logoalt Hacker News

dangoodmanUTyesterday at 11:04 PM2 repliesview on HN

It almost feels like writing about this is exactly what the attacker wants: Free validation and advertisement for exactly what their botnet can do


Replies

creatonezyesterday at 11:10 PM

Is this a sign that

A: Cloudflare is feeding the trolls because they think that they are invincible. Or: These post-mortems don't establish any proof that the attack was successful, especially if they are covering DDoSes that were barely even noticed by the public until CF publishes a blog post 1 month later -- so it's actually embarrassing for them and hurts their ability to market botnets for rent, at least once they no longer have the literal world record.

B: Cloudflare is feeding the trolls for free testing scenarios to improve the mitigation

C: The trolls don't really care if you feed them, large DDoS is something that's happening all the time anyways

show 1 reply
v5v3today at 8:55 AM

But now the ip's of their botnet are known, the bot net is weakened.

Also it makes no sense - why throw 7.3tbps at a server, when half of that or less would have the same effect and not exposed your botnet.