The Worlds Largest DDos Attack 3.8 Tbps

[@drooplug]

It turns out Cloudflare was able to mitigate the DDoS attack by refering the attackers to the trust and safety team.

[@fuckYTIDontWantToUseMyRealName]

Criminally underrated comment.

[@neppe4047]

I always chuckle now whenever someone unironically mentions "trust and safety team" for any company

[@neoqueto]

The only sinkhole deeper and darker than /dev/null

[@GunF0x]

🤣

[@AlexWilkinsonYYC]

Hahahahahaa

[@romabu2041]

Mr. CEO, they hit the second lavalamp!

[@HimanshuSharma-b3q3u]

the buildup of facts required to understand this statement is really good.

[@hovesssharedspace8490]

how many people do you think it'll take to storm the wall and drink all of it?

[@xelad3362]

​@@HimanshuSharma-b3q3u 😂😂 right. if you know u know, and if you do it's fucking hilarious 😂

[@lokeshchandak3660]

Epic 😂

[@MegaLeo3]

Absolute genius

[@noahcuroe]

Cloudflare really is a middle man that we voluntarily trust to have the ability to decrypt like half of the internets traffic and not pass that data to the NSA huh. Never thought about it that way.

[@gljames24]

That why we need to support Let's Encrypt and run your own ngnix proxy

[@andihofi1652]

@@gljames24 Nginx would die under that load, but cloudflare open-sourced a lot of their stuff to build your own proxy

[@thewhitefalcon8539]

​@@gljames24 https isn't secure enough, especially automated CAs because the NSA can easily spoof your IP address

[@noahcuroe]

@@gljames24 Doesn't really help you not get DDoS'd though

[@DerTechNick]

@@gljames24 Who say's Let's Encrypt or any other CA doesn't create certificates for agencies which then can be used to mitm traffic on routers?

[@rumplstiltztinkerstein]

IoT is actually more profitable than regular devices. Because they use wifi to send usage data back to their servers that they sell to advertisers.

[@daviddickey9832]

Data brokers, any one can tie into the data brokers, some of them are advertisers.

[@BB-848-VAC]

​@@daviddickey9832literally evil shit

[@fun_at_work]

I absolutely burst out laughing in the gym when someone told Prime that the Internet connected coffee cup already exists. That might be my favorite use of the f word in one of his videos. The despair in that word brought joy to my heart because I feel seen.

[@TrimutiusToo]

So I bought myself a new Samsung phone, and came near my samsung Oven, and suddenly my phone asks "do you want to connect your oven to wifi?" I feel his pain...

[@zacharythomasrobertson8471]

"Why does everything have to connect to the internet? We're creating a botnet!" Bro, you answered your own question. 😅

[@wlockuz4467]

Plot twist: It was just their sales team mass emailing everyone to upgrade to the Enterprise plan.

[@Slashx92]

It was the trust and safety team haha

[@wlockuz4467]

@@Slashx92 It was the sales team pretending to be the trust and safety team 🤣

[@mintoo2cool]

bro lashing out at IoT is hilarious… too little too late for that IMO .. that ship has sailed 10 years ago …

[@kuhljager2429]

Ships can be sunk. One can dream at least

[@redneckcoder]

I'm planning to remove all smart devices from my home. watch real dvds and listen to CDs. Desktop and laptop only devices to connect to internet. Even looking to dumbify my phone (which in testing on my old device means about 1wk battery life!)

[@colinstu]

what, lashing out against it or IoT in general? Prime is based on this one, IoT sucks / is a security nightmare. It's scary the folks in chat who are clueless to all these implications and mindlessly gobble up IoT crap.

[@YaroslavFedevych]

I love how his hoodie goes full old-school cyberpunk on white backgrounds.

[@dutchcaveman2937]

L3/4 means layer 3/4 not level. I am not blaming Prime/Michael, it is not clear what L means when not placed in context. Article probably should have mentioned OSI layer first and introduce the abbreviation L.

[@glytchd]

That's a VERY imperishable difference! OSI Model layers vs. Like for ex. level 0/1 Backbone ISP tier

[@cheebadigga4092]

he often confuses words that sound alike but in the context of what he says and frames the sentences, I'm pretty sure he means "layer" when he says "level"

[@BrandonSorenson-fb3gg]

This is a technical article and some of this knowledge is assumed. All it means in layman's is they are using tcp/ip and not using an application layer attack like dns amplification. Very interesting though

[@BrandonSorenson-fb3gg]

Could be udp too but idk

[@TifaLovesStrife]

Lol I couldn't help but laugh at the innocence of him saying L three 😂

[@NaourassDerouichi]

This is a trap. What scares me are small ddos attacks, that would give me a 1-2k bill and that the cloudflare magic would probably not detect.

[@philipm1896]

Layer 3 of the OSI model is the Network layer. Layer 4 of the OSI model is the Transport layer.

[@gorak9000]

aka L3 = IP, L4 = TCP or UDP

[@samcolak]

OSI Layer - Layer 3,4 = Network & Transport - So hitting the raw IP stack

[@Ring0--]

That's script kiddie attack level.

