There have been multiple accounts created with the sole purpose of posting advertisement posts or replies containing unsolicited advertising.

Accounts which solely post advertisements, or persistently post them may be terminated.

seaQueue ,
@seaQueue@lemmy.world avatar

Skip straight to the Google security blag if you want actual details, the verge article has none.

…google.com/…/how-it-works-the-novel-http2-rapid-…

REdOG ,
@REdOG@lemmy.world avatar

Now do who.

Nobilmantis ,
@Nobilmantis@feddit.it avatar

https://feddit.it/pictrs/image/75a1f6e8-d3ed-48a8-b060-cbe440a883df.webp

cyborganism ,

How it works: The novel HTTP/2 ‘Rapid Reset’ DDoS attack

autotldr Bot ,

This is the best summary I could come up with:

Cloudflare, Google, Microsoft, and Amazon all say they successfully mitigated what two of the companies called the biggest DDoS layer 7 attacks they’ve recorded in August and September, though none said who the attacks were directed against.

The companies say the attacks were possible because of a zero-day vulnerability in the HTTP/2 protocol they’ve named “HTTP/2 Rapid Reset.”

HTTP/2 speeds up page loading by allowing for multiple simultaneous requests to a website over a single connection.

Cloudflare writes that these attacks apparently involved an automated cycle of sending and immediately canceling “hundreds of thousands” of requests to websites that use HTTP/2, overwhelming servers and taking them offline.

Google goes into detail in a blog post about how the attacks worked, so do head over there if you want to roll your sleeves up and read about it.

Update October 10th, 2023, 1:20PM ET: Added that Microsoft has disclosed that its cloud infrastructure was affected as well.

The original article contains 281 words, the summary contains 156 words. Saved 44%. I’m a bot and I’m open source!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • [email protected]
  • random
  • lifeLocal
  • goranko
  • All magazines
    •