Suddenly today I was getting calls about our domain being inaccessible. I was going crazy trying to figure out why some nameservers recognized our domain while others didn’t.
Then I saw the article linked above. Some asshole attacked our registrar, Godaddy.
This screws up our email and some online apps that our employees use, and it’s out of my hands.
I’m conflicted. On one hand, DDOSers suck. On the other hand, the world would be much better off if GoDaddy was destroyed. Can’t they both lose somehow?
Gee, and I just got done threatening Network Solutions that if they don’t straighten up and fly right, I’d go to GoDaddy. Guess I’d better rethink that threat…
Well, for one thing (and possibly the prompt for this attack), they supported SOPA, up until the point when they realized that they were pretty much the only people on the internet that did, then they reluctantly changed their official position to say they opposed it.
So it’s not completely unreasonable to say that people still hosting their sites on GoDaddy chose to keep their sites on a provider that advocated that sits should be able to be taken down at any time with only the flimsiest of justifications, and that’s what they got.
And that’s the purported reason why GoDaddy was attacked. I honestly think that shutting down other sites was a happy coincidence, something that gave the DDOS more publicity.
What pisses me off is that there weren’t any workarounds. My Windows DNS cache didn’t help. My DNS server’s cache didn’t help. Using a whois, which did find the site, didn’t help, as I have no way of forcing Windows to use the IP but still go to the correct site–it instead redirected me to another site. And IPv6 is making this the norm, where in IPv4 it was just a workaround for the dearth of IP addresses.
DNS, such a vital part of the Internet, should not have a fucking single point of failure
That’s funny, is it? Now expressing a position on legislation makes you fair game for a cyber-attack?
I’ll note that supporting Sopa does not amount to saying that any website should be vulnerable for takedown at any time. It facilitated a way for the legal system to interdict illegal activity. Now, whether you might support the specific mechanism provided for under Sopa, it seems to me that it’s perfectly reasonable to give the government the means to interfere with people who are breaking the law, even if it’s on the internet.
Not sure if this is better, as for the reliability of a company, but GoDaddy is reporting now that it was no hacker, it was caused by corrupted router tables.
That makes a lot more sense considering what I was seeing. Our website was or wasn’t accessible depending on who you were using for DNS. For example, it responded when using OpenDNS but not when using Google’s DNS servers. If Godaddy’s nameservers were down due to a DOS attack, it seems like they would be down regardless of who’s DNS you were using.
One reason why I read The New York Times everyday (and then save the copies for a month and then take then to the city recycling center at the end of the month):
September 11, 2012, headline - A Hacker Brings Down GoDaddy
September 12, 2012, headline - GoDaddy Says Its Disruption Was Not Caused by a Hacker
I can just imagine the panic and argument in GoDaddy boardroom.