Slashdot Mirror


Several Sites Including Twitter, GitHub, Spotify, PayPal, NYTimes Suffering Outage -- Dyn DNS Under DDoS Attack [Update] (techcrunch.com)

Several popular websites and services are down right now for many users. The affected sites include Twitter, SoundCloud, Spotify, and PayPal among others. The cause appears to be a sweeping outage of DNS provider Dyn -- which in turn is under DDoS attack, according to an official blog post. From a TechCrunch report:Other sites experiencing issues include Box, Boston Globe, New York Times, Github, Airbnb, Reddit, Freshbooks, Heroku and Vox Media properties. Users accessing these sites might have more or less success depending on where they're located, as some European and Asian users seem not to be encountering these issues. Last month, Bruce Schneier warned that someone was learning how to take down the internet. Update: 10/21 14:41 GMT by M : Dyn says that it has resolved the issue and sites should function normally. Update: 10/21 17:04 GMT by M : Department of Homeland Security says it is aware of the first DDoS attack on Dyn today and "investigating all potential causes." Dyn says it is still under DDoS attack. News outlet The Next Web says it is also facing issues. Any website that uses Dyn's service -- directly or indirectly -- is facing the issue. Motherboard has more details. Update: 10/21 17:57 GMT by M : It seems even PlayStation Network is also hit. EA Sports Games said it is aware of the issues in live-play. Dyn says it is facing a second round of DDoS attacks.

Update: 10/21 18:45 GMT by M : U.S. government probing whether east coast internet attack was a 'criminal act' - official.

Editor's note: the story is being updated as we learn more. The front page was updated to move this story up. Are you also facing issues? Share your experience in the comments section below.

146 of 264 comments (clear)

  1. Twitter Down by Feneric · · Score: 5, Funny

    It's hard to tweet that Twitter is down when Twitter is down.

    1. Re:Twitter Down by Big+Hairy+Ian · · Score: 4, Funny

      But if Google+ went down would anybody notice :D

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

    2. Re:Twitter Down by ausekilis · · Score: 2

      If a tree falls in the forest and lands on a mime, does anybody care?

    3. Re:Twitter Down by rickb928 · · Score: 3, Interesting

      "But if Google+ went down would anybody notice :D"

      Some, who value more enlightened discussions, or resent the FB data grabs, and the FB way of ignoring your preference to see what has happened in your sphere most recently and instead try to force feed you what THEY think is most relevant.

      Relevance being defined by THEM, to THEIR purposes.

      G+ isn't big. That's not even the best thing about it. You, however, I doubt have even actually used it beyond a single visit and thinking 'wow, there's no one here'. You were not missed.

      --
      deleting the extra space after periods so i can stay relevant, yeah.
    4. Re:Twitter Down by Anonymous Coward · · Score: 1

      If a tree falls in the forest and lands on a mime, does anybody care?

      Hell yes I care. I would pay cash money for tickets to that show.

    5. Re:Twitter Down by iONiUM · · Score: 1

      Well at least Slashdot is sti

    6. Re:Twitter Down by whoever57 · · Score: 1

      If a tree falls in the forest and lands on a mime, does anybody care?

      I am reasonably confident that the mime would care.

      --
      The real "Libtards" are the Libertarians!
    7. Re:Twitter Down by Darinbob · · Score: 1

      I checked, it's still up.

  2. XKCD is down... by moosehooey · · Score: 1

    The main page loads but the comic image itself doesn't work.

    1. Re:XKCD is down... by Big+Hairy+Ian · · Score: 1

      Works for me https://xkcd.com/241/

      --

      Build a Man a Fire, and He'll Be Warm for a Day. Set a Man on Fire, and He'll Be Warm for the Rest of His Life.

    2. Re:XKCD is down... by Holi · · Score: 1

      Seems to be affecting those on the Easet Coast US the most.

      --
      Sorry, teleporters just kill you and then make a copy. A perfect, soul-less copy.
  3. Dns by fluffernutter · · Score: 1

    These large sites couldn't host their own dns? Really?

    --
    Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    1. Re:Dns by omnichad · · Score: 3, Informative

      The thing about DNS is that to get the best speed, you want the nodes distributed as far and wide as possible. And you don't want it on the same servers as your main service. So it's either a different department or a different company - guess which one is cheaper.

    2. Re: Dns by fluffernutter · · Score: 1

      I can't see milliseconds making that big of a difference. Especially for a music streaming site where most of it is a long transfer. Oh well you get what you pay for it guess.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    3. Re:Dns by guruevi · · Score: 1

      If it were truly distributed this wouldn't happen as DNS has inherent failovers. This is just an example of using "the cloud" box.net and other enterprise cloud software is also down. They're all using the same providers which is not as distributed as it promises.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    4. Re:Dns by unimind · · Score: 1

      Yeah, I thought DynDns was for small-timers trying to avoid paying for static IPs to provide services. Paypal? Hopefully now they will consider paying someone who knows what they're doing to set up actual distributed DNS for themselves. They really should be able to afford it.

      --
      The following statement is true: The previous statement is false.
    5. Re:Dns by Ash-Fox · · Score: 2

      Yeah, I thought DynDns was for small-timers trying to avoid paying for static IPs to provide services

      It is. That's why the big websites are using dyn.com as opposed to dyndns.org.

      --
      Change is certain; progress is not obligatory.
    6. Re: Dns by omnichad · · Score: 1

      Try an ISP DNS server sometime. Before I remembered to change DNS after upgrading my router, I would get 2+ seconds of latency on every single page load before anything would happen at all. Even running my own DNS server and every query going straight to the root servers takes less time than that.

    7. Re:Dns by omnichad · · Score: 1

      DDoS attacks are distributed too - it's in the name. And each bot will hit the closest server if the DNS system is using Anycast or similar.

    8. Re:Dns by guruevi · · Score: 5, Insightful

      Yes, but the problem here is all these services are using a singular DNS service which is under attack.

      A good decade and a half ago, when I was part of a hosting company, we had the DNS for our customers across 3 or 4 different providers. That way, if for whatever reason one provider went out of business, the domains would continue to operate.

