Several Sites Including Twitter, GitHub, Spotify, PayPal, NYTimes Suffering Outage -- Dyn DNS Under DDoS Attack [Update] (techcrunch.com)
Several popular websites and services are down right now for many users. The affected sites include Twitter, SoundCloud, Spotify, and PayPal among others. The cause appears to be a sweeping outage of DNS provider Dyn -- which in turn is under DDoS attack, according to an official blog post. From a TechCrunch report:Other sites experiencing issues include Box, Boston Globe, New York Times, Github, Airbnb, Reddit, Freshbooks, Heroku and Vox Media properties. Users accessing these sites might have more or less success depending on where they're located, as some European and Asian users seem not to be encountering these issues. Last month, Bruce Schneier warned that someone was learning how to take down the internet. Update: 10/21 14:41 GMT by M : Dyn says that it has resolved the issue and sites should function normally. Update: 10/21 17:04 GMT by M : Department of Homeland Security says it is aware of the first DDoS attack on Dyn today and "investigating all potential causes." Dyn says it is still under DDoS attack. News outlet The Next Web says it is also facing issues. Any website that uses Dyn's service -- directly or indirectly -- is facing the issue. Motherboard has more details. Update: 10/21 17:57 GMT by M : It seems even PlayStation Network is also hit. EA Sports Games said it is aware of the issues in live-play. Dyn says it is facing a second round of DDoS attacks.
Update: 10/21 18:45 GMT by M : U.S. government probing whether east coast internet attack was a 'criminal act' - official.
Editor's note: the story is being updated as we learn more. The front page was updated to move this story up. Are you also facing issues? Share your experience in the comments section below.
Update: 10/21 18:45 GMT by M : U.S. government probing whether east coast internet attack was a 'criminal act' - official.
Editor's note: the story is being updated as we learn more. The front page was updated to move this story up. Are you also facing issues? Share your experience in the comments section below.
Hopefully they never come back up! It would be great to live in a world with the above gone. Hopefully the FANG companies are next to go.
It's hard to tweet that Twitter is down when Twitter is down.
The main page loads but the comic image itself doesn't work.
No doubt a spike in depression over Twitter being down.
Why they gotta take their small dick issues out on others? Won't fix their small dicks.
These large sites couldn't host their own dns? Really?
Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
Interesting how a DNS failure that makes several big-name websites unaccessible seems to have resulted in my internet being faster than usual...no shit 3rd party links to slow it down?
Seems like Box.com is down also
Russians!
Or Biden.
....I'm bumping along nicely on Spotify right now... Must have cached the DNS entries since I go there a lot.
Who did what now?
According to Dyn: "This attack is mainly impacting US East and is impacting Managed DNS customers in this region."
The PC in my flat (in the UK - on a free dyndns.org address) is alive and well and talking to the outside world.
As usual - someone has assuming that the US = the whole world - learn some fucking geography!
Working at a medium traffic startup, DynECT always insisted that their service was worth a lot[1] more money than AWS's Route 53 or Google's Cloud DNS because unlike AWS or Google they had never had a service outage and boasted 100% uptime since their company was founded.
Looks like we made the right choice going with Route 53 instead of these guys.
1. Seriously, they wanted 5,000 USD/mo when AWS charges 8 USD/mo for the same service.
Tried to reload my card via the app and couldn't. had to pay for my drink with a credit card. The shame
Maybe I'm mis-remembering my network theory classes (they were ever so long ago) but shouldn't DNS caching allow any computers that have accessed any of these websites in a relatively recent amount of time to continue to access them normally? If not perhaps it is something that needs to be baked into future DNS protocols, that when the DNS server is down they simply rely on the last IP they had for that site. DNS server DDoS attacks should be the most ineffective attack possible, its not like there is a lot of information there, 99% of the website addresses that are utilized by most people could probably fit in the hard drive space taken up by a single digital camera photo.
You can use Google's free DNS services to work around this issue - and, you might want to use it full time. Google tends to be much snappier than most ISPs.
https://developers.google.com/speed/public-dns/
8.8.8.8 and 8.8.4.4
But it is backup and functioning again.
I've been doing end user computing for quite a while, and we've gone through so many cycles of "where the client intelligence lives" or "where the virtual desktop is hosted" and everyone oscillates between two extremes. PCs to zero clients usually ends up being a mix of laptops and thin clients in the end. All VDI ends up being some VDI after some very expensive POCs in most cases. I guess the same debate of "host it yourself vs. rely on a cloud provider" is alive and well here. I see it every day where I work -- the management is all about cloud, and the staff are fine with some cloud, but going all the way over to total dependence on a third party is not great in my mind.
Something as fundamental as DNS should probably at least have some footprint in your "locus of control." I didn't say "in your office" but fundamental stuff that could completely kill everything else if you lost it shouldn't be given over to a third party that you don't directly control. In this case, Dyn had a DDoS attack, and on-premises DNS could too. But having a way to run both off and on premises makes good sense...if one entity is having a bad day, the other could at least keep things alive. However, all this old school DR stuff is lost in the world of the cloud and startups. It all comes down to how much in dollars or reputation the loss of a service costs the company...if you can quantify that and the number exceeds the cost of mitigation, businesses would be stupid not to put something in place to mitigate it.
i just been there a moment ago, works fine, pages load quickly and completely
Politics is Treachery, Religion is Brainwashing
Want to significantly reduce the number and magnitude of DDOS attacks? It's easy. Just make people legally responsible for their packets.
(1) The owner of a device attached to the Internet must make a reasonable effort to maintain it. Specifically, they must install security updates in a timely fashion. In addition, they must disconnect the device if they are unable to maintain it. No device or piece of software lasts forever. You don't get to keep using a PC with Windows XP, or a 10 year old router with dozens of known security holes -- you need to throw them away. Failure to do so will make the owner liable for damages if their device is used in a DDOS attack.
(2) Network operators shall be required to ensure that packets originating on their network have a valid source address (e.g. use filters at all ingress points). Failure to do so will make them liable for damages related to the DDOS attack.
(3) Network operators shall be required to provide rapid technical assistance to trace DDOS traffic that is passing through their network, so that it can be traced back to it's source. Failure to do so will make them liable for damages related to the DDOS attack.
Forget the sites the articles mention. I was having very serious troubles getting to the Guardian's site, pictures not loading, and worse, I couldn't even log onto my hosting provider.
Now, I'm on Verizon FIOS, and my system (Linux, a real o/s) couldn't even ping hostmonster.com, it couldn't find the name, until I manual added nameserver 8.8.8.8 (one of google's) to my resolv.conf. Then it started working.
That tells me that it was overloading nameservers in a *LOT* of places.
mark
Bank holiday, here we come!
Joe Biden told NBC a “message” would be sent to Russian President Vladimir Putin over the alleged hacking, with the channel saying the CIA was preparing a retaliatory cyber attack “designed to harass and ’embarrass’ the Kremlin leadership.”
Kremlin spokesman Dmitry Peskov immediately denounced Biden’s remarks, saying Moscow would take precautions to safeguard its interests in the face of the increasing “unpredictability and aggressiveness of the United States”.
Sounds good to me. I'll gladly live without Spotify if it means PayPal is down too. You might want to add Slashdot to that list too, I've had a lot of timeouts in just the last few minutes on Slashdot, but other sites I check seem to be fine.
I'm an American. I love this country and the freedoms that we used to have.
My company takes BitCoins and users whom had BitCoins wouldn't have been impacted by this outage. Now we aren't completely decentralized nor distributed, but it's one example of where we are. Now we've seen numerous times with attacks on piracy sites that adding an onion to your site also makes you more resistant to attack/downtime. We need BitCoin, BitTorrent, and similar, not less. BitCoin might not be perfect or even anonymous, but it has its value and is one step closer to where we want to be. z.cash and zero coin should solve some of the anonymity and privacy issues with BitCoin unlike psudo-anonymous solutions we've seen before.
We are a Dyn customer and our names are still failing to resolve.
My company uses GBP and wouldn't have been impacted by this outage either.
Same as my company.
Indeed, but so it spinning up resilient servers across multiple cloud infrastructures and using CDNs used to protect against a variety of attacks.
I think we need more diverisfied infrastructure in the cloud, not BitCoin, BitTorrent, and similar. These technologies are significantly wasteful in processing, bandwidth and most importantly, time.
But I don't want unapproved majority people managing the network and dictating how payments work and being capable of deanonymizing - we're better off assuming we're not anonymous on any system, it's a false sense of security. The people that build this decenteralized system and those that buy into it completely ignore the prospect of systems out that that can deliver mass internet worms as we've seen in previous years.
Change is certain; progress is not obligatory.
>Editor's note: the story is being updated as we learn more. We have moved this story up on the front page.
Progress! Better than 4 stories about the same thing each with 6 comments.
is so old.
It's not like we accidentally gave botnet creators millions of more devices to use as processing power for DDoS. Right?
For users in hardcoded favs @ TOP of hosts via APK Hosts File Engine 9.0++ SR-4 32/64-bit https://www.google.com/search?...
Ads rob speed, security (malvertising) & privacy (tracking).
Hosts add speed (hardcodes/adblocks), security (bad sites/poisoned dns), reliability (dns down), & anonymity (dns requestlogs/trackers) natively.
Works vs. caps & PUSH ads.
Avg. page = big as Doom http://www.theregister.co.uk/2... & ads = 40% of it.
Hosts != ClarityRay blockable (vs. souled-out to admen inferior wasteful redundant slow usermode addons)
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus (slows you) + less security issues/complexity.
Compliments firewalls (blocking less used IP addys vs. hosts blocking more used domains) & DNS (lightens dns load).
Gets data via 10 security sites.
APK
P.S. - Safe https://www.virustotal.com/en/... (Verified by Malwarebytes' S. Burn "seen the code & it's safe" http://forum.hosts-file.net/vi... )
Prep the propaganda machines! Must get them running before Trump wins the presidency!
Did you ever cache the entire internet file, and how often is that file updated?
“The 1980s are now calling to ask for their foreign policy back because the Cold War’s been over for 20 years.”
–President Obama, during the third presidential debate, Oct. 22, 2012
When we created the Internet (ARPA) we had local DNS files, and would only download fresh copies of other DNS when we needed them, or on a periodic basis.
Maybe we should go back to that, and cut off entire countries when they DNS attack us?
-- Tigger warning: This post may contain tiggers! --
That does seem like something the US would do: try to take retaliatory international action, end up shooting itself in the foot. We've never been particularly good at international relations.
"First they came for the slanderers and i said nothing."
star trek online having issues lagggy real bad whine its not like that ever this bad
I currently cannot access speedtest.net, among many other sites. First thought my router is messing thigs up, rebooted it but did not help.
This is an act of WAR! Russia is behind this! And China too, and surely more of those treacherous BRICS countries!!!
It will not go unpunished!!!
An ode to WAR!!! Under President Clinton we will CRUSH those upstarts BRICS countries, conquer them and take their ill-managed resources for OUR benefit!
We cannot fail with the leadership of Our Great President Hillary Clinton! Huzzah! WAR! WAR! WAR!
RIGGED!
Not that I care much. I have 2 twitter accounts, one for my cat and one so I can keep up with the latest inane things that Jeremy Clarkson, Neil DeGrasse Tyson and John McAffee say and McAffee is kind of annoying so I'm thinking of unfollowing him
I'm sure the NYTimes will be up by the time I want to click on a link to them if they're not up already.
Reddit seems to be working as does Fark, YouTube and Netflix. I know those last three weren't mentioned but I frequent those sites.
Disqus is down if anyone but trolls care.
LOL, I just put in nytimes.com and got an attempted browser hijack. I got about 5 pop-ups trying to scare me. I managed to close them too fast to read exactly what they said.
Beanstalkapp is down for us here (prairie region of Canada). Beanstalkapp is a git repository similar to GitHub and Bitbucket, kinda important when you are a development shop. Twitter is down too. Current time is 1:30pm MDT.
Also down apparently is isitdownrightnow.com. Well played, sir.
gist.github.com has browser DNS issue. pdfkit.org has a cloudflare dns issue. I'm in Austin TX on Time Warner Cable.
gist.github.com’s server DNS address could not be found.
DNS_PROBE_FINISHED_NXDOMAIN
and pdfkit.org
Error 1001 Ray ID: 2f571286803458cd 2016-10-21 19:21:26 UTC
DNS resolution error
No doubt this is step one of Crooked Hillary's nefarious plan to assume power, aided and abetted by the Obama regime, who are no doubt behind this, aided by George Soros, climate-scientists, transsexuals, and other assorted leftists ...
...in the last few days, impeding the flow of information on a huge scale prior to the election shouldn't surprise anyone! Note that only US is affected. And look at who is affected: social media sites primarily. I don't see government or brick & mortar sites in that URL list.
"Hellary" must my protected - at all costs: productivity and the dissemination of information & truth be damned.
The problem is this:
...
Github.com:
Name Server: NS1.P16.DYNECT.NET
Name Server: NS2.P16.DYNECT.NET
Name Server: NS3.P16.DYNECT.NET
Name Server: NS4.P16.DYNECT.NET
There's nothing wrong with having all your DNS servers under the same subdomain. What matters is what IP addresses those names resolve to. I've seen primary and secondary DNS servers that aren't even on different IPV4 subnets, never mind geographically distant ones.
The Guardian is down, too, though -- and that really is a bête noir of the 4chan crowd!
CAPTCHA: revenge (ISYN)
because if Russia _could_ do it, then they will jump at the chance to accuse them, knowing it's complete bullshit as usual.
major economics conference live streaming via livestream.com also knocked out.
Fri Oct 21 16:04:09 EDT 2016
- We are an enterprise user of Dyn's DNS, including their failover Traffic Manager
What's down
- All DNS lookups, effectively our A records and as such Mail, DNS, VPN, WWW
What's working:
Dynect is working but their NS are not.
EOM
The next thing to look at is whether or not this is just a dress rehearsal for a real attack. My guess is that this is just a test... They want to know what it takes to shut down a chunk of the internet. Next time will be the real act of 'terrorism'.
Sometimes boldness is in fashion. Sometimes only the brave will be bold.
dns resolution loop
And your POTS/ISDN, plus have a working copy of uucp.
It is actually the Russians attempting to protect The Donald from himself.
Most of your internet problems can be solved today with OpenDNS. https://use.opendns.com/
I can access Github, Twitter, etc. right now after I updated my dns settings. It is literally a one minute fix.
Thanks god dailystreamz.com is still working, I will watch movies online all this weekend :D
Oooh, Putie, we're gonna EMBARRASS you guys so hard! Ya'll gonna be so red in the face!
Boys, war has changed.
Or it was intentional.
More manufacturing of consent for conflict with russia.
Time to demand recalls of all affected devices as the hazards that they are. Those who wish to keep them become responsible for what they do -- if your IoT "cloud" shits all over the network again, you get switched off.
If the end users don't care (and may not be able to care if they can't patch the devices), then it has to go a step up the food chain. If the manufacturers won't comply, pull their FCC certifications.
