Bitcoin Forum

Looks like some Russian dudes are not fond of mtgox, and based on what has been posted on this forum so far, it is difficult to exclude btcex from having something to do with it.

The decision I'm taking now is a "temporary shutdown of mtgox" until the appropriate protections against this kind of DDoS are setup here. I wasn't expecting any major DDoS so early, however I guess anarchy got back at me (maybe I should say "us" here).
For info the DDoS has started yesterday, with something really soft. It has hardened today with over 6000 connections/second at some point (I nullrouted the ip since then).

Things should be back within less than 24 hours, right for the monday trading. If anyone who understands Russian can report/translate what's being told in the Russian forums, I guess this could be interesting too.

I'll update this post as things evolve.

UPDATE May 1st 12:00 JST: I've requested a new server from a specific provider which is used to handle DDoS attacks and provide guarantees. I confirmed on phone that servers are usually up within less than 24 hours, and negociated for it to go even faster.

UPDATE May 1st 14:00 JST: DDoS strenght have subsided a bit, system is back with current protections running. Had to increase conntrack buffer and a few things, but for now it holds together. Move to a system capable to mitigate such DDoS attacks is still planned.

UPDATE May 1st 17:00 JST: DDoS suddently stopped for no visible reason. Graphs are back to normal (even lower than that since we moved a lot of things to mitigate load). Will still get ready for more anyway.

Would it be possible to bring Mt.Gox up at a scheduled time to avoid advantages to certain people due to downtime? Can we get a confirm on this being caused by the BTCex.com guy?

@Mt.Gox
I think that you should put a temporary simple page with a link to your twitter and this message you have made here.

You'll never be able to prove who is responsible for the DDoS.

Great. I sent 250btc to mtgox just before it went down. I never saw confirmation on the pages until it actually went down - was there any db loss that might cause my BTC to disappear?

edit: I see in the other thread that someone else had this problem and you assured them that theirs are safe. I guess I'll just wait then.

anisoptera, don't panic. Nothing's lost and everything will be back to normal within 24 hours.

I think the owner pretty much admitted it lol

I wasn't planning on naming anyone or even mentioning Russia, however given how things are now it makes little difference~

I'm perfectly aware of this, mostly just wanted to mention that it's the largest potential suspect so people don't flock to it.

I think he's not directly responsible, but may have mentioned publicly (in Russian) that he'd like trading to stop on mtgox, and got some "friends" who offered their help.

Interesting how this is unfolding. Following events on twitter...

Which twitter account are you referring to / following?

Just 3 days ago I started checking the prices on Mt Gox ~twice a day. Those last couple days were amazing seeing the prices jump.  :)

The Silver Lining in the Cloud

This is actually very GOOD news for the Bitcoin world.  The lunatics out there who launched this DDoS attack on MtGox have actually forced MtGox to harden its protection again such attacks...   which is a VERY VERY GOOD THING for MtGox... and thus, for all of us.

"In a minute" MtGox will be back online... stronger and more secure than ever before.

I wouldn't go so far as to "thank" those idiots who attacked MtGox...   But, in reality...   The end result will BENEFIT MtGox AND us all.

Unless they admit it it is confirmed quote from btcex admin in other post "Oh, yes, exactly, well, then I turn off my ddos and start writing p2p exchange!"

Edit: I can't believe he somehow justifies his attack on you Tux I'm glad he stopped why couldn't he think of creating a p2p exchange in the first place?  If a competitor is beating you improve your service don't napalm the competitors office then say "ok I'll stop napalming his office and try to make an alternative service instead" and expect it to be all ok.  Sorry you had to deal with this Tux.

It's the silver lining in this bad situation.

why am i seeing mtgox recent trades on bitcoincharts.com on its 1 min interval?

Because it [almost] works. I still block when loadavg goes too high, but it somehow works.