      The problem is this:
      Github.com:
            Name Server: NS1.P16.DYNECT.NET
            Name Server: NS2.P16.DYNECT.NET
            Name Server: NS3.P16.DYNECT.NET
            Name Server: NS4.P16.DYNECT.NET

      Twitter.com
            Name Server: NS1.P34.DYNECT.NET
            Name Server: NS2.P34.DYNECT.NET
            Name Server: NS3.P34.DYNECT.NET
            Name Server: NS4.P34.DYNECT.NET

      Box.net
      Name Server: ns3.p05.dynect.net
      Name Server: ns1.p05.dynect.net
      Name Server: ns2.p05.dynect.net
      Name Server: ns4.p05.dynect.net

      If for whatever reason DynDNS pulls the plug (which they have a history of for reasons of profit and incompetence), all these sites are down. It doesn't matter whether or not you're using Unicast or Anycast, if your provider 'dies' (or it's host providers like Amazon which also has a history of major outages) then your domain dies. And before you get all your glue records fixed, you're out at least 48-72 hours.

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    9. Re:Dns by guruevi · · Score: 1
      --
      Custom electronics and digital signage for your business: www.evcircuits.com
    10. Re: Dns by phantomfive · · Score: 1

      What dns do you us now? I am unhappy with mine, because sometimes it adds seconds of latency to each page load.

      --
      "First they came for the slanderers and i said nothing."
    11. Re:Dns by sexconker · · Score: 1

      Why aren't they:

      1) Running an internal DNS server for their internal shit.
      2) Pointing that DNS server to a public DNS server.
      3) Pointing the public DNS server point to the root DNS servers.

      1 shouldn't be hit by a DDoS as it should be entirely limited to access within your network (or VPN).
      2 can be as distributed as you need it to be.
      If 3 goes down, no one will blame you.

      If this is what they're doing then dyn is failing hard at step 2.

    12. Re:Dns by omnichad · · Score: 1

      I don't disagree with any of that. A company that large should be using multiple.

    13. Re: Dns by RealGene · · Score: 1

      Ironically, I use Dyn's (216.146.35.35), with Google (8.8.4.4) as secondary.

      --
      Mission: To provide products that consume time and energy as entertainingly as permitted by the laws of thermodynamics.
    14. Re:Dns by chispito · · Score: 1

      Yes, but the problem here is all these services are using a singular DNS service which is under attack.

      Well it doesn't take a genius to see that won't be the case much longer.

      --
      The Daddy casts sleep on the Baby. The Baby resists!
    15. Re:Dns by JesseMcDonald · · Score: 1

      That's why the big websites are using dyn.com as opposed to dyndns.org.

      They're the same thing. The dyndns.org domain has been obsolete for a while now, and redirects to dyn.com.

      --
      "The state is that great fiction by which everyone tries to live at the expense of everyone else." - Bastiat
    16. Re: Dns by i.r.id10t · · Score: 1

      Actually a good use of a raspberry pi for your home network at least. Mine does DHCP duty as well as DNS - caching for the World, spoofing a few domains for ads, and a non-real domain for my home network.
       

      --
      Don't blame me, I voted for Kodos
    17. Re: Dns by phantomfive · · Score: 1

      That's a good idea.

      --
      "First they came for the slanderers and i said nothing."
    18. Re:Dns by Ash-Fox · · Score: 1

      Renesys was acquired by Dyn, the dynamic dns services are a completely seperate system and infrastructure.

      --
      Change is certain; progress is not obligatory.
    19. Re: Dns by omnichad · · Score: 1

      I actually just run BIND on a server on my LAN and that's still faster than my ISP. You can also always use Google's 8.8.8.8 and 8.8.4.4.

  4. Re:Great! by ScentCone · · Score: 4, Informative

    Hopefully they never come back up! It would be great to live in a world with the above gone.

    Right! Because we sure wouldn't want small businesses to be able to do business using a payment mechanism they choose to use, or people to conveniently communicate from their phones using a service they choose to use, or listen to music from a source they choose to use. Definitely, all such things should be destroyed. What the hell is wrong with you?

    --
    Don't disappoint your bird dog. Go to the range.
  5. Internet faster than usual... by Anonymous Coward · · Score: 1

    Interesting how a DNS failure that makes several big-name websites unaccessible seems to have resulted in my internet being faster than usual...no shit 3rd party links to slow it down?

    1. Re:Internet faster than usual... by omnichad · · Score: 2

      Unresponsive DNS queries would make pages slower if they relied on them. It's just that your neighbors aren't using their favorite web sites, leaving you with some extra bandwidth.

  6. Box.com is Down by Dust038 · · Score: 1

    Seems like Box.com is down also

    1. Re:Box.com is Down by Dust038 · · Score: 1

      Box is Back Up.

    2. Re:Box.com is Down by slazzy · · Score: 1
      --
      Website Just Down For Me? Find out
  7. Gotta love the cached DNS by Karl+Cocknozzle · · Score: 1

    ....I'm bumping along nicely on Spotify right now... Must have cached the DNS entries since I go there a lot.

    --
    Who did what now?
  8. "Sweeping Outage"??? by Goose+In+Orbit · · Score: 1, Informative

    According to Dyn: "This attack is mainly impacting US East and is impacting Managed DNS customers in this region."

    The PC in my flat (in the UK - on a free dyndns.org address) is alive and well and talking to the outside world.

    As usual - someone has assuming that the US = the whole world - learn some fucking geography!

    1. Re:"Sweeping Outage"??? by DNS-and-BIND · · Score: 1

      Congratulations for earning the "Eurotrash idiot of the thread" award. I didn't think a technical story like this could get the award, but you nailed it. Maybe you need to stop reading US websites. Read European technology websites, like, uh, I'm not really sure, but I'm sure they're there and a thousand times better than Slashdot.

      --
      Shutting down free speech with violence isn't fighting fascism. It IS fascism!
    2. Re:"Sweeping Outage"??? by kodabmx · · Score: 2

      LOL says an anonymous douchebag in the world's most hated country... SMH.

    3. Re:"Sweeping Outage"??? by Ryanrule · · Score: 1

      russiaarabia?

    4. Re:"Sweeping Outage"??? by Ash-Fox · · Score: 1, Insightful

      The PC in my flat (in the UK - on a free dyndns.org address) is alive and well and talking to the outside world.

      Dyndns.org is unrelated to dyn.com, so, I don't know what point you're rying to make.

