Drew Chadwick DeVault / ddevault / SirCmpwn - Opinionated white-male-guilt-ridden software developer. Cancelled Hyprland and slandered it as "toxic" and transphobic. Hates X11 users and Hacker News. Lolicon.

  • 🐕 I am attempting to get the site runnning as fast as possible. If you are experiencing slow page load times, please report it.
davids877 said:
Whatever Drew did, Cogent is very unhappy. Did someone start uploading PDFs of the ongoing Cogent lawsuits to the repository?
They're blocking 128 IP addresses just to make sure he's not on the Internet apparently.

This is a /25, 128 IP addresses and contains the address for sr.ht and others, but possibly also other customers.
Code: 
Thu Jan 11 16:50:43.896 UTC
BGP routing table entry for 173.195.146.128/25
Versions:
  Process           bRIB/RIB  SendTblVer
  Speaker           39983847    39983847
Last Modified: Jan 11 14:09:36.020 for 02:41:08
Paths: (1 available, best #1)
  Advertised IPv4 Unicast paths to peers (in unique update groups):
    38.5.4.117
  Path #1: Received by speaker 0
  Advertised IPv4 Unicast paths to peers (in unique update groups):
    38.5.4.117
  Local
    10.255.255.255 from 154.54.66.234 (66.28.1.170)
      Origin IGP, metric 0, localpref 150, valid, internal, best, group-best, import-candidate
      Received Path ID 0, Local Path ID 1, version 39983847
      Community: 174:990 174:20912 174:21001 65535:666
      Originator: 66.28.1.170, Cluster list: 154.54.66.234, 66.28.1.31
Note that line "Local" where they send all the traffic off to nowhere(10.255.255.255)

The line for the overarching network(a /20) looks normal
Code: 
  17185
    38.104.111.122 (metric 7050) from 154.54.66.234 (154.26.2.114)
Click to expand...
I don't know much about BGP, but I thought /24 was the smallest IPv4 prefix?
 
Rusty Metal Skull Gun said:
I don't know much about BGP, but I thought /24 was the smallest IPv4 prefix?
Click to expand...
/24 is the smallest you can advertise to the world outside your own network. Inside your network you can go as small as you want.
So this is a view from a Cogent router, not an outside one, who would only see the /20 I think that this is a part of.
So, they advertise the whole /20 to the Internet and when that /25 gets inside their network they mark it to be dropped. Presumably just like they've been doing for KF, which may be a /31 or /32 dropped.
 
  • Informative
  • Like
Reactions: Human Institute Director, PedoSec, byuuWasTaken and 9 others
I only knew of Drew because of Source Hut. I’ve never liked hosting my free software projects on GitHub (non free, and owned by Microsoft, one of the greatest enemies free software ever had). So the idea of a free alternative sounded great. I realised something was amiss when Source hut started discriminating against projects based on field of endeavour but I had no idea the guy was such a total wack job. Kiwifarms really is providing a vital service by making this stuff known.

Are there any free alternatives to GitHub that are run by good people? Are there even any good people left in the free software movement? The only ones who appear to lead projects and have successful careers are those like Drew, while those like RMS have been forgotten and abandoned.
 
  • Like
  • Agree
  • Informative
Reactions: Lord Xenu, Kiwi2Shoes, PedoSec and 13 others
Big Joe said:
I only knew of Drew because of Source Hut. I’ve never liked hosting my free software projects on GitHub (non free, and owned by Microsoft, one of the greatest enemies free software ever had). So the idea of a free alternative sounded great. I realised something was amiss when Source hut started discriminating against projects based on field of endeavour but I had no idea the guy was such a total wack job. Kiwifarms really is providing a vital service by making this stuff known.

Are there any free alternatives to GitHub that are run by good people? Are there even any good people left in the free software movement? The only ones who appear to lead projects and have successful careers are those like Drew, while those like RMS have been forgotten and abandoned.
Click to expand...
GitLab? I haven't heard any bad things about them, and its gotten more popular.
 
