[HN Gopher] The blender.org servers are experiencing a DDoS atta...
       ___________________________________________________________________
        
       The blender.org servers are experiencing a DDoS attack since last
       weekend
        
       Author : kefabean
       Score  : 44 points
       Date   : 2023-11-21 18:40 UTC (4 hours ago)
        
 (HTM) web link (www.blender.org)
 (TXT) w3m dump (www.blender.org)
        
       | agbrrw wrote:
       | They should consider using Cloudflare.
        
         | readyplayernull wrote:
         | To solve infinite captchas or to try again later, that's the
         | question.
        
           | matt_heimer wrote:
           | Cloudflare has recently done away with captchas. Now you
           | briefly end up on a page that runs JavaScript before
           | automatically continuing.
           | 
           | And that can be controlled by your site's security level.
           | Highest settings will show the JS page to all vistors, medium
           | only shows it to likely bots.
           | 
           | https://blog.cloudflare.com/end-cloudflare-captcha/
        
         | whatevaa wrote:
         | > After four days of fending off the attacks, the team decided
         | to move the core of our website to a secure service that
         | provides DDoS protection (such as CloudFlare). This means that
         | www.blender.org is back!
         | 
         | They litterally did that :)
        
       | incomingpain wrote:
       | What is blender's favourite song?
       | 
       | "Under Pressure" by Queen.
        
       | rf15 wrote:
       | Why would someone want this? It seems a bit of an odd target.
        
         | nurettin wrote:
         | Adobe and Autodesk might have a conflict of interest.
        
           | janosdebugs wrote:
           | Autodesk maybe, but Adobe? I don't see anything on their
           | product portfolio like Blender. Substance Painter maybe? But
           | when it comes to ease of use and feature completeness,
           | texture painting in Blender is a very rudimentary tool.
           | 
           | At any rate, taking down the Blender website wouldn't help
           | them I don't think.
        
             | riidom wrote:
             | Adobe was corporate-level sponsor for .. wild guess, around
             | one year maybe?
        
         | arp242 wrote:
         | Maybe they got an answer at the forums they didn't like? Some
         | political viewpoint expressed somewhere they didn't like? "For
         | teh lulz"? Who knows. Cunts will do cunt things on account of
         | being a cunt. Often things are complex, nuanced, multi-faceted,
         | and hard to understand. Sometimes they're not and it's almost
         | shockingly simple.
        
           | jlmendezbonini wrote:
           | The world is a big place and the c word is considered
           | offensive even when not used directed at a women.
           | 
           | Worth refraining for using it.
           | 
           | https://en.m.wikipedia.org/wiki/Cunt
        
             | strangesmells06 wrote:
             | You might be being insensitive to Australian culture where
             | its just a normal word for them.
             | 
             | Might be trying to force your cultural norms onto foreign
             | countries.
        
               | actualaussie wrote:
               | As an Australian: this is about as true as the idea that
               | we all ride kangaroos to work and live in constant fear
               | of dropbears.
               | 
               | That word in Australia is just as offensive as anywhere
               | else, and I wish people would stop perpetuating the
               | misconception that it's fine.
               | 
               | It's certainly not "part of our culture" or "just a
               | normal word", and it's a little ironic that you would
               | call out GP for "forcing cultural norms onto foreign
               | countries" while in the same comment spreading falsehoods
               | about Australian cultural norms.
               | 
               | Hard though it may be to believe, we're generally fairly
               | civil down here.
        
               | lucubratory wrote:
               | >That word in Australia is just as offensive as anywhere
               | else, and I wish people would stop perpetuating the
               | misconception that it's fine.
               | 
               | That is completely untrue. You may not like it, plenty of
               | Australians don't especially upper class people, but it
               | is nowhere near as offensive here as it is in America. In
               | America it's a full on slur that is never socially
               | acceptable in any context. Here at worst it's a vulgar
               | way to say something unless it's specifically directed at
               | a woman (if it's directed at a woman in anger it is
               | generally treated the same as Americans treat it), and at
               | best it is actually just a normal thing to say to your
               | friends. "Are you cunts ready or not?" is a very normal
               | thing for working class Australians to say to their
               | friends, same as "This cunts not like that, leave him
               | alone" or "Are you serious cunt? You were gonna eat them
               | all?" or "What are you cunts up to?". It can also be said
               | in a non-endearing way even to people who aren't women,
               | it has a pretty similar word distribution to "mate" (not
               | completely identical, "My cunts and me wanna buy a ticket
               | please" makes zero sense). Mate can be a very offensive
               | word to use in context, or a completely benign word. Cunt
               | is similar, it just has more offensive use cases than
               | mate does.
        