That could also lead to higher exchange fee rates  :(

bitcoincharts.com last trade  $3.57/BTC
Thanks for the tip.  :)

Edit:
From Mt Gox
Last Price: 3.6948 High:4.15 Low: 2.75 Volume: 62903

so some ppl r getting into your site while most others, like me, cannot?

yeah, least its UP

last 50 min about 2 dozen trades since stoppage

From Mt Gox
Last Price: 3.6948 High:4.15 Low: 2.75 Volume: 62903

BTC=teflon currency

Are you accessing from a public network or is your ip compromised?

you're talking to a non hacker.  explain.

If you're getting the check back in 5 minutes error that's normal still heavy trafic what error are you getting exactly?

you're talking to a non hacker.  explain.
[/quote]

If you're getting the check back in 5 minutes error that's normal still heavy trafic what error are you getting exactly?
[/quote]

actually i'm in now but was getting error "load avg still too high"  or something like that.

Yeah that's normal don't worry should be more responsive as time passes.

If you're getting the check back in 5 minutes error that's normal still heavy trafic what error are you getting exactly?
[/quote]

actually i'm in now but was getting error "load avg still too high"  or something like that.
[/quote]

way to go MagTux.  i still want instructions in my email executed right away.

everythings good in my acct so i'm happy :D :D

seems like this is a problem we'll all face.  would you mind posting what you're doing, provided it won't help btcex evade?

Can you post the list of IP so those of us who run other bitcoin-related websites can block them?

It's disappointing to know people like this have already found our community; particularly so when I use AWS and get charged per-usage

For info ddos has stopped.

I will still move activity to a more proofed server once I find one that fits all the requirements.

Yeah, I think so too. I hope that we all will benefit even from that bad event. :D

Seems like we really need a decentralized exchange.

MagicalTux, are you sure it was a DDOS? Your site was featured on the main page of hacker news for half a day, that means A LOT of traffic:

http://news.ycombinator.com/item?id=2501006

Usually it's called "slashdotting": http://en.wikipedia.org/wiki/Slashdot_effect

When bitcoin.org is featured on the HN, it's always down :)

cmon Mag, still waiting

MagicalTux runs an ISP (https://www.kalyhost.com/), and is well aware of what slashdotting is.

On IRC, MagicalTux described the type of requests made and it was clearly a DDoS (SYN flood etc).  The requests also originated overwhelmingly from Russian and Vietnamese Ips.

It seems that someone wanted to reduce the exchange rate to buy bitcoins cheaper. :-\

Yes, we do really need that. What's the point of having a p2p currency if we have to rely on centralized server to exchange it with other currencies.

We need a p2p forex market for btc. Who's up for this?

I think to an extent it's our own fault - we treat MtGox as the primary exchange for *all* currencies, though it only handles USD. During the recent rally we were calling GBP parity based on the GBP/USD rate and the MtGox USD rate: we were ignoring the GBP exchanges.

I'm tempted to mention bitcoin-otc, but that, of course is (a) an over-the-counter system, not an exchange, and (b) is also somewhat centralised (one website, one IRC server - correct me if I'm wrong). Could bitcoin-otc, or something similar, function on Diaspora? My thinking is, and I've used Diaspora for all of 30 seconds, is that we sign up to various decentralised Diaspora pods (multiple pods mean that the system can't be taken down simply by taking down one pod/server in one jurisdiction) and then create an "aspect" for trading bitcoins, and friend (I think Diaspora calls it "sharing") other bitcoin traders.

This doesn't solve the decentralised exchange issue, but does create a decentralised platform for bitcoin trading.

...or am I just providing a solution to a problem that doesn't yet exist?

It might be workable if Disapora were anywhere near ready for deployment. In my testing last month I found it far too buggy to even consider moving forward with it. And since then I've read much about Diaspora's many security issues, ironic for a system with its design goals. I'll look at it again in a few months, but for now I wouldn't base anything on it.

I think even as a Facebook-replacement it's not ready for prime-time, but I looked at it a few days ago and what is there isn't too bad. It's missing stuff that I find essential in Facebook, and the security issues you raise would be a real worry. I suspect, though, that like most open-source projects the security side of things will be addressed quite quickly.

