Bitcoin Forum

Bitcoin => Bitcoin Discussion => Topic started by: bitcoinbelieve on September 17, 2014, 02:38:26 PM



Title: DDoS attack on Bitcoin.org
Post by: bitcoinbelieve on September 17, 2014, 02:38:26 PM
According to CCN (cryptocoinnews) there is DDoS attack on bitcoin.org right now


Title: Re: DDoS attack on Bitcoin.org
Post by: HELP.org on September 17, 2014, 02:39:52 PM
The site is unreachable from here


Title: Re: DDoS attack on Bitcoin.org
Post by: bitcoinbelieve on September 17, 2014, 02:42:20 PM
does this benefit the miners?


Title: Re: DDoS attack on Bitcoin.org
Post by: frankenmint on September 17, 2014, 02:48:38 PM
does this benefit the miners?

no - bitcoin.org =/= mining pool so it benefits no one in the mining difficulty sense of things.  it may muck up a new user who found this link from someone irl and want to discover btc but luckily there are places like here that can bring them up to speed.


Title: Re: DDoS attack on Bitcoin.org
Post by: foxkyu on September 17, 2014, 02:51:30 PM
According to CCN (cryptocoinnews) there is DDoS attack on bitcoin.org right now
oops, you're right
i can't access the website
i hope it's not affecting bitcoin price


Title: Re: DDoS attack on Bitcoin.org
Post by: jbrnt on September 17, 2014, 03:08:44 PM
What would hackers gain by a DDoS attack on bitcoin.org? There is nothing there... Just a wiki, right?


Title: Re: DDoS attack on Bitcoin.org
Post by: Gavin Andresen on September 17, 2014, 03:11:26 PM
Probably just some anti-Foundation skiddie who saw this:
  https://bitcoinfoundation.org/2014/09/bitcoin-org-walk-down-memory-lane/


Title: Re: DDoS attack on Bitcoin.org
Post by: RealMalatesta on September 17, 2014, 03:24:46 PM
Probably just some anti-Foundation skiddie who saw this:
  https://bitcoinfoundation.org/2014/09/bitcoin-org-walk-down-memory-lane/


I think the first thing to do once the site's up again is to check the links then  ::)


Title: Re: DDoS attack on Bitcoin.org
Post by: HELP.org on September 17, 2014, 03:29:58 PM
Probably just some anti-Foundation skiddie who saw this:
  https://bitcoinfoundation.org/2014/09/bitcoin-org-walk-down-memory-lane/


So you are saying it is not credible that the site is sponsored by the Foundation but claims it is completely independent ... and now people are mad?


Title: Re: DDoS attack on Bitcoin.org
Post by: Willisius on September 17, 2014, 03:42:38 PM
DDoS is usually a waste of resources. Just have to wait until they tucker themselves out; it's analogous to an angry child.


Title: Re: DDoS attack on Bitcoin.org
Post by: RodeoX on September 17, 2014, 04:12:32 PM
A pointless waste of cycles. If they just wanted to throw away electricity they should have mined alts.


Title: Re: DDoS attack on Bitcoin.org
Post by: yunkie on September 17, 2014, 04:17:48 PM
Yup, its not working here as well.  :(


Title: Re: DDoS attack on Bitcoin.org
Post by: acoindr on September 17, 2014, 04:28:09 PM
DDoS is usually a waste of resources. Just have to wait until they tucker themselves out; it's analogous to an angry child.

A pointless waste of cycles. If they just wanted to throw away electricity they should have mined alts.

It's usually other peoples' resources, though. I'm getting annoyed with the ease at which DDoS  can be deployed. A way to severely limit this tool from nefarious actors is remove the number of host machines easily susceptible to becoming a bot. This can be done by automatically or easily cleaning up computers compromised by viruses, which I think is possible but requires some well thought out software and hardware designs.


Title: Re: DDoS attack on Bitcoin.org
Post by: blockgenesis on September 17, 2014, 05:25:28 PM
Probably just some anti-Foundation skiddie who saw this:
  https://bitcoinfoundation.org/2014/09/bitcoin-org-walk-down-memory-lane/


So you are saying it is not credible that the site is sponsored by the Foundation but claims it is completely independent ... and now people are mad?

The Foundation is welcome to help bitcoin.org.