      --
      Change is certain; progress is not obligatory.
    5. Re:"Sweeping Outage"??? by Sandman1971 · · Score: 1

      I have a few buddies in France and Italy that are affected by this DDOS. So far in my part of Canada I don't seem to be affected *knock on wood*

      --
      It's better to burn out than to fade away
    6. Re:"Sweeping Outage"??? by JesseMcDonald · · Score: 2

      Dyndns.org is unrelated to dyn.com

      If they're unrelated, why does http://dyndns.org/ redirect to http://dyn.com/? DynDNS is just an obsolete brand name for the same service from the same company, which now refers to itself simply as Dyn.

      --
      "The state is that great fiction by which everyone tries to live at the expense of everyone else." - Bastiat
    7. Re:"Sweeping Outage"??? by pr0fessor · · Score: 1

      I've never been there but I hear it's less than half the size of Texas and more than twice the number of people... it must be fairly crowded.

    8. Re:"Sweeping Outage"??? by Ash-Fox · · Score: 1

      If they're unrelated, why does http://dyndns.org/ redirect to http://dyn.com/?

      Because Renesys was acquired by Dyn, do I really have to spell out everything?

      --
      Change is certain; progress is not obligatory.
    9. Re:"Sweeping Outage"??? by Cederic · · Score: 1

      Plus, of course, theinquirer.net

  9. Re: Great! by ScentCone · · Score: 4, Insightful

    You really need to be less of an absolutist

    See, my perspective is that you absolutely should have the choice to use PayPal or Square or what have you, if you choose to. You ... absolutely think they should be shut down? In what way am I over-reacting to someone who thinks that Twitter should go away? Why not simply offer a better choice, or at least ignore the thing they don't like? The world view that calls for the destruction of businesses that whiners resent or wish were different is a fundamental problem with our current culture. So yes, it's worth reacting, and pointing out the baseline trollishness of such perspectives. Because the little baby tyrants that live inside people who think like that are poisonous to everyone. "I don't like that thing! I hope it dies!"

    No, I'm not confused. But I see that you're trying very hard to avoid the big picture.

    --
    Don't disappoint your bird dog. Go to the range.
  10. DynECT is a dinosaur by Anonymous Coward · · Score: 5, Interesting

    Working at a medium traffic startup, DynECT always insisted that their service was worth a lot[1] more money than AWS's Route 53 or Google's Cloud DNS because unlike AWS or Google they had never had a service outage and boasted 100% uptime since their company was founded.

    Looks like we made the right choice going with Route 53 instead of these guys.

    1. Seriously, they wanted 5,000 USD/mo when AWS charges 8 USD/mo for the same service.

  11. Starbucks is down too by known_coward_69 · · Score: 4, Funny

    Tried to reload my card via the app and couldn't. had to pay for my drink with a credit card. The shame

    1. Re:Starbucks is down too by sinij · · Score: 4, Funny

      Tried to reload my card via the app and couldn't. had to pay for my drink with a credit card. The shame

      Did you drop your monocle into chardonnay^H^H^H^H Google Glass into your frappe because of that?

    2. Re:Starbucks is down too by kodabmx · · Score: 1

      It's called cash. A neat low tech payment method that doesn't cost anything to use!

    3. Re:Starbucks is down too by ausekilis · · Score: 2

      Oh the horror!
      I had a similar experience. (it's safe for work, promise)

    4. Re:Starbucks is down too by LunaticTippy · · Score: 2

      That is a common misconception. Anyone who has to pay for people to handle cash knows that it is not free. It depends on particulars of the business, but in general cash is somewhere between the cost of debit card and credit card fees. You can learn about it from this article [pdf warning]

      --
      Man, you really need that seminar!
    5. Re:Starbucks is down too by Anonymous Coward · · Score: 1

      That is a common misconception. Anyone who has to pay for people to handle cash knows that it is not free. It depends on particulars of the business, but in general cash is somewhere between the cost of debit card and credit card fees.

      Ha! That's from a bank who makes profits of those cards. Over 1/3 of the cost of cash listed there was in bank fees from depositing the cash. Spend that cash instead of using checks and credit cards and that fee goes away. Honestly, did you really thank a bank would tell you the true store?

    6. Re:Starbucks is down too by Cederic · · Score: 1

      Are you a fucking imbecile?

      You really think a corner shop, a bar, the local butcher is going to take their $2000 daily revenue and dispose of it?

      Most of that goes straight into the bank. Shit, you don't want a week's earnings sat in the safe.

  12. Re:Great! by ScentCone · · Score: 4, Insightful

    Paying money every month for a couple of sine waves coming out of a cheap tinny Chinese speaker.
    Paying money to paypal for the privilege of paying. Paypal fees are f**ing ridiculous

    Here's an idea: don't use those services.

    Obviously you are personally running a much better music streaming service that you'd like to offer to Spotify's millions of customers. Can you provide a link to something that they will find persuasive? I'm sure your system is easier to use, less expensive, widely available, performs well, pays the artists who create the material they license to you, and in all other ways is superior to Spotify. Looking forward to your offering! Right? Yes?

    And, obviously you have never been involved in any sort of commerce there in your mom's basement. Or, are you offering the infrastructure, security, staff, and other resources that will allow individuals and businesses the means by which to handle financial transactions on the fly, a million times a day, but at no cost to any party involved? Fantastic! Please provide a link to that other service of yours, too. That would be awesome. Right? Yes? No? I see.

    --
    Don't disappoint your bird dog. Go to the range.
  13. Re:Great! by stealth_finger · · Score: 4, Insightful

    Paying money to paypal for the privilege of paying. Paypal fees are f**ing ridiculous

    Ha, you should check out the bank fees.

    --
    Wanna buy a shirt?
    https://www.redbubble.com/people/stealthfinger/shop?asc=u
  14. Re:Great! by Maritz · · Score: 1

    Hopefully they never come back up!

    It's weird that you would state a hope like that, because it's not going to happen, is it?

    --
    I do not want your cheap brainburning drugs. They are useless for work. And I am a working man today.
  15. Re:Great! by ScentCone · · Score: 4, Insightful

    Torrent, cryptocurrency. Spotify uses DRM. DRM is evil. I am surprised to see someone on Slashdot supporting these muppets.