I'm not suggesting we move bitcoin-otc wholesale to Diaspora right now, just that it's something worth considering and planning for. I've been thinking a wee bit more about it, and wondering where trades would take place. My thought was that trades could be advertised on Diaspora ("wanting to buy BTC, sell USD 500" or "wanting to buy EUR, sell BTC 1000 @ EUR2.25/BTC") and then negotiating (what happens now on IRC) could take place via PMs. Right now, however, there's no group facility on Diaspora, so everyone would need to friend ("share") with everyone else. That's a deal-breaker for me. I also can't see a way to get the web of trust integrated with Diaspora, but WOT isn't something I'm that familiar with anyway.

check out Ubitex, Cuddlefish's project

Hmm, interesting. Not quite the same though: there's nothing to suggest it's decentralised at the server level, so in that respect it sounds quite similar to bitcoin-otc except that trades take place locally. At the moment with bitcoin-otc I can trade with anyone who can access a UK bank account.

My concern isn't about availability of OTC trades, it's more about the centralised nature of bitcoin-otc.

Edit: Thread on Ubitex (http://bitcointalk.org/index.php?topic=6584.msg96284#msg96284).

At the moment, something like Diaspora is in my medium-range plans, and I've already begun researching alternatives. Some things already exist that might be usable, but as I'm half asleep right now and desperately need to go to bed, it'll have to wait.

no, they are going to move the exchange to Tor/I2P

Ah, got it - that'll teach me just to read the first post :-) I'll check it out fully tomorrow (obviously should have done today...) but a quick summary or URL to the relevant message would help - is the "same location" thing set in stone, or will trades with remote parties be possible? I quite like remote, bank-to-bank trading. I somehow suspect there are very few bitcoiners in my town, based on the bitcoin map and local attitudes...

Is MtGox still under DDOS attack? I am unable to access it.

....is this serious?

The website reads: Loadavg too high due to ddos, please retry in ~5 min

What do u think?

IPs blocked so far:
http://paste.pocoo.org/show/381851/

Instead of blocking those you find, try a proactive solution.  There are a number of lists here that may help you out.  Known attach ranges, etc.  Look around and use the appropriate lists... it may be of some help.

http://www.iblocklist.com/

Is CloudFlare  (http://www.cloudflare.com/)an option for MtGox?

Wouldn't try anything with the word "cloud" in it

I know what you're saying. The whole cloud thing is a BS sales pitch. I just had to deal with a hosting company that advertised a "never offline" yet a bunch of sites went off line anyway. They claimed their failover failed and blah blah blah.

However, I have been using Cloudflare and haven't had too many problems with them. They block alot of known spam IPs and allow you to block things yourself.

EDIT: Futhermore, they don't get your server IP directly by visiting it. They would be DDoSing Cloudflare's servers. Not yours.

You cannot fight a DDOS manually.
I suggest you move your site to a DDOS protected hosting ASAP.
http://www.blockdos.net or similar (not affiliated)

It's already in progress, server setup is done and testing is in progress

Keep up the good work tux, moving to a service that claims to be protected against DDOS. I'd of not expected it either.

Would it not be more wise to transit MTGox across multiple servers and ISPs. Having it running for example on SLICEHOST/Amazon in silent then on times where under DDOS attack or Physical prevention, the exchange can throttle up the "cloud" hosting.

The bitcoin community puts great responsibility on your toes it seems.

Amazon has a Tokyo data center, but as a US company they are vulnerable to attacks by the US government.

Have you considered (temporarily) blocking entire countries?

Blocking an entire country won't do much... if the attack is larger than your uplink speed, you can block it with iptables or whatever all you want. It won't have any effect. ISPs that specifically offer DDoS protection have specialized (and very expensive) DDoS mitigation appliances that filter out the traffic before it even hits the box.

Dang!  That's even longer than my Minecraft ban list!

No wonder we are running out of static IPv4 IPs when so many of them are used for something like this.

installing new server, stuff will be back shortly~

Okay, I hope that we will overcome DDoS!

