BitPay.com is online

[BitPay Business Solutions]

We will get it fixed.  The right solution is a network of private servers with proxies and DDOS protection for everything.  This will take time to deploy properly.

For large merchants, we would consider installing their own instance of bitpay for their payment processing.  This is something we could offer as a premium service.

This has made us think of ways to make our service more decentralized and more robust.  I agree that someone is trying to attack bitcoin and slow down its rapid adoption.

If we can solve this attack issue, I think everyone will be glad it is now when we have 1,000 merchants and not a year from now when we have 10,000 or more and we're doing $1M/day in processing.

[felipelalli]

This is REALLY crazy!! 

[QuantumKiwi]

Just heard from a source that a little monkey in paypal threw his toys out of his cott when bitpay hit 1,000 merchants.

Maybe you have a big pissed off billionaire paying some russian to ddos?

After seeing the 65gbps.. Far out, thats one impressive attack... And its not a normal attack...?

[jfreak53]

After seeing the 65gbps.. Far out, thats one impressive attack... And its not a normal attack...?

A normal attack is about 10 Maybe 20 if they hate you with a passion only an ex-lover could muster up

[justusranvier]

Is $20/min accurate for what it would cost to buy a DDoS of this scale?

[jfreak53]

No more, if I remember right the article said something around $30 for 30 seconds. So $60 a min. would be more like it if that is correct. But if your buying 4 days worth they probably gave them a discount ha ha ha

[SgtSpike]

Is $20/min accurate for what it would cost to buy a DDoS of this scale?

It depends.  Reading the cloudflare article, it appears as though there are ways to DDOS that are [virtually] free, one of which is DNS reflection.  If DNS reflection is used heavily in this case, it might be relatively cheap to keep the DDOS going.

My personal suspicion is that it is a ransom (despite bitpay's statement to the contrary), just because the timing is too coincidental with the walletbit DDOS.  The DDOS's on both started at the same time.

One user in the comments who claims familiarity with botnets says a typical rental rate for one of this size might be $1/second. (he specifically mentions $30/30 seconds).

[jfreak53]

That's what it was! Sorry, I knew I read it somewhere, just for looking:
http://www.zdnet.com/blog/security/study-finds-the-average-price-for-renting-a-botnet/6528

[jfreak53]

Just as a said note, I bet if the botter is not a large corp, I bet their paying in bitcoin's for the service ha ha ha ha ha

[jfreak53]

So I know you said that the HTTP Auth was the only thing that needed to be changed, but it's not. We changed that and no matter what we change we always get echoed back out the CloudFlare checking your browser page. So it won't let us past cloudflare to get to the API.

[BitPay Business Solutions]

So I know you said that the HTTP Auth was the only thing that needed to be changed, but it's not. We changed that and no matter what we change we always get echoed back out the CloudFlare checking your browser page. So it won't let us past cloudflare to get to the API.

yeah that's the challenge screen.

email support@bitpay.com so my partner and CTO Steve can look into it.  There may be other changes needed, I am not 100% sure. 

[jfreak53]

I think curl needs the redirect option but it wasn't working for us either :S I'll email then now. Thanks.

[osoverflow]

well bitpay is online again

[zhalox]

CloudFlare says the website is offline again.  I cannot view my invoice

[philips]

Working for the moment. I was able to pay for a Jalapeno  
Is the attack over or I was just being lucky?

[jfreak53]

Yeah it seems to be working now. We ended up not only having to add the http Auth part but remove any reference to port 8443 from our module. Problem being is as of right now Steve has to allow any server IP access for it to work so it seem's. But it is working just great right now.

[jga]

I updated the OpenCart module code to restore functionality, so those with opencarts should check out this thread: https://bitcointalk.org/index.php?topic=110690.0

[cablepair]

I updated the OpenCart module code to restore functionality, so those with opencarts should check out this thread: https://bitcointalk.org/index.php?topic=110690.0

this did NOT work for me

I have since  had to take tens of thousands of dollars in transactions manually

and have offered a 50BTC  bounty for someone to develop an opencart plugin that would interact directly with Bitcoind

I am sure something like this could be very simple to do, but it is beyond  my expertise.

[jga]

I updated the OpenCart module code to restore functionality, so those with opencarts should check out this thread: https://bitcointalk.org/index.php?topic=110690.0

this did NOT work for me

I have since  had to take tens of thousands of dollars in transactions manually

and have offered a 50BTC  bounty for someone to develop an opencart plugin that would interact directly with Bitcoind

I am sure something like this could be very simple to do, but it is beyond  my expertise.

This kinda makes it sound like MY extension made you do those transactions manually and not BitPay's service outage.   

I've been working on a bitcoind OpenCart extension. The trick is the server-side bitcoind implementation. Even if someone makes an extension, there will be some server-specific bitcoind setup required, so it won't be a simple FTP and done install. Now that I know there's a bounty on it, I might speed up my development efforts.

[cablepair]

I think I got your patched open cart extension "working"

I did a test transaction, and send the coins - although I have not seen the coins show up in my bit-pay account yet. hopefully I am not out these coins.

Transaction ID: f5cf1ad733e935232d920e4033ee447ffb74e37a36750e06bff631e90988f1be




As far as an opencart / bitcoind extension this is something that is really needed my friend.

and who needs a simply ftp and done install?

I have setup, modified, and transacted thousands of bitcoins in transactions with that very primitive zencart module that has been around forever

git://github.com/jalder/Zen-Cart-Bitcoin-Payment-Module.git



Yes we all love Bitpay (too much apparently)

but we really really really need a way to be able to conduct retail transactions with Bitcoin without being dependent on a third party
and I am SURE this is the way Satoshi wanted it. To be able to conduct these transactions on our own without being dependent on anyone else...

think about it bro.