    I'm supporting your CHOICE to use whatever services you like, and to move to something else if you prefer. Wishing for the destruction of such services by a malicious third party is BS. If you want them to go away because you philosophically disagree with, say, musicians choosing to whom they license their works ... then offer a service that musicians like better. Some don't license their works to Spotify. That's different than cheering when some script kiddies act to destroy access to it.

    --
    Don't disappoint your bird dog. Go to the range.
  16. Re:Great! by Foundryman · · Score: 1

    Hey, I'm on board with people being able to use what they choose! Just gotta make sure those choices are all ones that I also like.

  17. Re:Great! by houghi · · Score: 1

    Some people just want to see the world burn.

    --
    Don't fight for your country, if your country does not fight for you.
  18. Disqus also down for about 15 minutes by neo-mkrey · · Score: 1

    But it is backup and functioning again.

  19. The eternal balance question... by ErichTheRed · · Score: 1

    I've been doing end user computing for quite a while, and we've gone through so many cycles of "where the client intelligence lives" or "where the virtual desktop is hosted" and everyone oscillates between two extremes. PCs to zero clients usually ends up being a mix of laptops and thin clients in the end. All VDI ends up being some VDI after some very expensive POCs in most cases. I guess the same debate of "host it yourself vs. rely on a cloud provider" is alive and well here. I see it every day where I work -- the management is all about cloud, and the staff are fine with some cloud, but going all the way over to total dependence on a third party is not great in my mind.

    Something as fundamental as DNS should probably at least have some footprint in your "locus of control." I didn't say "in your office" but fundamental stuff that could completely kill everything else if you lost it shouldn't be given over to a third party that you don't directly control. In this case, Dyn had a DDoS attack, and on-premises DNS could too. But having a way to run both off and on premises makes good sense...if one entity is having a bad day, the other could at least keep things alive. However, all this old school DR stuff is lost in the world of the cloud and startups. It all comes down to how much in dollars or reputation the loss of a service costs the company...if you can quantify that and the number exceeds the cost of mitigation, businesses would be stupid not to put something in place to mitigate it.

    1. Re:The eternal balance question... by ZenShadow · · Score: 4, Insightful

      The dynamics of this issue have changed considerably.

      Five years or so ago, going offline was a Big Deal. Nowadays, people (both users and CxO's) don't seem to care as much; outages are transient, and accepted as a part of the cost of doing business. It's kinda sad for those of us who build high availability systems, but at the same time it's probably a lot more realistic for the budgets of most businesses.

      Part of it, IMO, is that the Internet has been around long enough now (in a commercial sense) that the users are finally more prone to saying "my Internet is down" than "my Twitter is down".

      Perception is everything.

      --
      -- sigs cause cancer.
  20. Re:How is this a thing? by ZenShadow · · Score: 1

    Sites have control of their own cache expiration/refresh times. Major sites also have a tendency to use DNS for geographic load balancing, which can screw with this (and is one of the main reasons sites continue to use Dyn).

    --
    -- sigs cause cancer.
  21. Re: Great! by ScentCone · · Score: 2

    You can't conceive of an individual or gradiated reaction

    So what is your "gradiated" take on whether or not malicious script kiddies should burn down Twitter's DNS provider? Personally, I think that's a black and white issue. I responded to someone who was cheering on the script kiddies doing the damage. You, with your advanced and clearly superior intellect and sense of nuance, obviously think it's kind of OK that the script kiddies wreck things like that. Can you elaborate please? Be sure to use simple words to describe the part where launching a DDoS like that is a good thing, so that us simpletons can keep up with your anonymous, cowardly self as you teach us more about our irrelevance. Or will explaining the ethical merits of the DDoS attack on Dyn fail to provide you with a proper venue for your pretentious faux condescension? I'd hate for you to have to just simply get to the point - that might hurt your tender, advanced, nuanced feelings.

    --
    Don't disappoint your bird dog. Go to the range.
  22. Re:Great! by ScentCone · · Score: 1

    Hey, I'm on board with people being able to use what they choose! Just gotta make sure those choices are all ones that I also like.

    Meaning ... if you don't like a choice, you don't think other people should have access to it?

    --
    Don't disappoint your bird dog. Go to the range.
  23. Twitter is working good here by FudRucker · · Score: 1

    i just been there a moment ago, works fine, pages load quickly and completely

    --
    Politics is Treachery, Religion is Brainwashing
    1. Re:Twitter is working good here by sombragris · · Score: 1

      Twitter still does not resolve here.

      --
      -- Look to the Rose that blows about us--"Lo, Laughing," she says, "into the World I blow..."
  24. Re:Great! by rickb928 · · Score: 1
    --
    deleting the extra space after periods so i can stay relevant, yeah.
  25. Re:Great! by rickb928 · · Score: 1

    Blockchain currencies offer similar security. It's in there.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  26. Re:Great! by rickb928 · · Score: 1

    PayPal *is* a bank in every way that is meaningful for payments tech.

    --
    deleting the extra space after periods so i can stay relevant, yeah.
  27. Re: Great! by PopeRatzo · · Score: 2, Insightful

    You're wasting your breath, ScentCone. Guys like him have declared war on the Internet because Twitter took away Milo Yiannopoulos' blue checkmark, and some female video game critic gave Bayonetta a 7.5/10.

    This is the nihilism that online anonymity and toxic 4chan culture has engendered. They're terrorists who are simply too lazy to leave their moms' basements. That they see themselves as some sort of shit-posting freedom fighters would be very funny if it wasn't so tragic and pitiable.

    --
    You are welcome on my lawn.
  28. That explains this morning by whitroth · · Score: 2

    Forget the sites the articles mention. I was having very serious troubles getting to the Guardian's site, pictures not loading, and worse, I couldn't even log onto my hosting provider.

    Now, I'm on Verizon FIOS, and my system (Linux, a real o/s) couldn't even ping hostmonster.com, it couldn't find the name, until I manual added nameserver 8.8.8.8 (one of google's) to my resolv.conf. Then it started working.

    That tells me that it was overloading nameservers in a *LOT* of places.

              mark

    1. Re:That explains this morning by whitroth · · Score: 1

      Also, I'm wondering how much of this is political - I cannot reach Paul Krugman's blog in the NYT.

              mark

  29. Maybe it's because US "promised" a message to Russ by sperxios10 · · Score: 2
    From this: http://www.wnd.com/2016/10/rus...