             | smegsicle wrote:
             | this is an international forum, please check yourself
             | before lecturing others for having different cultural norms
        
               | Cpoll wrote:
               | Is this really a good argument for casual sexism for the
               | sake of shock value? If we're going down that road, there
               | are plenty of racial and homophobic slurs that are
               | culturally acceptable (and encouraged!) in other
               | cultures.
        
             | arp242 wrote:
             | > the c word is considered offensive
             | 
             | Yes, that is why I used it. Seems like an appropriate way
             | to describe these people.
        
         | norwalkbear wrote:
         | AI plugins, on twitter artists are frothing at the mouth in
         | rage.
        
       | norwalkbear wrote:
       | This is because of the AI plugin isn't it. Between this and
       | Krita, a lot of artists want to "fight" back any way they can.
        
         | arp242 wrote:
         | What's the context on this? Because what shows up in a quick
         | search is from March[1], so this seems rather ... late? I see
         | no particular reason/timing why it should be about that.
         | 
         | [1]: https://www.theverge.com/2023/3/3/23623473/blender-stable-
         | di...
        
           | norwalkbear wrote:
           | The Krita plugin + some AI animation of some anime pushed
           | some artists communities over the edge. You probably won't
           | see it on the public Internet but discord, twitter, art
           | subreddits, etc
        
             | vGPU wrote:
             | I see a lot of anger about krita getting a stable diffusion
             | plugin, a choice quote here:
             | 
             | > Oh yes let's encourage people to download an app made by
             | artists, for artists, not learn how to draw, and instead
             | use a program that steals from artists, while using an art
             | app.
             | 
             | Presumably the same issue is going on with blender? The
             | Reddit thread on the site being down is mostly comments on
             | "lol autodesk/adobe/etc must hate how good blender 4.0 is".
        
         | saled wrote:
         | I think you mean "artists". If they were really artists they
         | wouldn't be afraid of AI.
        
       | matt_heimer wrote:
       | I just had to put my small hobby OS development site behind
       | cloudflare after 23 years without a CDN. Between occasional ip
       | bans, mod_evasive, rate limiting, user agent blocks, etc I've
       | been self hosting on a single box without much problem until last
       | week.
       | 
       | We went from hundreds of thousands of requests per day to 5
       | million per day. Traffic was web scraping bots based on the
       | obscure URLs. The URLs were valid (mediawiki history links, etc)
       | and not attempts to hack the site. Banning IPs did not help, the
       | traffic would move to new subnets. Mostly IPv4, some IPv6. The
       | user agent was popular Chrome agent strings so I'm guessing it
       | was masked puppeteer.
       | 
       | It was a DDoS in practice but I get the feeling it's an immature
       | web crawler.
       | 
       | I think people are likely building a new generation of crawlers
       | to feed LLMs as fast as possible.
       | 
       | The caching aspect of Cloudflare helped a lot. Putting specific
       | url patterns behind Cloudflares dynamic JavaScript challenge also
       | helped. It was surprisingly easy to setup.
       | 
       | And I know what some of you will say, Cloudflare is bad. I've
       | personally been annoyed with them for making specific sites more
       | difficult to use while on VPN. But it's not a hard choice when
       | it's either taking your site offline or using their free tier
       | offering.
        
         | simfree wrote:
         | I feel your pain, recently had something similar happen that
         | forced a website I run behind cloudflare, there isn't much you
         | can do when you get millions of requests in a day from tens of
         | thousands of US IPv4 addresses that are on the residential
         | networks you see non-malicious traffic from.
         | 
         | One thing that got me was seeing some of the malicious traffic
         | originate from the same /24 as I use at home. Whatever botnet
         | was being used certainly has good penetration of residential
         | ISPs in the US!
        
       | lacoolj wrote:
       | Lol "site is experiencing a DDoS attack. Here is a link to the
       | site for all of you to click on"
        
       ___________________________________________________________________
       (page generated 2023-11-21 23:04 UTC)