I have an idea for distributed p2p trading with mtgox as backend. This will require modifying bitcoind server and add extra traffic in our p2p network. I think this can work, please have a look:

- whenever you want to trade you fire up a bitcoind on your PC and connect to localhost,
- bitcoind in p2p traffic is exchanging information about asks/bids (alongside of the block information)
- this information is encrypted with a public mtgox key
- some random/unknown node (impossible to locate), with changing IP is a real mtgox node which has private mtgox key, this is the mtgox node which can perform the transaction and make them really happen
- whenever you place ask/bid it is propagated through the p2p network
- whenever a transaction is made, the mtgox node authorises it with its private key and propagates the transaction to p2p network
- whenever mtgox node gets ddosed it simply changes IP

- for example after starting bitcoind you will just connect to http://localhost:1234 and are presented with basic web interface for trading:
+ you can login with your mtgox credentials (which are beforehand distributed in whole p2p network in encrypted form, confirmed with mtgox private key),
+ you can create a new account on mtgox server and this request as soon as will reach mtgox node will be processed
+ and all other functionality of mtgox.

If done right, with public/private mtgox key pairs it should be impossible to break, and impossible to ddos.

In fact this interface can be used for ALL exchange sites, it's just each of them will be using a different private/public key pairs.

Trading will be as fast as it needs to distribute new transaction in whole p2p network.

how do you think?

Umm,,how about no. We all know mtgox is da shit and all but I for one do not want mtgox to be given a virtual monopoly or elevated to some holier than holy status. No extra traffic, no modification of bitcoind. What we really need is more exchanges like mtgox!

I think that this interface would serve all exchange sites equally good. Then we will have more exchanges like mtgox, becuase there will be a unified platform and interface for all of them! Whether you want to use one or another is just up to you. Whenever a new site springs up - it distributes its public key in the p2p network and joins the exchange p2p layer/interface.

I am not going to do this, unfortunately I have other things to do. It's an idea for someone else, like MagicalTux to use it, if people decide to like it. I just think that it's a p2p trading in its purest form. You can't go any more decentralized than this. And decentralization is a key to success.

This all could be considered an "extended" bitcoind server, in a modular way. Only those who want to participate would download and use it.


A bit of more explanations:

So whenever you connect to http://localhost:1234 you are first presented with a list of available exchanges (each of them distributed their public key in the network), then you click one of them and can log in, using the your credentials which are also distributed in p2p.

Then you are presented a basic interface for ask/bid/withdraw. Specific information needed for this interface (bank account numbers and other stuff needed to withdraw/add money to this exchange) is also distributed along with public key. Lets say that it has a reasonable size limit to avoid blocking the p2p network, actually few kilobytes of plain text should really be enough, so it would be comparable to the size of a single block.

And maybe uploading a new public key (opening a new exchange site) is costing BTC, to avoid spammers (you can't spam if you must pay for that). The BTC cost of opening a new exchange site could be distributed on all nodes that participate in p2p network - since they have external IP, they can receive BTC based on their IP.

Current ETA for mtgox back: before 14:00 GMT (in fact, it should be in less than 2 hours, but never know what can happen)

If you've made some DNS changes that may take a while to propagate. But I assume the changes the reason the site is unreachable completely is that there is yet no server listening to requests and not a DNS related problem, no?

DNS TTL is 600 seconds (10 minutes)

Anyway, mtgox is back.

It's up and responsive for me, I see it behind Blacklotus.

I was just about to privmsg MagicalTux and ask if he had any use for a donated cache (set up similar to Wikipedia's global CDN), but judging by the fact that the new server is at BlackLotus, I'd venture to guess it won't be necessary until attacks start to exceed 3 or 4 Gbits/sec.  Keep up the good work!

it's working great, I have already started buying. Thanks.

I wonder why Btcex admin is not here yet to clear things up ?

Great work MagicalTux. It looks like volume is picking up again and price has remained relatively stable while the site was offline, so all is well :)

Cheers!

I think it's very clear:

https://www.bitcoin.org/smf/index.php?topic=6864.msg101352#msg101352

As a temporary measure you could also try whitelisting all IPs used by users that logged in once - this would at least make people feel more safe about accessing their money.

