday where eventually if you kept trying you could get through. It just took me half an hour to get on but now it seems to be working perfectly.


Title: Re: Another DDOS ?
Post by: pereira4 on October 30, 2016, 04:46:09 PM
I can confirm right now that the forum is insanely slow. I use TOR Browser in order to browse this forum at work because they have it blocked with a firewall or something, so it makes it even slower. I tried with a VPN, it's more usable but I dont like to pay for a VPN. Tor was working just fine until today which became super slow. Please help.
How vpn works to you? what vpn you use.. honestly mine is not working i am using flyvpn.. and i am still halving issue even a normal browsing without proxy or vpn.. just like now i just reloading until the page load successful sometime time out or error. .

I have used various, one of the is PIA (private internet access). AirVPN is also decent. Go to reddit, there are VPN reddits and people will help you to choose one, but if you don't want to spend any money, Tor does a good job in this forum (except during this DDos which is sooo slow)


Title: Re: Another DDOS ?
Post by: unamis76 on October 30, 2016, 05:11:17 PM
Only checked the forum now, couldn't access for the last 12+ hours, more or less. Curious thing is the beta forum was available meanwhile... Thanks to theymos for the hard work getting this back up.


Title: Re: Another DDOS ?
Post by: amacar2 on October 30, 2016, 05:16:07 PM
Finally forum now seem to be fine and working properly after around 24 hour of unexpected downtime. Hope there will be no another similar downtime soon.


Title: Re: Another DDOS ?
Post by: InvoKing on October 30, 2016, 05:17:55 PM
Only checked the forum now, couldn't access for the last 12+ hours, more or less.

For me i couldn't connect from ~ 6 hours and i checked it several times.
The curious thing when i Google down for me or? 2 or 3 sites said that it is only me while another one failed to connect also here.
For the moment I can connect but it is a little bit slower


Title: Re: Another DDOS ?
Post by: majorX on October 30, 2016, 07:30:40 PM
I experienced that inability to log into the forum from about 1PM GMT to 3 PM. I seems to be back now. Did we had confirmation that ur is a DDoS ?


Title: Re: Another DDOS ?
Post by: veleten on October 30, 2016, 10:52:20 PM
the forum is real sluggish for me
with occasional refresh errors
it has been like that since months,guess there is a lvl 4 DDOS going on at particular times every day
maybe staff members could give better explanation to what is going on
 


Title: Re: Another DDOS ?
Post by: theymos on October 31, 2016, 12:18:35 AM
I thought for a while that it was just some sort of upstream congestion, but I've found that it is a very large UDP flood that is causing issues despite being blocked outside of the server. I will find some way of mitigating it.


Title: Re: Another DDOS ?
Post by: Gleb Gamow on October 31, 2016, 12:51:32 AM
I thought for a while that it was just some sort of upstream congestion, but I've found that it is a very large UDP flood that is causing issues despite being blocked outside of the server. I will find some way of mitigating it.

theymos, just wanted to let you know that using UDP for denial-of-service attacks is not as straightforward as with the Transmission Control Protocol (TCP). <either I became a genius overnight or I've been Googlin' my ass off again - your call>


Title: Re: Another DDOS ?
Post by: abhishek.g on October 31, 2016, 12:52:18 AM
I have been using bitcointalk most of the time these days and I am feeling the same that it is being slow time and again and another possible ddos might have hit the forum . Another thing I have observed is that the value of the bitcoin gets low when forum gets a ddos attack , which can be exploited for commercial values as well . Its just a guess however and I welcome the suggestions of the folks around here .


Title: Re: Another DDOS ?
Post by: ethereumhunter on October 31, 2016, 06:32:13 AM
from last night until half hour ago, i can not login nor browse anything on here but for now, i think it will be good like before and i really hope that it will not because another DDOS.

i think we search from where IP that sending big large data to here and scan it so we can know who the attacker and maybe the attacker is jelous with bitcoin which getting big now.


Title: Re: Another DDOS ?
Post by: DimensionZ on October 31, 2016, 07:19:15 AM
Hey guys, I have been off the forum for quite some time due to being busy with personal matters but now I am back. I have been trying to browse the forum since yesterday but it seems to be on and off all the time. Does anyone know what's going on with the hosting? And I am wondering if these issues only affect people from certain countries or is this a global problem with connecting to the forum?


