←back to thread

265 points methuselah_in | 5 comments | | HN request time: 0.693s | source
1. dangoodmanUT ◴[] No.44372006[source]
It almost feels like writing about this is exactly what the attacker wants: Free validation and advertisement for exactly what their botnet can do
replies(2): >>44372049 #>>44375054 #
2. creatonez ◴[] No.44372049[source]
Is this a sign that

A: Cloudflare is feeding the trolls because they think that they are invincible. Or: These post-mortems don't establish any proof that the attack was successful, especially if they are covering DDoSes that were barely even noticed by the public until CF publishes a blog post 1 month later -- so it's actually embarrassing for them and hurts their ability to market botnets for rent, at least once they no longer have the literal world record.

B: Cloudflare is feeding the trolls for free testing scenarios to improve the mitigation

C: The trolls don't really care if you feed them, large DDoS is something that's happening all the time anyways

replies(2): >>44372504 #>>44384025 #
3. kevindamm ◴[] No.44372504[source]
D: all of the above
4. v5v3 ◴[] No.44375054[source]
But now the ip's of their botnet are known, the bot net is weakened.

Also it makes no sense - why throw 7.3tbps at a server, when half of that or less would have the same effect and not exposed your botnet.

5. motorest ◴[] No.44384025[source]
> Is this a sign that

Isn't the obvious point that this is Cloudflare advertising their anti-DDoS services?