As for the worry that the Foundation could try to "buy" some control over the website, I was concerned this could happen when we started having recurring costs (server) until we had alternative funding options. So currently, the sponsorship is just a "win-win" for everyone, and the Foundation thus far is only helpful.


Title: Re: DDoS attack on Bitcoin.org
Post by: blockgenesis on September 17, 2014, 05:30:20 PM
For the record, we've had DDoS attacks on a regular basis recently and migrated to Black Lotus, but apparently this didn't help as the attackers started using UDP-flood attacks over 10gbps, which is too much for Black Lotus. The very long downtime today was far enough so we switched to other DDoS solutions for now. I'll keep monitoring what works best.


Title: Re: DDoS attack on Bitcoin.org
Post by: obocaman on September 17, 2014, 06:36:59 PM
 Site still down for me, fucking no life aspies.


Title: Re: DDoS attack on Bitcoin.org
Post by: blockgenesis on September 17, 2014, 06:39:33 PM
Site still down for me, fucking no life aspies.

DNS changes may take up to 24-48 hours before being deployed worldwide.

If you ping bitcoin.org, what IP do you get? ( should be 199.83.129.139 or 199.83.131.8 )


Title: Re: DDoS attack on Bitcoin.org
Post by: bornil267645 on September 17, 2014, 09:40:47 PM
maybe the start of the domino falling. 8) 8)


Title: Re: DDoS attack on Bitcoin.org
Post by: Meuh6879 on September 17, 2014, 09:47:50 PM
use alternative way to download client ... https://bitcointalk.org/index.php?topic=655359.msg8581889#msg8581889
you can monitoring the unavailable of a site here : http://www.isitdownrightnow.com/bitcoin.org.html


Title: Re: DDoS attack on Bitcoin.org
Post by: RocketSingh on September 17, 2014, 09:53:32 PM
Site still down for me, fucking no life aspies.

DNS changes may take up to 24-48 hours before being deployed worldwide.

If you ping bitcoin.org, what IP do you get? ( should be 199.83.129.139 or 199.83.131.8 )

Did not you employ Cloudflare or any other CDN to deal with DDOS ?


Title: Re: DDoS attack on Bitcoin.org
Post by: keithers on September 17, 2014, 09:59:50 PM
maybe the start of the domino falling. 8) 8)

This is sarcasm right?


Title: Re: DDoS attack on Bitcoin.org
Post by: zorke on September 17, 2014, 10:10:39 PM
Site still down for me, fucking no life aspies.

DNS changes may take up to 24-48 hours before being deployed worldwide.

If you ping bitcoin.org, what IP do you get? ( should be 199.83.129.139 or 199.83.131.8 )

Did not you employ Cloudflare or any other CDN to deal with DDOS ?
Cloudflare requires the site operators to give up the encryption keys to (I believe it is) the https encryption certificate. I am not sure if this is exactly correct, however I know it has something to do with something that a user can look at to validate that they are accessing the website they intend to visit.


Title: Re: DDoS attack on Bitcoin.org
Post by: HELP.org on September 17, 2014, 10:59:55 PM
Probably just some anti-Foundation skiddie who saw this:
  https://bitcoinfoundation.org/2014/09/bitcoin-org-walk-down-memory-lane/


So you are saying it is not credible that the site is sponsored by the Foundation but claims it is completely independent ... and now people are mad?

The Foundation is welcome to help bitcoin.org.

As for the worry that the Foundation could try to "buy" some control over the website, I was concerned this could happen when we started having recurring costs (server) until we had alternative funding options. So currently, the sponsorship is just a "win-win" for everyone, and the Foundation thus far is only helpful.

Hi,

The process for determining what things get posted on Bitcoin.org is very unclear and it appears to be one person who makes the decisions.  Given those circumstances and the history of the Bitcoin Foundation I certainly believe the Foundation effectively runs the site.  Vague posts by people within the inner circle do not really clarify anything.

As for the DNS you set the TTL low so you can change IP's during a DDOS so it won't take 24-48 hours for most people to switch if it is that bad.

As for clouflare, you do have to give them the SSL keys because they process the web site traffic.  Nobody is entering personal information and it is a static web site so it is unclear what the issue is there.  As far as I can tell that was an excuse used by Bitcointalk when they kept getting hacked and nobody did anything.