Vistarr gets more stubborn every time ATF is attacked. Being DDOS'd is paradoxically great for the site's survival since it survives on pure spite.I wonder if they're working on that, or if Vistarrr just moved on.
smart.Vistarr gets more stubborn every time ATF is attacked. Being DDOS'd is paradoxically great for the site's survival since it survives on pure spite.
But with a DDOS like this you kinda have to wait it out until the attackers get bored.
BTW, I send Vistarr a message about a proposal to have a very small Xenforo extension that enables users that are older than 3 months to create a private key + random deviceid + public key locally and register the random deviceid + public key to their account.
Then in normal operation, nothing changes. But if Vistarr uploads a ddos_mode_active.txt to his server, a PHP script would intercept calls before it reaches Xenforo. If the requester has registered a key and therefore can prove they had access to the forum in the past, they get a 24h cookie that enables them to access Xenforo to log in to their actual account (with their actual credentials). This cookie keeps tracks of how often they access the forum per few seconds, if they spam requests the device key gets revoked.
Note: The device key is purely a DDOS protection, you won't be able to login to anything with it. If somebody steals the key, worst case is that they can DDOS the server with it with a few requests, which would invalidate the key and mean the user unfortunately needs to wait out the DDOS attack, but nothing worse than that.
In this way, if an anti with too much time on their hands tries to attack ATF again, you have a pretty cheap way to filter out requests before they even hit Xenforo and it would probably allow forum access for legitimate users even during a DDOS attack. Of course, it's shit for new users they won't be able to use the forum, but currently no one can.
If someone spots a flaw in this mechanism or already knows it won't work the way I think it works I'm all ears lol. I'm not experienced with DDOS, I figured that if you could reject malicious requests with as little calculation as possible you can mitigate them, but it might very well be the case that it's the amount of requests that's the problem, not even the compute spend per request.
This site provides links to other sites/services, and does not store any files