Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Ask HN: What should GitHub do about the DDoS attack?
8 points by allochthon on March 28, 2015 | hide | past | favorite | 2 comments
Right now Github is undergoing a heavy, protracted DDoS attack [0], presumably orchestrated by the Chinese government or by an independent group in China. Github has become an important part of the infrastructure of the Internet. At any given moment there may be several links in the HN feed that go back to Github pages. They are no doubt facing a hard choice: (a) pull the two projects that are the focus of the attack, which might cause the attack to subside; or (b) continue in the name of freedom of speech to host the projects and absorb the cost in infrastructure and poor site performance.

Here it's not freedom of speech in China that is at stake; it's freedom of speech outside of China that is at stake. But Github will no doubt find it hard to foot the additional bill indefinitely, and there is a noticeable degradation in the liveness of their services. What should they do?

You can imagine them braving a DDoS attack like this for a few days. But governments have trillions of dollars at their disposal, and the match in this case is probably an uneven one.

Should governments concerned with protecting freedom of speech step in to help out with the costs of a company like Github maintaining business as usual in the face of such attacks?

(I am not affiliated with Github in any way.)

[0] https://status.github.com/messages



This is a really hard problem.

In my opinion, us, all, should not let China do whatever they want.

The Chinese developer, who care so much for github, should also step in.

My own rights cannot be taken away by a foreign country and I am ready to fight to get that back.

If github need anything from a backend developer my email is in my profile.


Why is this not in the mainstream news? Even if it's not the Chinese government directly it's a group with significant power inside China -- so why isn't this being considered a foreign attack on a US company?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: