GitHub hit by DDoS attack2015-03-30 09:51 by DanielaTags: GitHub, DDoS
The world's largest code repository, GitHub, was hit by distributed denial-of-service (DDoS) attacks that sent huge amounts of Web traffic to the site. The attacks, considered the largest in the site's history, started on Thursday morning (March 26) and caused the service to appear unavailable to many users since then. Reportedly, the attacks have originated in China and have been targeted against two particular Chinese anti-censorship projects hosted on GitHub. "Eighty-seven hours in, our mitigation is deflecting most attack traffic. We're aware of intermittent issues and continue to adapt our response," a tweet from the GitHub Status account said on Sunday. "Based on reports we've received, we believe the intent of this attack is to convince us to remove a specific class of content." According to a security researcher at Insight Labs, the DDoS has been achieved by injecting JavaScript code by "a certain device at the border of China's inner network and the Internet" every time when people visit the Baidu search engine. Thanks to that injected code, the user's browser requests two GitHub URLs: https://github.com/greatfire/ and https://github.com/cn-nytimes/. Having in mind that Baidu has millions of users, the multiple requests have easily led to a DDoS on GitHub. According to a Baidu spokesman, the company had investigated the case and found no evidence for a security problem on Baidu's side or a hacking attack. "We have notified other security organisations and are working to get to the bottom of this," the spokesman said. Read more -here-
Post your review/comments
rate:
avg:
|