Anyway, mtgox is back.
[/quote]


Mtgox might be back but the LR withdraw function is broken again. Which isn't too surprising since the LR withdraw function has worked only 2 twice out of the 50+ times I've tried it. You always blame the LR withdraw being broken on LR's API but mtgox is your website and therefore it is your responsibility to make sure it functions as advertised. When you advertise that people can sell bitcoins for LR and then that functionality doesn't work it is very deceptive. You should at least let people know on the front page of your site when the LR withdraw isn't working that way people don't waste their time, and bitcoins/money. Another, alternative would be to do the LR withdraws manually when the automatic withdraw isn't working. I would also suggest looking into other e-currencies so that people have more options. If you keep mtgox is this perpetual state of reduced functionality eventually someone else is going to make a website that works and you will lose my business and everyone else that doesn't want to wait to withdraw their money.

Also, please no one tell me I should use the bank wire instead. First off, I am in the USA so the minimum is $800 which I don't always have in my mtgox account. Even if I did bank wire isn't a good option for me.

How about you go and program your own exchange?

Mtgox might be back but the LR withdraw function is broken again. Which isn't too surprising since the LR withdraw function has worked only 2 twice out of the 50+ times I've tried it. You always blame the LR withdraw being broken on LR's API but mtgox is your website and therefore it is your responsibility to make sure it functions as advertised. When you advertise that people can sell bitcoins for LR and then that functionality doesn't work it is very deceptive. You should at least let people know on the front page of your site when the LR withdraw isn't working that way people don't waste their time, and bitcoins/money. Another, alternative would be to do the LR withdraws manually when the automatic withdraw isn't working. I would also suggest looking into other e-currencies so that people have more options. If you keep mtgox is this perpetual state of reduced functionality eventually someone else is going to make a website that works and you will lose my business and everyone else that doesn't want to wait to withdraw their money.

Also, please no one tell me I should use the bank wire instead. First off, I am in the USA so the minimum is $800 which I don't always have in my mtgox account. Even if I did bank wire isn't a good option for me.
[/quote]

How about Dwolla?

Oh and for LR, we've hit the security global daily limit, which means you'll have to retry tomorrow. If you have an urgent need, please email info@mtgox.com with the details of the transfer you want to do.


Thanks

Is it me, or is mtgox down again?

yup, "Too many connections".

Well that was fast.

Ha, someone's real serious about that.

seems like I can take vacation from the bitcoin technical analysis...

this is terrible...

Please don't. Your analyses are great. It's just a wild west of new gold. We need to stabilise that.

Thanks cosurgi. I will definitely continue as long as the trading resumes.

It was not too bad as I focused my spare time the past days more on the Silver SPOT market and I am quite happy to have picked the Silver top at 49.9 $ last Monday. Now we are at 40.9 $...

It's certainly terrible for Mtgox. But is it terrible for Bitcoin?  

If the success of a whole currency can be threatened by something as minor as a DDoS attack on a single website, then it isn't any better than a centralised currency and it has failed to achieve its goals.

I am optimistic and believe that it can't. This community is very good at reorganizing around damage. It arleady proved resilience when mtgox and bitcoin market were attacked for the first time in Oct 2010.

Agreed. I though at this point bitcoin exchange rate would crash, but despite everything it's holding and hasn't been bellow $3. I think it's a good indication that bitcoin is much stronger than we all thought

I wish there was an another exchange with automated EU bank transfers.

It is back up

Uhm, there is.
https://bitmarket.eu/ (https://bitmarket.eu/)
It is currently moving to another server but will be back up soon.

OMG, WTF seriously...

Lovely, mtgox is down again :( Anyone have a clue what happened now? Another server move, more DDoS'ing? Gremlins?

Hi,

MtGox is not down, however chances are you got blocked if you tried to hammer in.


Mark

Yeah that may very well be the case. I merely tried to refresh the page at random intervals. Can I PM you my IP address or hostname or domain etc so you can add me to the whitelist?

Hi,

There is no more whitelist, and blocks are handled by the ISP now. You may want however to do a "ip hop" if you can, or wait for the block to expire.


Mark

What is the expiry time set to?

Just use a proxy or tor or i2p.  Knowing how to route around damage (like blocking) is an important skill for fully utilizing the internet.