Title: Re: Another DDOS ?
Post by: apoorvlathey on October 31, 2016, 07:30:42 AM
The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :

https://i.imgur.com/hT1KsJO.png

Hope it gets posted


Title: Re: Another DDOS ?
Post by: kenscho on October 31, 2016, 08:09:46 AM
The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :

https://i.imgur.com/hT1KsJO.png

Hope it gets posted

maybe another ddos


Title: Re: Another DDOS ?
Post by: x4 on October 31, 2016, 08:11:31 AM
I guess I only experiencing this issue, I can't browse or its too hard to browse here in forum but I can access any site only the forum. So I really tried to go here in meta but only this time, and see that everybody experienced also this issue and I hope that this will be solve as soon as possible.


Title: Re: Another DDOS ?
Post by: pooya87 on October 31, 2016, 08:53:28 AM
The connection is still not perfectly reliable. The forum frequently can't be reached.
Also I have noticed that when the site is down, the favicon is also changed :

https://i.imgur.com/hT1KsJO.png

Hope it gets posted

the icon thingy is a new feature in Google Chrome new version.
the icon is not changed but instead it is grayed out which happens for websites that can not be reached but has an icon probably saved on your cash.

p.s. I have been getting TIME_OUT a lot since yesterday!


Title: Re: Another DDOS ?
Post by: Wendigo on October 31, 2016, 09:33:10 AM
Apparently using a VPN can fix the connection issues. I assume some areas have Bitcointalk blocked out for some reason. Is this due to a new hosting service or on purpose?


Title: Re: Another DDOS ?
Post by: redsn0w on October 31, 2016, 09:33:25 AM
theymos,

can I ask you what's the reason why you're not using cloudflare or something like that (firstly to hide the ip of the server)?


The new IP should be:

Code:
redsn0w$ ping bitcointalk.org
PING bitcointalk.org (75.101.130.65): 56 data bytes


Title: Re: Another DDOS ?
Post by: superiorus on October 31, 2016, 10:17:49 AM
Apparently using a VPN can fix the connection issues. I assume some areas have Bitcointalk blocked out for some reason. Is this due to a new hosting service or on purpose?

It does not fix the coonections issues.
In the last 2 days the forum was offline many times ...
If there is a DDOS: I don't understand: why to DDOS a forum?  What is the benefit?  There are no hideen coins in here (except those from theymos pocket)  :)


Title: Re: Another DDOS ?
Post by: 1Referee on October 31, 2016, 10:47:39 AM
In the last 2 days the forum was offline many times ...

Yes, it's very annoying but there is nothing that we can do. I only make sure that before I post something, I copy it to avoid having to type everything from scratch again as the page turns either blank, or shows an error.

If there is a DDOS: I don't understand: why to DDOS a forum?  What is the benefit?  There are no hideen coins in here (except those from theymos pocket)  :)

The guys behind this DDoS attack either want to piss off people here by keeping the site offline or very slow for a long time, or this DDoS attack is just some sort of distraction attempt as they are out for something else.


Title: Re: Another DDOS ?
Post by: btvGainer on October 31, 2016, 10:53:12 AM
Can't something be done to prevent DDos?I saw some sites using DDoS protection by CloudFlare https://www.cloudflare.com/5xx-error-landing?utm_source=iuam to preventt his,can same be implented on this sorum?It is really very annoying when you make a long post and at the time of posting you couldn't connect to forum and lose all your reply https://www.cloudflare.com/5xx-error-landing?utm_source=iuam


Title: Re: Another DDOS ?
Post by: pereira4 on October 31, 2016, 11:54:53 AM
I was able to browse the forum last night without many problems again, but right now it's acting weird again, it takes a couple of F5 (refreshing) until the page shows up, so I guess the problem is still not fully solved.


Title: Re: Another DDOS ?
Post by: superiorus on October 31, 2016, 12:06:41 PM
Quote
Yes, it's very annoying but there is nothing that we can do. I only make sure that before I post something, I copy it to avoid having to type everything from scratch again as the page turns either blank, or shows an error.
I learned that lesson too ;)
I press the "back" button and save the text.


