Three Days in August: What a DDoS Attack Exposed in Our Network

 (nine.ch)

9 points | by nine_ch 2 hours ago

6 comments

  • tshanmu 40 minutes ago
    "We found three concrete gaps during this incident, and we would rather be upfront about them than gloss over them." claudism?
    [-]
  • jareklupinski 44 minutes ago
    > There was no unauthorised access and no compromised systems. This was an overload attack, not an intrusion.

    "AI said it's all good. There are no attackers within our walls."

    [-]
  • majke 51 minutes ago 

      8. 80.239.216.210.  0.0%    78  123.2  64.6  42.9 141.8  30.6
  9. vl202.zur-itx1-dist-1.cdn77.com. 0.0%    78   60.1  58.8  43.7 136.5  24.2
  10. 89-187-165-194.bunnyinfra.net. 0.0%    78   45.9  63.5  41.8 131.9  31.0
    so cdn77.com and bunny.net
    [-]
    • nine_ch 41 minutes ago
      Yes, that's bunny.net, it's named in the post. Their Zurich PoP appears to sit on CDN77's network, which is on their side of the setup, not something we configured.
  • someonebaggy 39 minutes ago
    Did AI write this?
    [-]
    • nine_ch 35 minutes ago
      Yes. The blog version was drafted with AI assistance and then edited and reviewed by us. The facts, numbers and timeline are ours and match the technical postmortem PDF linked in the post, which is the drier, more complete version. Happy to go into any of the technical details here.
  • nine_ch 2 hours ago
    [dead]
  • HannaTao 2 hours ago
    [flagged]