I know how to do that yrral86, but for me it's not super critical as I mainly use mtgox to keep an eye on the btc/usd exchange rate. But thanks nonetheless for your tip ;)

The blocking is a bit more aggressive than catching those hammering the site.  I'm blocked on my home IP on which I checked the site perhaps once per hour.

duke

I've done probably 50 requests in the past hour and it's working great for me.  Perhaps something else about your traffic pattern is triggering it.

Yeah not sure what triggers it specifically but I got around the block by loading up the Tor browser bundle.

allinvain if you get on irc, on freenode there are couple of channels you can watch trades and rates in real time. #bitcoin-watch lets you not only do that but also watch every transaction on the network in real time. the other channel is called #bitcoin-market

Oh wow I can't believe I forgot about that. In fact I've been idling in that channel for a month now. lol...*face palm*

That could be, from home I do check using different devices...same IP tho.

My IP got blocked as well. I made a bitcoin transfer and went to sleep, woke up and mtgox.com was unreachable. I have a static IP and i'm the only owner (and user) of it.

May be there is something wrong with the handling of "aggressors IPs".

Can't access from my iPhone or home connection. Thought it was down again... has cost me money :/

The attack has stopped, with a promise to start again in 2 hours.

Previous attack had no impact as the ddos protection successfully blocked it (and a few dozen of normal users too). We are trying to get the ddos filtering to not block normal users.

For reference, a subset of the observed ips this time:
http://paste.pocoo.org/raw/382648/

Maybe this cannot be answered honestly - but was there any hint about what was the motivation of the attackers?  Did you receive 'protection' offers or something?

The attacker sent an email from a stolen address offering to stop his attack for $5000 via libertyreserve.

This was - of course - denied. We do not negociate with internet terrorists!

DDOS protected hosting probably would be cheaper and more reliable.

It was cheaper, and it seems more reliable. All win.

Should have asked him to come back again in two weeks or so with a new botnet. Publicity is priceless.

Please post the email.

Did the attacker attempt to make good in his/her promise of an attack 2 hours later?  I haven't had any problems connecting to MtGox today, so I assume the DDoS protection is still working well.  Well done with this whole annoyance, and thanks for the updates.

Great work on resolving the problem and defending subsequent DDoS attempts Tux.  This whole event has made me feel a bit more secure with the valuation of BTC.  For such an extensive (multi-day) attack shutting down the largest exchange, the price has barely been affected.  I was expecting a price dump into the $2.00-2.25 range as a result of people getting scared.

All this DDoS did was allow more time for deposits/wires to be added/cleared. That money is going to Gox for 1 reason only: to buy. So you have several days of pent up demand pushing prices higher.

Back to $3.50 already. I wonder what happened to that guy who sold all his BTC at $3.50.

Congratulations from me as well. Also, I am proud of our community that we didn't let those incidents affect our faith in Bitcoin. Of course, these attacks were not aimed at the Bitcoin network itself (which is not easy to be attacked), only the websites related to it; nevertheless, some people might have lost faith for a while.

I would love to find out who organised this attack. I wonder would he be equally courageous face to face.

+1 Seems like majority here are in for the long ride.

+1

:)

Heya,

Attacker is back, and has a new email address (it starts with fuuuuckyouuuuumtgox). I think he's not happy.

Anyway we'll try tweaking the ddos protections to avoid blocking legit traffic, it's going to take a bit more time.

Wow this attacker is such a loser!

Is there any particular pattern to this attack? Are the majority of IPs from a specific country (I heard Vietnam being mentioned earlier)? Is there any way to directly counter attack his botnet or whatever means he is using to launch this attack? Anything you can do beyond just soak up the bandwidth bitch slap?

You'd think he'd of noticed that his attacks have caused a sort of rally behind MtGox, which, I take it, is not what he wants.

The ISP support said:

What was the actual reason for btcex & other russians DDoSing you ?  

Does he claim that you speculate/manipulate market or what ?

The guy who mailed me requests to pay him $7000 (yep, got $2000 more because I reported him) first told me he wants rates down, then told me he needs the money.

This is ridiculous. It's really unfortunate that this guy doesn't get economics as well as DDoSing.

Site seems back up, ISP is doing its job.