    Joe Biden told NBC a “message” would be sent to Russian President Vladimir Putin over the alleged hacking, with the channel saying the CIA was preparing a retaliatory cyber attack “designed to harass and ’embarrass’ the Kremlin leadership.”

    Kremlin spokesman Dmitry Peskov immediately denounced Biden’s remarks, saying Moscow would take precautions to safeguard its interests in the face of the increasing “unpredictability and aggressiveness of the United States”.

  30. Re:DDOS will continue until we decide to stop them by ZenShadow · · Score: 1

    (1) The owner of a device attached to the Internet must make a reasonable effort to maintain it. Specifically, they must install security updates in a timely fashion. In addition, they must disconnect the device if they are unable to maintain it. No device or piece of software lasts forever. You don't get to keep using a PC with Windows XP, or a 10 year old router with dozens of known security holes -- you need to throw them away. Failure to do so will make the owner liable for damages if their device is used in a DDOS attack.

    Useless. New devices are at nearly as much risk as old devices; that it's new should not in any way make you feel secure. You'll also be fighting legitimate businesses with legitimate use cases for, say, Windows '95. Specifically, that their legacy software and drivers have never been upgraded by the people who wrote them, and don't work on newer versions of Windows.

    (2) Network operators shall be required to ensure that packets originating on their network have a valid source address (e.g. use filters at all ingress points). Failure to do so will make them liable for damages related to the DDOS attack.

    (3) Network operators shall be required to provide rapid technical assistance to trace DDOS traffic that is passing through their network, so that it can be traced back to it's source. Failure to do so will make them liable for damages related to the DDOS attack.

    Also useless. The modern day DDoS isn't necessarily about flooding a site with spoofed packets from a small number of high-bandwidth machines. It's about sending a tiny number of legit packets from an enormous number of compromised hosts. No outbound packet filter is going to be able to discern the good from the bad (and since the host is already compromised in the first place, there's no help there either).

    There are exceptions, of course; for example, many IoT devices should be nuked from orbit, as they have no legitimate reason to EVER talk to most web sites.

    I do agree that people should be held accountable for having insecure crap on the Internet and allowing it to participate in attacks. Detection and enforcement, however, is much more difficult than one would think.

    --
    -- sigs cause cancer.
  31. Dyn is still down. by adameros · · Score: 1

    We are a Dyn customer and our names are still failing to resolve.

  32. Re:One reason we need distributed and decentralize by Ash-Fox · · Score: 1

    My company takes BitCoins and users whom had BitCoins wouldn't have been impacted by this outage.

    My company uses GBP and wouldn't have been impacted by this outage either.

    Now we aren't completely decentralized nor distributed, but it's one example of where we are.

    Same as my company.

    Now we've seen numerous times with attacks on piracy sites that adding an onion to your site also makes you more resistant to attack/downtime.

    Indeed, but so it spinning up resilient servers across multiple cloud infrastructures and using CDNs used to protect against a variety of attacks.

    We need BitCoin, BitTorrent, and similar, not less.

    I think we need more diverisfied infrastructure in the cloud, not BitCoin, BitTorrent, and similar. These technologies are significantly wasteful in processing, bandwidth and most importantly, time.

    but it has its value and is one step closer to where we want to be. z.cash and zero coin should solve some of the anonymity and privacy issues with BitCoin unlike psudo-anonymous solutions we've seen before.

    But I don't want unapproved majority people managing the network and dictating how payments work and being capable of deanonymizing - we're better off assuming we're not anonymous on any system, it's a false sense of security. The people that build this decenteralized system and those that buy into it completely ignore the prospect of systems out that that can deliver mass internet worms as we've seen in previous years.

    --
    Change is certain; progress is not obligatory.
  33. Re:Google DNS by Ash-Fox · · Score: 1

    You can use Google's free DNS services to work around this issue

    Nope, it too was broken for certain domains like t.co which is hosted by dyn.

    --
    Change is certain; progress is not obligatory.
  34. Re: Great! by lgw · · Score: 1

    See, my perspective is that you absolutely should have the choice to use PayPal or Square or what have you, if you choose to. You ... absolutely think they should be shut down?

    I have a different perspective. I think Twitter should go away -- that's a moral "should", as I think it encourages people to behave badly -- but I think the fundamental rights of people to make mistake takes is a higher imperative. As much as I will cheer at Twitter's natural death, I can't support some outside force taking away people choice to use it.

    Thus, while Twitter should die, people should have freedom, including the freedom to cause de minimus harm to others, and that's a bigger "should".

    --
    Socialism: a lie told by totalitarians and believed by fools.
  35. Re:Small dick russians by interkin3tic · · Score: 3, Funny

    On the topic of Russians, I'm going to assume that this is Putin trying to help his employee Trump win. If Trump can't tweet, he can't keep reminding voters of all the reasons they want to vote against him. And the only way to keep Trump from tweeting is to take out Twitter.

    It's mainly affecting the east coast, sure, but also Ohio which Trump needs to win.

    Seems like a much more straightforward than using trolling to help him win.

  36. Re:Great! by lgw · · Score: 1

    Your just fighting the GPL vs BSD argument all over again. Might as well argue that Kirk using EMACS can beat up Picard using VI.

    --
    Socialism: a lie told by totalitarians and believed by fools.
  37. Re: Great! by erapert · · Score: 1

    ...the problem is with those companies, whose offenses are well-known. They have engaged [in] evil, of their own volition, not because of their function, but choice.

    Please explain what each of these companies have done wrong.

  38. IoT is great though guys by SmokeyRobot · · Score: 2

    It's not like we accidentally gave botnet creators millions of more devices to use as processing power for DDoS. Right?

  39. Re:Good by SmokeyRobot · · Score: 1

    From what I saw, the issue was with the ad servers not necessarily Slashdot.

  40. Re:Small dick russians by CanEHdian · · Score: 1

    LOL, was going to fake a 'Hillary Clinton for President' campaign Press Release, with the exact same argument that it was Putin's state-sponsored hacking groups preventing Trump from tweeting, but you already beat me to it.