Title: Re: Another DDOS ?
Post by: FrilledShark on October 31, 2016, 12:11:53 PM
Theymos has never stated is was a DDoS. If you read the other pages, you would know that.

Hm, it looked to me like some sort of upstream networking failure, but now it happened again on a different IP, so maybe it is a difficult-to-detect DDoS. I'll continue to investigate.
Edit: Sorry, it is an DDoS.

If it is a DDoS and you want to suggest Cloudflare, you should read his post here:

[...]
I'm not going to use Cloudflare for bitcointalk.org. Cloudflare is a massive central point of failure to the Internet. Tons of sites (including most large Bitcoin sites) use it. Additionally, in most cases Cloudflare can undetectably read any encrypted traffic passing through their service because they have the site's HTTPS key. Even if you use their keyless HTTPS feature, they can still read your traffic (though this is detectable with something like Certificate Patrol) because they have an agreement with a CA which allows them to issue whatever certificates they want (they are essentially a CA). Also, I've heard that Cloudflare is not especially effective at stopping many types of DDoS attack.

Instead, I purchased DDoS protection that works at a lower level. After filtering, it sends user TCP traffic to the forum's server verbatim. This eliminates the need for giving up the forum's HTTPS key. It seems to be effective at stopping this attacker's traffic, but it may be introducing some periodic downtime/slowness/latency. We're still looking into it. DDoS protection services (even the most expensive ones) are notorious for often being useless, shady, or unreliable, so who knows whether this service or any future ones I may try will end up working out... Unfortunately, the Internet is just particularly weak to DDoS attacks, and there are no great solutions available.


Title: Re: Another DDOS ?
Post by: apoorvlathey on October 31, 2016, 01:41:28 PM
Theymos has never stated is was a DDoS. If you read the other pages, you would know that.
~snip~
An official announcement has been made on the forum's twitter page by theymos :

Quote
DDoS attack
it was posted 14h ago.


Title: Re: Another DDOS ?
Post by: mrcash02 on October 31, 2016, 03:37:56 PM
Theymos has never stated is was a DDoS. If you read the other pages, you would know that.
~snip~
An official announcement has been made on the forum's twitter page by theymos :

Quote
DDoS attack
it was posted 14h ago.

It's happen for me since two days ago. It's very boring, I didn't know if it was happening only here, but now I see it's general.

I hope they fix it soon or increase the protection against this kind of attack.


Title: Re: Another DDOS ?
Post by: theymos on October 31, 2016, 04:57:03 PM
I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.


Title: Re: Another DDOS ?
Post by: superiorus on October 31, 2016, 06:21:27 PM

Quote
As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

I don't like Cloudflare too (too expensive and they can't manage/deny those attacks.
But there are other good alternatives:   Incapsula (a good one), Keycdn, Maxcdn, etc.


Title: Re: Another DDOS ?
Post by: theymos on October 31, 2016, 07:26:49 PM
I changed something which may block the UDP flood. We'll see.

Email is probably broken again for most people. Note that the email is being sent, but your email provider is blocking it -- whenever I change IP addresses, I have to take a bunch of steps to make the IP look more "clean" for email purposes. I will fix this in a few days.


Title: Re: Another DDOS ?
Post by: crairezx20 on October 31, 2016, 07:29:03 PM
I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.
Thanks admin for update this solution is for temporary since we are still browse inside of this forum.. the timeout and error everr minute is happening to me and i think the hacker who was DDOS attack this forum i hope they will be caught..
This attack is always happen when the price is increase just like before ..



Title: Re: Another DDOS ?
Post by: BitMaxz on October 31, 2016, 07:32:45 PM
I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.
This method is not working to me when i was log in few hours ago.. but right now its working again.
I hope that theymos can solve this issue..

I changed something which may block the UDP flood. We'll see.

Email is probably broken again for most people. Note that the email is being sent, but your email provider is blocking it -- whenever I change IP addresses, I have to take a bunch of steps to make the IP look more "clean" for email purposes. I will fix this in a few days.
I think keep this settings for now so that we can stay long in this forum.. and fix the other problem in another day..