You should tell him that you've taken his request to the Ministry of Bitcoin Exchanges and the Ministry agrees that rates should come down , and, furthermore, the Ministry has decided that the exchange rate will be adjusted so that 1BTC will always equal 1USD forever and henceforth.

You could also make him an offer he can't refuse...7000 carrots!

I am getting:

Nevermind, it's okay now.

So wait, are you telling me that the 0,65% is so much for him that he actually needed to DDoS you... ?
Or was it about the BTC/USD rate ?

In soviet russia.... money taxes you it seems.

ship the guy a crate of 7K carrots?..... I actually think I would like to see that.   ;D

Yes as would I. Hopefully he would be a sport and take a picture of himself standing next to the crate full of carrots. Then he can go brag to his comrades that he is rich in carrots.

It would be funny if someone got a nigerian scam artist to do that.

Been done, but not with carrots ;) Checkout 419eater dot com and then click on the trophy room.

Seems like Mr. Mysterious is after running out of carrots. Mt. Gox down again...

Hi,

Not totally down. It's still up if you try enough, but it's not optimal. We are tweaking ddos filters to match the new attack pattern.


Thanks,
Mark

Connect over https instead of http, and you're fine.

Safer to use HTTPs anyway.

Hi, how can I reach MTgox admin? I was trying to send him message, but did not get reply. I am having problems with not deposited funding via LR - probably due to DDOS attack.

Does anybody help?

info@mtgox.com

You can also try irc freenode channel #bitcoin-otc. Look for MagicalTux

Is MtGox getting attacked again?  I'm unable to access the site.

Attack pattern changed, we're changing settings accordingly.

It's all good now :)

Is bitcoincharts being DDOSed also?

Looks like MtGox.com is down.

Is it under DDOS or whatever?
Does anybody have any info on it?

Edit: Is working now.

Is mtgox.com down? cant reach it

I cant reach it either.  When I try to connect There is a message saying the cite is under DDoS attack.

why blame Russia ? i don't get it :/

-

I think at least until we have multiple large stock markets mtgox needs to try to be distributed too just as BTC maybe Fortigate with load balancers .. cloud data centers across the globe ... One thing people love about BTC is that it is (DISTRIBUTED) even more than being anonymous .. and the DDoS/hacks we seen in mtgox is such a proof along with the governments games with their currencies.

The closest I can think of for a URL to be distributed is cloud hosting with load balances and different data center across the globe.

It doesn't help.
Russian criminals have some of the biggest botnets (multiple gbit/s downlink) that can even bring down sites like Twitter & Facebook at the same time.

http://www.pcworld.com/article/169809/twitter_ddos_attack_politically_motivated_says_report.html

Note that Facebook used some of the highest bandwidth servers in the world during the attack.
It still doesn't help even with attack patterning.

A site such as Mt. Gox has no chance to survive even if an attack with just a fraction of that, or 5-10k connections TCP flood it.

Most small to medium sized companies will pay protection money to stop the attacks coming because they lose more in business daily than they would pay the attacker.

The problem is that this opens you up for frequent extortion because you already paid once.
I don't think Mark considered the option of paying $7000 as requested earlier.

IT WAS THE RUSSIANS.... should have known it !!!

It doesn't help.
Russian criminals have some of the biggest botnets (multiple gbit/s downlink) that can even bring down sites like Twitter & Facebook at the same time.

http://www.pcworld.com/article/169809/twitter_ddos_attack_politically_motivated_says_report.html

Note that Facebook used some of the highest bandwidth servers in the world during the attack.
It still doesn't help even with attack patterning.

A site such as Mt. Gox has no chance to survive even if an attack with just a fraction of that, or 5-10k connections TCP flood it.

Most small to medium sized companies will pay protection money to stop the attacks coming because they lose more in business daily than they would pay the attacker.

The problem is that this opens you up for frequent extortion because you already paid once.
I don't think Mark considered the option of paying $7000 as requested earlier.
[/quote]

Well in that case maybe TORing mtgox.com is the solution.

Since the end of the Cold War and the beginning of "globalization" the Chinese are the new Russians!