    --
    When the copyright term is "forever minus a day", live every day like it's the last.
  41. We used to keep local DNS by WillAffleckUW · · Score: 1

    When we created the Internet (ARPA) we had local DNS files, and would only download fresh copies of other DNS when we needed them, or on a periodic basis.

    Maybe we should go back to that, and cut off entire countries when they DNS attack us?

    --
    -- Tigger warning: This post may contain tiggers! --
    1. Re:We used to keep local DNS by guruevi · · Score: 1

      Proper practice is to have multiple DNS providers. All of the sites that are currently 'down' have failed best practice we had 20 years ago. The great "cloud" has finally come down to this: https://xkcd.com/908/

      --
      Custom electronics and digital signage for your business: www.evcircuits.com
  42. Re: Great! by bigtomrodney · · Score: 1

    Janeway used gedit, Sisko used Kate but Archer used Windows Notepad.

    --
    I never get used to these constant resurrections
  43. Re:Maybe it's because US "promised" a message to R by phantomfive · · Score: 2

    That does seem like something the US would do: try to take retaliatory international action, end up shooting itself in the foot. We've never been particularly good at international relations.

    --
    "First they came for the slanderers and i said nothing."
  44. Re:Great! by pr0fessor · · Score: 1

    Which service DNS?

  45. Re:Great! by amicusNYCL · · Score: 1

    Paying money every month for a couple of sine waves coming out of a cheap tinny Chinese speaker.

    Real music aficionados such as myself attach a wire directly to the inner ear and use a homemade needle on the other end to manually read the grooves in the vinyl record which I'm turning myself. I would tell you who I'm listening to but you probably haven't heard of them.

    --
    "Our two-party system is like a bowl of shit looking at itself in a mirror." - Lewis Black
  46. Re:Great! by Scarletdown · · Score: 1

    Paying money every month for a couple of sine waves coming out of a cheap tinny Chinese speaker.

    Paying money to paypal for the privilege of paying. Paypal fees are f**ing ridiculous

    Buyers do not pay PayPal anything for the privilege of paying. The sellers pay a transaction fee to PayPal as their payment processor. For a standard account, it is 2.9% of the total amount plus 30 cents. And for a Micro Payments account, it is 5% plus 5 cents. The wash point is $12 (that is where the cost is pretty much the same no matter what type of account).

    And PP's rate for a standard account is pretty much in line with other payment processors. It is just a cost of doing business, and those fees are simply written off on the business's taxes.

    That said, with PP being down, I can make it mostly a light day for me on the 'bay and elsewhere. Because if my buyer's can't pay, they are not going to shop. So that means just a little prep work for the next batch of listings, and then giving myself an early weekend.

    --
    This space unintentionally left blank.
  47. Re: Great! by lgw · · Score: 1

    ...but only the freedom to do what you like

    Yes, you have precisely captured the exact opposite of what I just said. Well put.

    --
    Socialism: a lie told by totalitarians and believed by fools.
  48. Re:Small dick russians by WhiplashII · · Score: 1

    You need to look deeper - it's not that Trump works for Putin; It's that Putin's organization is in competition with Clinton's organization. Putin does not want the competition, even in the US criminal market.

    It's just business, it's not personal.

    --
    while (sig==sig) sig=!sig;
  49. Re:Inb4 US blames Russia by Ryanrule · · Score: 1

    Who do you think would do it? The Chinese aren't as stupid as the Russians.

  50. Re: Great! by Applehu+Akbar · · Score: 1

    If your DNS provider can be burned down by script kiddies, you need a provider who knows something about security.

  51. Re: Great! by DutchUncle · · Score: 1

    Nah, Sisko used TECO. And wrote his own macros.

  52. Twitter is down? Trump must be furious. by surfcow · · Score: 1

    RIGGED!

  53. FWIW, twitter is working for me by No+Longer+an+AC · · Score: 2

    Not that I care much. I have 2 twitter accounts, one for my cat and one so I can keep up with the latest inane things that Jeremy Clarkson, Neil DeGrasse Tyson and John McAffee say and McAffee is kind of annoying so I'm thinking of unfollowing him

    I'm sure the NYTimes will be up by the time I want to click on a link to them if they're not up already.

    Reddit seems to be working as does Fark, YouTube and Netflix. I know those last three weren't mentioned but I frequent those sites.

    Disqus is down if anyone but trolls care.

    LOL, I just put in nytimes.com and got an attempted browser hijack. I got about 5 pop-ups trying to scare me. I managed to close them too fast to read exactly what they said.

    1. Re:FWIW, twitter is working for me by No+Longer+an+AC · · Score: 1

      I meant to add something to the effect that the internet is far from dead.

  54. Re:Great! by christoofar · · Score: 2

    Time to QoS our links to .RU, .CN origin routes.

  55. Beanstalkapp.com by sgrover · · Score: 1

    Beanstalkapp is down for us here (prairie region of Canada). Beanstalkapp is a git repository similar to GitHub and Bitbucket, kinda important when you are a development shop. Twitter is down too. Current time is 1:30pm MDT.

  56. Is isitdownrightnow down right now? by johnslater · · Score: 1

    Also down apparently is isitdownrightnow.com. Well played, sir.

  57. gist.github.com / pdfkit.org are down by michaelcole · · Score: 1

    gist.github.com has browser DNS issue. pdfkit.org has a cloudflare dns issue. I'm in Austin TX on Time Warner Cable.

    gist.github.com’s server DNS address could not be found.
    DNS_PROBE_FINISHED_NXDOMAIN

    and pdfkit.org

    Error 1001 Ray ID: 2f571286803458cd 2016-10-21 19:21:26 UTC
    DNS resolution error

  58. Re: Great! by Zhe+Mappel · · Score: 1

    "Because the little baby tyrants" *snip*

    Brave words in defense of a social media platform that sees fit to disappear ideas and expression that it arbitrarily doesn't like.

    You might give a little thought to the way Valley media platforms now shape public discourse along narrow lines and for what reasons; that is, if the Kool Aid is not too strong in you, young Jedi.

  59. Re:Great! by Curunir_wolf · · Score: 1

    Hopefully they never come back up! It would be great to live in a world with the above gone. Hopefully the FANG companies are next to go.

    You can hate on all those very popular sites all you want, but it's affecting my tiny websites too.