  • Thunk-Provoking
Reactions: byuuWasTaken and Doctor Neo Cortex
Big Joe said:
Are there any free alternatives to GitHub that are run by good people? Are there even any good people left in the free software movement? The only ones who appear to lead projects and have successful careers are those like Drew, while those like RMS have been forgotten and abandoned.
Click to expand...
I know Dear Sneeder uses "gitgud.io" for some stuff.
I don't know if that's an endorsement or not.
 
  • Like
Reactions: byuuWasTaken, Doctor Neo Cortex and Markass the Worst
Drew has made a statement about the SourceHut outage.

In it, he also alleges that the SourceHut DDoS caused a Temporary Hackernews Death on the 10th, as well as the service disruptions at Codeberg potentially being collateral damage caused by Sourcehut's status page being hosted there:

We have seen some collateral damage as well. You may have noticed that Hacker News was down on January 10th; we believe that was ultimately due to Cogent’s heavy handed approach to mitigating the DDoS targetting SourceHut (sorry, HN, glad you got it sorted). Last night, a non-profit free software forge, Codeberg, also became subject to a DDoS, which is still ongoing and may be caused by the same actors. This caused our status page to go offline – Codeberg has been kind enough to host it for us so that it’s reachable during an outage – we’re not sure if Codeberg was targetted because they hosted our status page or if this is part of a broader attack on free software forge platforms.
Click to expand...

This static page is hosted on some OVH VPS I assume he spun up just for this. I somehow fail to see the irony having to set up a throwaway VPS to get a message out when your other servers are blackholed, but maybe someone else can make a connection.
 
  • Informative
  • Like
Reactions: Vecr, PedoSec, byuuWasTaken and 9 others
Big Joe said:
Are there any free alternatives to GitHub that are run by good people?
Click to expand...
I host my software by myself, and don't bother with git and other silly things. My suggestion is to do as I do.
Cukimoo said:
Drew has made a statement about the SourceHut outage.
Click to expand...
This kind of thing will keep happening, and become more frequent, until the Internet moves away from TCP, which is fundamentally flawed. The only way by which Google, Cloudflare, MicroSoft GitHub, and other large corporations don't fall victim to the same attacks is through use of overwhelming resources. Cloudflare in particular is like a corporate and centralized version of one other solution, which is widespread mirroring of cryptographically-signed information. That, of course, only works well for passive information, and not something like a forum.
 
  • Agree
  • Like
Reactions: Vecr, byuuWasTaken, Wright and 6 others
UERISIMILITUDO said:
This kind of thing will keep happening, and become more frequent, until the Internet moves away from TCP, which is fundamentally flawed.
Click to expand...

I used to work doing research in this field, and I saw many proposals to mitigate DDOS. (Mostly modifying or extending TCPIP, not replacing it completely). The real problem IMO that control of the net was ceded away from the researchers who designed it and control was given to private companies in the 90s. So no matter what we came up with after that didn’t matter. We might, if we were very lucky, get some improvement made to Linux’s network stack. But not many end users are running Linux. And if it didn’t increase the profits of the companies who own the backbones they certainly wouldn’t enable it on their routers.

I think we were very naive when the net first became popular. We thought that the new technology itself was solving the problems of human inequality. We had a few years of empowerment and freedom. But in reality the governments and corporations that controlled every other aspect of life simply hadn’t noticed it yet. Now they have, and they’ve made it into what we have now, and they aren’t ever going to let us change it.
 
