It’s when the status page provider is tucked behind Cloudflare that the fun really begins.

ლ(`◉◞౪◟◉‵ლ)

Microsoft was hit by 500k that resulted in an attack x3 bigger than their previous record in Oct 2024, so imagine what you could do with 10M IPs. The days of manual operator detection and threat feeds are so far behind us now that I really doubt anyone has a true sense of their exposure.

DDoS attacks suck but they're generally short lived now. The real threat is coordinated attacks that look like random isolated requests, but spread over millions of IPs, could be automated fuzzing for 0days, scraping, or straight up click fraud. It all flies under the radar.

They don't even know it's happening. Developers are paid to add their SDK into apps, turning free to play games and consumer-style apps into backdoors that create global botnets for rent, masking traffic within genuine requests and hiding behind T&Cs that nobody ever reads.

I was at a conference in Lisbon last week and I was offered access to 2 "legitimate" residential networks that were exhibiting: 25M and 100M endpoints each. But they're not legitimate because 100M people volunteered their mobiles & Wifi for random invisible traffic to be relayed through them.

The important detail is that the attack originated from 500k residential IPs attributed to the Aisuru botnet that's mostly made up of hijacked broadband routers and IoT junkware.

In my defence I fking hate sand.

“they” say a lot of things I don’t agree with :)

Now I’m expecting an awkward, annoying phase :)

My one main gripe with Elixir has only ever been that there isn’t that strong opinionated _Elixir way_. Maybe we need to take github.com/devonestes/f... as a starting point and have a community reference?

That example would be the polar opposite definition of a consumer.

Unless it’s a root zone change (NS records etc) what you’re waiting on is generally a cache timeout based on the TTLs. We keep calling it propagation but it’s really not.

I’d need to experience it again to be sure. I wasn’t nearly sophisticated enough to appreciate the experimental stuff until at least 7yo