Title: Re: Another DDOS ?
Post by: rikudou on October 31, 2016, 07:33:06 PM
For half a day, do not provide access to the Forum.  >:(


Title: Re: Another DDOS ?
Post by: BitcoinSupremo on October 31, 2016, 07:54:38 PM
For half a day, do not provide access to the Forum.  >:(

What is important is that theymos did a great job in bringing the site up after the DDOS. Unfortunately hackers hate this site and DDOS flood is been common in this year 2016 which I have been part of this forum. I remember since January, February, April , May and now we had a few of these but theymos managed to always be on top. It's a great feeling when we know we have a really great admin.


Title: Re: Another DDOS ?
Post by: Scaccomatt0 on October 31, 2016, 08:09:57 PM
thanks theymos  for the update and the great works for mitigating the DDoS


Title: Re: Another DDOS ?
Post by: Spoetnik on October 31, 2016, 08:15:01 PM

Quote
As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

I don't like Cloudflare too (too expensive and they can't manage/deny those attacks.
But there are other good alternatives:   Incapsula (a good one), Keycdn, Maxcdn, etc.

Incapsula ? I recall clearly Cryptsy getting DDOS'd with them.

And i agree with the Cloudflare reasoning from theymos.
Yesterday i was glad to see some kind of message on Twitter too.


Title: Re: Another DDOS ?
Post by: mrcash02 on October 31, 2016, 08:34:07 PM
Forum is working fine now, no lag and no error messages.

But now I can't access Yobit. Same kind of problem. It's happening with many sites I believe. I can't open Yobit exchange and the icon is gray.  :(
What do sites can do to stop this issue?


Title: Re: Another DDOS ?
Post by: zuggu-1 on October 31, 2016, 08:44:52 PM
Forum seems to be working normally now, thanks!  :D


Title: Re: Another DDOS ?
Post by: Magisterek on October 31, 2016, 09:24:04 PM
Uff, i have problem with connection not only one time... maybe its ending now.

At nigh (utc+01.00 warsaw time)


Title: Re: Another DDOS ?
Post by: RHavar on October 31, 2016, 10:05:16 PM
As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

I share your concerns about them being a centralized man-in-the-middle, however I don't think the other stuff is too accurate.

I'm not aware of any attack that has ever been too big for cloudflare, or customer they've dropped because of large attacks. I know they've certainly stood in front of my site for some attacks that other providers couldn't close to handle.

Also they've done a *lot* of work on the tor problem, and even allow you to special access rules for tor users if you want them (and the deluge of abuse that comes with it). It's honestly not cloudflare's fault that the vast majority of tor traffic is malicious (they blogged that it's 94%), they simply wouldn't be doing their jobs if they gave it a free pass because it was tor. And they're doing some pretty cool stuff like working on blinded captcha tokens so tor users won't need to re-enter the captcha at each site, while preserving privacy etc.


(FWIW, I'm no cloudflare shill and think it's great that bitcointalk doesn't use them. I really worry about them being the biggest intelligence honeypot in existence, with all this encrypted traffic neatly decrypted for them. But you have to give them credit, they're a damn good service)


Title: Re: Another DDOS ?
Post by: LFC_Bitcoin on October 31, 2016, 10:20:17 PM
Shame that this continues to happen but there will slways be people or organisations trying to fuck up others lives & happiness. Tech gifted people will always find a way to do it online.

I hope the worst of it is finally over for this attack any way. 


Title: Re: Another DDOS ?
Post by: LTU_btc on October 31, 2016, 11:33:45 PM
It's still almost impossible to use forum. It's only possible to load forum in very short intervals. After few minutes it goes down again. To made this post I had to make many attempts. But we can see one positive thing: these days less spam was mad by signature campaign spammers :D (sarcasm)


Title: Re: Another DDOS ?
Post by: theymos on November 01, 2016, 01:02:29 AM
The most recent 504s were due to an accidental misconfiguration I made. I'm tentatively hoping that my countermeasures were in fact successful against the DDoS.