    --
    "Somebody has to do something. It's just incredibly pathetic it has to be us."
    --- Jerry Garcia
  60. Re: Great! by mjwx · · Score: 2

    This is the nihilism that online anonymity and toxic 4chan culture has engendered. They're terrorists who are simply too lazy to leave their moms' basements.

    Calling them "Terrorists" is giving them way too much credit. Terrorists typically believe strongly in something. These people are just losers who have too much time and a far to comfortable life*. They're just losers and idiots with an internet connection. They're not even proper nihilists, they're not contemplating the futility of their own existence... in fact they think the end of the world is running out of pop tarts.

    * Please note, I don't think our society needs to be harder/more authoritarian... in fact I believe it needs to be less authoritarian... but we need to be able to call proper idiots, idiots whilst collectively ignoring the shrill cries of "SJW" and "PeeCee gone Mad" or whatever thought terminating cliche they like to defend their stupidity with. Every now and then, even I have to agree there is an arse missing a boot though.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  61. Addresses matter, not hostnames by nuckfuts · · Score: 1

    The problem is this:
    Github.com:
    Name Server: NS1.P16.DYNECT.NET
    Name Server: NS2.P16.DYNECT.NET
    Name Server: NS3.P16.DYNECT.NET
    Name Server: NS4.P16.DYNECT.NET
    ...

    There's nothing wrong with having all your DNS servers under the same subdomain. What matters is what IP addresses those names resolve to. I've seen primary and secondary DNS servers that aren't even on different IPV4 subnets, never mind geographically distant ones.

    1. Re:Addresses matter, not hostnames by DaHat · · Score: 1

      There is when say... the DNS server which handles authoritative lookups of DYNECT.NET and related sub domains is overwhelmed or down.

    2. Re:Addresses matter, not hostnames by xtsigs · · Score: 1

      In a sense, that is true unless there is an attack, for example, on DynDNS which target, well, dynect.net domains in which case you're screwed.

  62. Re:Great! by mjwx · · Score: 1

    Paying money to paypal for the privilege of paying. Paypal fees are f**ing ridiculous

    Ha, you should check out the bank fees.

    Bank fees are quite reasonable and easily avoided.

    I can only assume that you meant to say credit card fees. They're the killer for a business. Seriously, go and look at how many parties take fees out of a credit card transaction.

    Besides this, PayPal's fees stack with bank fees and credit card fees.

    When you introduce more parties into the mix, each of them has their hand out for a piece of the pie and no-one is willing to give up the tiniest fraction of their slice for the new guy.

    --
    Calling someone a "hater" only means you can not rationally rebut their argument.
  63. Re:Small dick russians by Curunir_wolf · · Score: 1

    Wait - Hillary AND Trump are working for Putin??!! Wow.

    --
    "Somebody has to do something. It's just incredibly pathetic it has to be us."
    --- Jerry Garcia
  64. Re: Great! by BronsCon · · Score: 1

    What's funny is... as bad as people thought 4chan was 6 years ago, it's so much worse now. At least there was some substance to some of what's posted there, at some point... Now? Not so much. The best of 4chan has moved on and the worst has multiplied itself. I still browse there on occasion, much for the same reason I still browse here: hope that the good will come return. Not that there was ever that much good on 4chan to begin with, but what there was was really good.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  65. Re: Great! by BronsCon · · Score: 1

    And he doesn't even realize he was enjoying great freedom in doing so.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  66. Re: Great! by BronsCon · · Score: 1

    I don't think he was defending Twitter so much as defending peoples' right to commit the grand error of using Twitter. He even, later, said as much; he believes Twitter should die, but a natural death, one borne of people realizing it sucks, rather than one borne of a few script kiddies attacking it and taking away the freedom of choice that others currently enjoy.

    In other words, Twitter should die because we, as a society, exercised our freedom of choice to stop using it, not because a few assholes exerted force to take that choice away from us.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  67. Re: Great! by ScentCone · · Score: 1

    Brave words in defense of a social media platform ...

    I'm not defending Twitter, I'm defending YOUR right, and mine, to be free of script kiddies trashing things just because they can. And I was replying to a user here who was cheering on a DDoS attack and hoping it permanently destroyed something he doesn't like. I didn't see that user, or you, proposing or providing an alternative that unicorns its way past your standards.

    So, you don't like SV's social media systems. What have you got designed that will work better? Be specific.

    --
    Don't disappoint your bird dog. Go to the range.
  68. Investigating IF this is a criminal act?? by darkonc · · Score: 1
    At the very least it's criminal mischief -- denying someone the legal use of their property. You can add all sorts of cyber crimes to the pool as well -- like using zombie servers means accessing (hundreds of) thousands of people's computers without authorization or permission.

    The next thing to look at is whether or not this is just a dress rehearsal for a real attack. My guess is that this is just a test... They want to know what it takes to shut down a chunk of the internet. Next time will be the real act of 'terrorism'.

    --
    Sometimes boldness is in fashion. Sometimes only the brave will be bold.
  69. Re: Great! by sakono · · Score: 1

    What does a DDoS attack have to do with security? All a DDoS attack is, is flooding servers with millions of connections a second causing them to freeze up and crash. Security would be making sure no one is able to access information, which so far they haven't.

  70. Re: Great! by ScentCone · · Score: 1

    Yes, he is quite the patronizing little wannabe tyrant. That's the main subtext in all of his posts.

    --
    Don't disappoint your bird dog. Go to the range.
  71. Re: Great! by sakono · · Score: 1

    right someone is watching way to much V for Vendetta to be talking like this.

  72. Re: Great! by ScentCone · · Score: 1

    Yeah, Dyn is just a bunch of clueless amateurs. If only they'd asked you how to mitigate a colossal DDoS flood. You'd tell them: security! Because ... the problem with a publicly exposed service that doesn't work if it's not publicly exposed, is that it doesn't have good enough security to keep the public traffic out. Gotcha.

    --
    Don't disappoint your bird dog. Go to the range.
  73. Re:Great! by BronsCon · · Score: 1

    Oh, how I wish that was true. More hipsters would die trying to perform the body mod themselves because having a brain surgeon do it is too mainstream, and the world would be such a better place.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  74. Re:Great! by BronsCon · · Score: 1

    He wasn't condoning anything, just answering the simple question that was asked: What did these companies do wrong?