How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
It is best to assume your not anonymous, particularly given a certain set of circumstances, but that is not a good reason not to aim for anonymity. I utilize radios to communicate with other people in the town where I live. It's completely decentralized. It's not encrypted. It's not going to solve the anonymity problem and we're certainly all on the governments radar already even if they're only selectively persecuting people (government doesn't like people who promote concepts like independence, civil disobedience, the concept of non-violence, etc, so instead the do things like spread rumours and twist words to make people look like paedophiles, and then conduct raids on the people *who attacked the FBI for distributing child porn*, mind you this is a person whom has his own radio show aired across 170 stations and online during prime time hours). None of this though means we shouldn't shoot for anonymous non-back-doored computers or give up our GPG keys or do any of the other things that may interfere with the ability of the NSA to conduct mass spying on the american people or for that matter selective spying.
The way z.cash works it isn't psudo-anonymous like dash. It's why it's actually pretty exciting. Check out the math behind it. Even if you were to compromise an individual system it won't reveal other people's transactions.
What makes BitCoin exciting is not its anonymity, but it's removal of centralized control. When you can transfer thousands of dollars to someone without having to ask permission that's revolutionary. I can pay my employees without having to deal with the banks whom are tightly controlled by the government.
For users in hardcoded favs @ TOP of hosts via APK Hosts File Engine 9.0++ SR-4 32/64-bit https://www.google.com/search?...
Ads rob speed, security (malvertising) & privacy (tracking).
Hosts add speed (hardcodes/adblocks), security (bad sites/poisoned dns), reliability (dns down), & anonymity (dns requestlogs/trackers) natively.
Works vs. caps & PUSH ads.
Avg. page = big as Doom http://www.theregister.co.uk/2... & ads = 40% of it.
Hosts != ClarityRay blockable (vs. souled-out to admen inferior wasteful redundant slow usermode addons)
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus (slows you) + less security issues/complexity.
Compliments firewalls (blocking less used IP addys vs. hosts blocking more used domains) & DNS (lightens dns load).
Gets data via 10 security sites.
APK
P.S. - Safe https://www.virustotal.com/en/... (Verified by Malwarebytes' S. Burn "it's safe" http://forum.hosts-file.net/vi... )APK Hosts File Engine 9.0++ SR-4 32/64-bit/b
You missundertsand me. It's not good to advertise something for anonymity because it leads to a false sense of security which is a bigger issue than anonymity. When people assume they're not anonymouse, they are more cautious and use better obfuscation.
But compromising the vast majority would. If you can watch the vast majority of end points (because you got a worm similar to msblaster's potency out, you've now got massive control over everything which is what I was pointing out).
I can do that already.
To be honest, I never really had to 'deal' with the banks, they just 'worked' and I never had to worry too much about the particulars of managing incoming and outgoing because I just set the limits with the bank and 2nd factor authentication, checks etc. that I wanted. I have most of my HR handed off to an external HR company, including managing people's pay and taxes because I have other things to worry about during business.
Change is certain; progress is not obligatory.
See subject: My 50 favorite sites hardcoded @ top of hosts cached in local system RAM beats DNS issues galore https://news.slashdot.org/comm... (enumerated 12++ categories w/ 100's of examples from reputable sources) running in kernelmode speed too.
This is YET another fail for DNS in this article's topic AS DNS HAS FAILED YOU!
Of course, to where I spend the MOST time online (favorite sites)? I go faster resolving them vs. remote DNS (for less power + resource usage & less complexity room for exploit/breakdown/fails as this article's another 'example thereof' of, lol).
The GOOGLE link I posted points to it as result #1 & by now, it all should be sorted/fixed!
APK
P.S.=> I 9/10 times post on hosts where they apply & it's Occam's Razor illustrated as simplest solution (that works doing more for less in hosts' case) - usually the best answer!
Hosts are, for more speed, security, reliability for far less & more anonymity on those grounds alone... apk
http://107.22.171.143/?s=Download/
* FYI - 107.22.171.143 = Malwarebytes' hpHosts (it's on that page in the linked url above, as they directly host it)
APK
P.S.=> There you go - enjoy... apk