[01:22] linode was down for 12 days? [01:34] dang that article was scary [06:49] Not all of linode was down at that time (I had a vps with them that trucked along happily the entire time), but I think their web portal was done and various things were screwy [08:08] *** tellnes has quit IRC (*.net *.split) [08:11] atlanta was down most of that time i think [08:11] well for long periods of time [08:14] *** tellnes has joined #arpnetworks [08:34] "proactively prevent DDOS" Being proactive against DDOS? How would that work, DDOS the DDOSers? [08:34] bcp38? [08:37] Wouldn't BCP38 "Ingress Filtering" still allow your upstream pipe to become saturated? (admittedly, the only thing I know is the name "ingress filtering") [08:37] well it makes it quicker to find who is ddos'ing [08:38] and it stops reflection attacks [08:38] the seeding of reflection attacks that is [08:38] but bcp38 is something to other end(s) of the ddos attack need to do [08:39] yeah it's thinking of it from all points of view, rather than just from the target [08:39] "ingress filtering is a technique used to ensure that incoming packets are actually from the networks from which they claim to originate." (ah) [08:39] (I was thinking "ingress filtering" was synonymous with basic firewalling) [08:40] (Not that it isn't basic firewalling, but it's specifically anti-spoofing) [08:40] Wikipedia:https://en.wikipedia.org/wiki/Ingress_filtering [08:40] Ingress filtering :: In computer networking, ingress filtering is a technique used to ensure that incoming packets are actually from the networks from which they claim to originate. This can be used as a countermeasure against a various spoofing attacks where the attacker's packets contain fake IP addresss to make it difficult to find the source of the attack. This technique is often used in the denial-of-service attack, and this is a primary... [08:43] also, if i see it correctly reflection attacks are getting out of fashion. and bcp38 doesn't stop direct attacks (e.g. from massive iot botnets) [08:44] *** mkb_ has joined #arpnetworks [08:49] ant: reflection is sitll quite common. [08:49] but often it spikes soon after a new way of doing reflection attacks opens up, before people plug the holes [10:22] mercutio: yeah, but it seems to me that all the big recent attacks have been iot related (and they have been bigger than any reflection attack before) [10:46] *** mkb_ has quit IRC (Quit: leaving) [11:11] oh, big attacks maybe [11:11] but frequent attacks can come from amplification attacks [11:19] i can imagine. but those don't make it to the news ;) [11:26] *** mkb_ has joined #arpnetworks [12:06] *** Lucifer333 has joined #arpnetworks [12:46] *** Lucifer333 has quit IRC (Quit: Leaving) [15:10] *** mkb_ has quit IRC (Quit: leaving) [15:50] up_the_irons: Good show with the shirts and mugs. [16:07] do they ship to Canada? [17:04] *** dj_goku has quit IRC (Ping timeout: 250 seconds) [17:21] *** mkb_ has joined #arpnetworks [17:45] *** dj_goku has joined #arpnetworks [17:45] *** dj_goku has quit IRC (Changing host) [17:45] *** dj_goku has joined #arpnetworks [17:50] *** dj_goku has quit IRC (Ping timeout: 260 seconds) [18:46] *** dj_goku has joined #arpnetworks [18:46] *** dj_goku has quit IRC (Changing host) [18:46] *** dj_goku has joined #arpnetworks [18:51] *** dj_goku has quit IRC (Ping timeout: 260 seconds) [19:31] *** dj_goku has joined #arpnetworks [20:33] sjackso: :) [20:34] nathani: yes, they ship worldwide. shipping to Canada is a little more expensive than the US. [21:36] *** mkb_ has quit IRC (Quit: leaving)