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  75. Re:Great! by BronsCon · · Score: 1

    It's pretty simple, really. When the big players are so easy to take down, what hope is there for mom and pop?

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  76. Re:Twitter is down? Trump must be furious. by xtsigs · · Score: 1

    It is actually the Russians attempting to protect The Donald from himself.

  77. Re:Small dick russians by yuriklastalov · · Score: 1

    Of course. The boogeyman's henchmen are legion.

  78. Re: Small dick russians by bestweasel · · Score: 1

    More from that link:

    That story (as well as one published earlier this week, Spreading the DDoS Disease and Selling the Cure) examined the sometimes blurry lines between certain DDoS mitigation firms and the cybercriminals apparently involved in launching some of the largest DDoS attacks the Internet has ever seen. Indeed, the record 620 Gbps DDoS against KrebsOnSecurity.com came just hours after I published the story on which Madory and I collaborated.

    A botnet for hire can be rented by a variety of customers at different times, even nation states.

  79. Re:Great! by sims+2 · · Score: 1

    With the exception that they aren't regulated like a bank so they can place an indefinite hold on the funds in your account for no reason and you have no recourse.

    --
    Minimum threshold fixed. Thanks!
  80. Re: Great! by PopeRatzo · · Score: 1

    Not that there was ever that much good on 4chan to begin with, but what there was was really good.

    I agree, but I also see it as a social experiment that was doomed to failure because anarchic social interaction will always result in the very few who have never learned to play well with others believing they have the right - even the permission - to poison the public well.

    There was never a mechanism to clap back at the shitlords, in other words.

    --
    You are welcome on my lawn.
  81. Use OpenDNS by NotARealUser · · Score: 1

    Most of your internet problems can be solved today with OpenDNS. https://use.opendns.com/

    I can access Github, Twitter, etc. right now after I updated my dns settings. It is literally a one minute fix.

    1. Re:Use OpenDNS by sl3xd · · Score: 1

      So you want to replace one single point of failure with a different one?

      --
      -- Sometimes you have to turn the lights off in order to see.
    2. Re:Use OpenDNS by NotARealUser · · Score: 1

      So you want to replace one single point of failure with a different one?

      It was a suggestion for this the duration of this incident and is not a comment intended to fix any other issues beyond the immediate need. Read the word "today" in the post.

  82. Re:Great! by cjjjer · · Score: 1

    Twitter is useless for anything but propaganda and "i just ate X at Y" posts.

    Must be your narrow mind looking at it.

    I follow lots of local service based accounts from traffic, police, fire, transit, city, utilities, etc. and find them posting information about the current state of things. I maybe have 5 actual people I follow mind you.

  83. Re: Great! by BronsCon · · Score: 1

    Oh, for sure. There were never enough moderators and the few there were were too lax in their duties until the well of shit overflowed and, now, no amount of moderation can save it, I believe.

    --
    APK quotes people (including myself) without context and should not be trusted. Just thought you should know.
  84. Re: Great! by 0123456 · · Score: 1

    If the 'Internet Of Things' wasn't such a swamp of security holes, no-one would need to care.

  85. Re: Great! by Applehu+Akbar · · Score: 1

    DDoS is not a magic death ray that cannot be countered:
    http://www.darkreading.com/att...

  86. Make someone care, IoT device owners don't! by Mal-2 · · Score: 1

    Time to demand recalls of all affected devices as the hazards that they are. Those who wish to keep them become responsible for what they do -- if your IoT "cloud" shits all over the network again, you get switched off.

    If the end users don't care (and may not be able to care if they can't patch the devices), then it has to go a step up the food chain. If the manufacturers won't comply, pull their FCC certifications.

    --
    How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  87. Re:One reason we need distributed and decentralize by Ash-Fox · · Score: 1

    but that is not a good reason not to aim for anonymity

    You missundertsand me. It's not good to advertise something for anonymity because it leads to a false sense of security which is a bigger issue than anonymity. When people assume they're not anonymouse, they are more cautious and use better obfuscation.

    Even if you were to compromise an individual system it won't reveal other people's transactions.

    But compromising the vast majority would. If you can watch the vast majority of end points (because you got a worm similar to msblaster's potency out, you've now got massive control over everything which is what I was pointing out).

    When you can transfer thousands of dollars to someone without having to ask permission that's revolutionary.

    I can do that already.

    I can pay my employees without having to deal with the banks whom are tightly controlled by the government.

    To be honest, I never really had to 'deal' with the banks, they just 'worked' and I never had to worry too much about the particulars of managing incoming and outgoing because I just set the limits with the bank and 2nd factor authentication, checks etc. that I wanted. I have most of my HR handed off to an external HR company, including managing people's pay and taxes because I have other things to worry about during business.

    --
    Change is certain; progress is not obligatory.
  88. Re:Great! by EvilAlphonso · · Score: 1

    They are actually regulated as a bank in Luxembourg, and the results is that they may have to indefinitely hold the funds in your account without telling you exactly why (due to AML regulations).

  89. Re:Great! by nnet · · Score: 1

    awww how cute, you relied on "the cloud", and its broken. that's YOUR fault, no one elses.

  90. Re: Great! by ScentCone · · Score: 1

    We agree on the rights that we agree to protect. Then when someone decides they don't care about that agreement, we agree on what to do about that person if they act in violation of our agreement. If someone outside of our agreement decides they don't care how we operate as a society, and looks to destroy it (or parts of it) for the lulz or for territorial acquisition etc., then we agree on when and to what degree we do something about it.

    You're "that's cute" bit of phony condescension shows you to be just another whiner who likes to pretend we can't decide on and enforce the protection of such things because your notion of what you're entitled to is at odds with everyone else's. Just to help your cause, you're complaining about other people's greed, to fake insulating yourself from anyone else's criticism that you're too lazy to get involved in the defense of the rights we recognize. So, just another anonymously craven, lazy whiner troll who thinks that calling other people cute gets them off the hook for their own intellectual cowardice. Carry on! Just remember you're not kidding anyone.

    --
    Don't disappoint your bird dog. Go to the range.
  91. Re:Great! by swalve · · Score: 1

    Progressives desire progress. When you try to change things for the better, it doesn't always work out how you think it should. Modern progressives are generally quite freedom loving. They do draw the freedom line a little differently- powerful people shouldn't have the power to fuck people over.