  • Feels
  • Informative
  • Agree
Reactions: Lord Xenu, Kiwi2Shoes, Vecr and 10 others
Big Joe said:
I used to work doing research in this field, and I saw many proposals to mitigate DDOS. (Mostly modifying or extending TCPIP, not replacing it completely).
Click to expand...
I've read the original TCP/IP design documents, and the shame is that its design made perfect sense at the time when the Internet was truly between other networks. Still, changing TCP in any way may as well result in something entirely new instead.
Big Joe said:
So no matter what we came up with after that didn’t matter.
Click to expand...
An acquaintance of mine has been working on a P2P Internet overlay network based on UDP, and with no dependence on the DNS or other garbage. I've been planning to make a thread about it here, once I finish an implementation. We can talk about it in PMs if there be any interest. It's a nice design.
Big Joe said:
But not many end users are running Linux.
Click to expand...
It's not an option for Null, but anyone who can should disregard the opinions of the niggercattle, because it is truly impossible to fight these design flaws within the constraints of something like the WWW.
 
  • Like
  • Informative
  • Agree
Reactions: Lord Xenu, Vecr, byuuWasTaken and 9 others
It's the third(?) day since SourceHut went down, and it's still not up: https://outage.sr.ht/, https://archive.is/JZ4E0. Drew is shockingly bad at what he does.

Choice bits...

Current service availability, subject to DNS propagation delays
Click to expand...
His TTL is still 12 hours. FFS Drew, put it down to 1 hour until you get everything sorted.

Note that our new transit solution utilizes end-to-end encryption such that traffic between you and SourceHut is received and processed directly by our colocated servers and is not handled in plaintext by third-parties.
Click to expand...
Doesn't bode well for his security that he wasn't doing this already...

We have established a temporary IP address for serving custom domains using apex records. Users can change their apex record to the following IP address to restore read-only pages service:

@ IN A 141.95.4.185

Note that we may change this IP address in the future. You will be notified by email if later changes are required for your domain.
Click to expand...
Drew, learn what CNAME records are. And IPv6, come to that.
EDIT: Okay, apparently you can't have CNAMEs at the apex. Still, there must be a better way of doing this.

In our emergency planning models, we have procedures in place for many kinds of eventualities. What has happened this week is essentially our worst-case scenario: “what if the primary datacenter just disappeared tomorrow?” We ask this question of ourselves seriously, and make serious plans for what we’d do if this were to pass, and we are executing those plans now – though we had hoped that we would never have to.
Click to expand...
Well, you have a backup site, and make provisions for a transparent rollover to that... none of which seems to have happened. This is not a company that I would trust with my data.
 
  • Informative
  • Like
  • Agree
Reactions: Vecr, byuuWasTaken, The Real Slim Shady and 5 others
Big Joe said:
I think we were very naive when the net first became popular.
Click to expand...
There’s a very thin line between naivety and practicality. If you have an obviously useful technology in your hands, proliferating it in its imperfect form as fast as possible can easily outweigh the gains of waiting to make it a little bit closer to perfection.

Clearly since the Internet is still around, any fundamental issues and shortcomings with its design have been manageable. If anything, it is unreasonably robust for what it is.
 
  • Like
  • Agree
  • Thunk-Provoking
Reactions: Vecr, PedoSec, byuuWasTaken and 7 others
DeathsDesign said:
Just came here to say I worked with Drew for like two years or so at Linode
Click to expand...
I was an acquaintance of his a loooong time ago so its very surreal for me to see this thread. he caused a lot of problems for himself with his own behavior and seeing the OP is sad to see how bad its gotten. I'll leave it at that as I don't wish to powerlevel.
 
  • Feels
  • Informative
  • Like
Reactions: Vecr, PedoSec, byuuWasTaken and 8 others
As was pointed out, SourceHut is all down, subject to apparently finding a DDoS shielding provider.
I'm rather curious who they pissed off. I know who KF pisses off, but what's going on with SourceHut.

2024-01-13_16-53.png
I was reviewing the HackerNews thread and who popped up, but our favorite cow.
2024-01-13_16-59.png
 
Last edited:
  • Like
  • Informative
Reactions: Bagger 293, Conefused By Alphabets, Vecr and 13 others
You must log in or register to reply here.
Back