Title: Re: Another DDOS ?
Post by: Gleb Gamow on November 01, 2016, 01:44:59 AM
The most recent 504s were due to an accidental misconfiguration I made. I'm tentatively hoping that my countermeasures were in fact successful against the DDoS.

https://i.imgur.com/eFiaXJ1.jpg

Great! That's a relief knowing it's just a misconfiguration for my 504s no longer fitting oppose to thinking that I gained excess weight while eating Spoetnik's munchies while awaiting BCT to come back online. That said, I nominate theymos for ... for ... for ... let me get back to you on that.  :P


Title: Re: Another DDOS ?
Post by: veleten on November 01, 2016, 02:27:15 AM
it is much better for me today,usually at this time of day I struggle to open more than 10 pages of bitcointalk without getting an error
and I don't use VPN and on a quality 100 mb line


Title: Re: Another DDOS ?
Post by: eaLiTy on November 01, 2016, 02:42:51 AM
The most recent 504s were due to an accidental misconfiguration I made. I'm tentatively hoping that my countermeasures were in fact successful against the DDoS.


its working fine now and hope there wont be any issues was getting the 504 error for quite some time and since you said to refresh ,i was doing that for some time until i got pissed  ;D

Quote
@theymos: press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.


Title: Re: Another DDOS ?
Post by: pereira4 on November 01, 2016, 11:49:33 AM
I have some ideas for how to mitigate the DDoS, but I might not finish it today.

As someone mentioned earlier, I don't want to use Cloudflare because Cloudflare can see/modify all encrypted traffic, they are a massive central point of failure on the Internet, IMO they probably assist and are supported by the NSA, they only protect against fairly small-scale attacks, and they really make life difficult for Tor users.

The UDP flood is causing high packet loss. What this will look like when browsing the forum is:
 - When you first connect to the forum after not browsing any pages for a while, it might be especially slow, and it might time out. After it completely fails / times out, just keep trying. It will eventually work.
 - After you first connect, browsing should be much smoother because at this point you'll already have a TCP connection open, though it might be a bit slow, and occasionally a page might time out.
 - If the page times out while posting, press the refresh button in your browser and accept any warning it gives you. Keep trying until it goes through.

I guess that's why browsing with Tor was an horrible experience yesterday, since Tor constantly changes IP and doesn't save any data of the websites it was like starting from scratch all the time.

Im using Tor right now and I can confirm that the forum is smooth again, let's hope it lasts.


Title: Re: Another DDOS ?
Post by: LLec on November 01, 2016, 04:20:36 PM
I noticed it is loading fast now when just 12 hours ago could not load up the page for the life of me.
It seems that it just took time of the configurations done and the adjustments to work it's way down the line.


Title: Re: Another DDOS ?
Post by: deisik on November 01, 2016, 05:04:49 PM
I wasn't able to login for almost 30 minutes.First connection timed out error,later SMF unable to connect to the database followed by forum's please post about it in meta message.If it was ddos,was the ransom asked ?

And it coincidentally happened just when the Bitcoin price has started nearing its pre-halving highs (~$800). If this is not a coincidence (I'm curious if anyone believes it is), who might be behind these attacks? Such attacks should require a lot of resources which would obviously cost something (and not small, I guess). What might other purposes of taking down a Bitcoin forum be if not to somehow discredit (if only temporarily) Bitcoin itself?

Is fecit cui prodest


Title: Re: Another DDOS ?
Post by: Wendigo on November 01, 2016, 05:28:14 PM
The downtime of the forum eerily coincided with Halloween  :o How spooky is this? And was it just a coincidence or something from another world messed with us we will never know.....

The truth is out there, guys, the truth is out there.....

In the meantime hold onto your dear coins because the frickin' rocket is heading for the Moon  ;D



Title: Re: Another DDOS ?
Post by: deisik on November 01, 2016, 05:33:18 PM
The downtime of the forum eerily coincided with Halloween  :o How spooky is this? And was it just a coincidence or something from another world messed with us we will never know.....

The truth is out there, guys, the truth is out there...

So what are you doing here?

For half a day, do not provide access to the Forum.  >:(

What is important is that theymos did a great job in bringing the site up after the DDOS. Unfortunately hackers hate this site and DDOS flood is been common in this year 2016 which I have been part of this forum. I remember since January, February, April , May and now we had a few of these but theymos managed to always be on top. It's a great feeling when we know we have a really great admin.

Why would the hackers want to hate this forum specifically, apart from their usual hatred ("haters gonna hate")? Or, just like with anything else, there are good hackers and there are evil hackers? And since there are anti-establishment hackers (i.e. pro-Bitcoin hackers), there should also be pro-establishment hackers (i.e. anti-Bitcoin hackers)...

Not speaking of the hackers who are there just for money