[@defipunk]

What it means is that it's easier to block because it doesn't speak proper HTTP and may just be SYN packets, so stressing the connection tables most.

[@samcolak]

@@defipunk The SSL interface is a more likely interface to attack than the web-service - thats what brought GitHub down a few years ago

[@thewhitefalcon8539]

But what does that mean for a ddos?

[@FrequencyOfThought]

@@thewhitefalcon8539 It means they're ddosin the core fabric

[@amynagtegaal6941]

IoT is awesome when done correctly... The reason it sucks is because companies selling you IoT crap don't implement or maintain it correctly, therefore IoT is only great when you fully DIY it

[@rohitdas490]

wet ass firewall 🤣

[@greatwhiteswag]

🤤

[@DerekSmit]

One other reason IoT sucks, companies can just disable a perfectly fine device whenever they want. Or sometimes not even on porpoise, like when the company just goes bankrupt and your "smart" scale doesn't work anymore because the api is down.

[@gorak9000]

I won't buy any "cloud" garbage, unless they have an open protocol to make it possible to run your own back end WHEN (not if) the company goes tits up, or some middle manager just decides that that particular product doesn't meet the company's "vision" anymore. So many examples of perfectly fine hardware instantly turned into e-waste in this way already. Companies should have to pay huge fines when they pull those stunts.

[@qwerty11111122]

I had Dr. Leonid Levin of NP completeness as an algorithms professor in grad school. "We are computer scientists, we computer at work and not at home" didnt understand what he meant at the time, but now I do. Great guy, good professor. Took time to explain to baby-me what it means to mathematically prove something, something HS freshman me never learned. Sad that i was the only one to go to his office hours when I went. His work is truly foundational. "What do you do when your boss tells you to solve a problem, but you cant prove to him the problem is impossible" lol

[@henlofren7321]

"What do you do when your boss tells you to solve a problem, but you cant prove to him the problem is impossible"? I let him fire me, buy guns with the unemployment benefits, and laugh at the solutions the cheap replacement labor attempts to implement. Once society reaches a critical point of chaos due to mismanagement, I take over by force. Any further questions?

[@broadestsmiler]

@@henlofren7321 Once you take over by force, what policies will you impose to keep yourself in power?

[@henlofren7321]

​@@broadestsmiler Eugenics. There's no need to maintain my rule by force after everyone is genetically predisposed to developing my ideas on their own.

[@christophertstone]

3:34 IoT Rant -- I've never felt such kinship with a YT video. Preach brother!

[@the.elven.archer]

I don't know, between the 2^32 packet count and the article not showing _real_ receipts or explaining the attack in detail (not just only saying "our solution uses eBPF to filter and we received packets from A, B and C devices from different countries") this rings as only an ad...

[@pabloqp7929]

As a sysadmin and devops guy I love this!!

[@ask_carbon]

TLDR: Anycast routing

[@Lelende]

Please explain for my peabrain

[@ask_carbon]

@@Lelende CF serves requests from nearest location/edge/datacenter so no single point of failure to overwhelm the entire network. Its essentially 'Distributing a Distributed Denial of Service' attack.

[@defipunk]

It's both obvious and really amazing that it works ;)

[@mintoo2cool]

ty

[@tkay42]

I miss hardware-buttons on cellphones.... NEVER got use to touchscreen-keyboards.... Typewise makes it a tiny bit better, but still.... habtic feedback. I need this....

[@magicsmokeblog]

I completely agree with his opinion about IoT. I have three devices that connect to the internet: a desktop computer, a laptop computer, and a mobile phone. My smart TV is blocked from internet access by my router. I have repaired my more than ten-year-old robot vacuum cleaner (Neato XV-25) countless times, because today's robot vacuum cleaners require an internet connection.

[@gustanobreza]

👏 Thanks for the video, its amazing ✨. This is the kind of video we need to save the link to see later when is needed (it'll be needed). Hi from Brazil 🇧🇷🇧🇷🇧🇷

[@Inkartnee123]

Cloudflare big blunder followed by amazing mitigation, yeah right.

[@satyabhangt]

I got eyeballs!! This has got to be my favorite rant of yours of all time 🙌🤣

[@majam1n]

"I just want buttons" should go on your coffee mug

[@bushhawk5460]

I second that

[@boblol1465]

on a wifi powered coffee mug

[@Saphronite]

I have a friend who works on ship engines. They’re replacing everything slowly with IoT and touchscreens 😬

[@cheebadigga4092]

Titanic 2.0 but this time the iceberg won't be the reason it's gonna sink xD

[@AlucardNoir]

You want a car where you press a bottom? I dunno man, the last guy to try to drive using a gamepad ended up at the bottom of the ocean.

[@DesocupadoXtremo]

That rant about IoT is so true, i worked as a technichian and have a sick gaming setup at home, not a single IoT device and drive 1974 old brazilian car with a vintage bluetooth radio to play old music, my gf say she can't understand how i know so much about tech and don't use it, thats the point, the more aliterate you are, the more they play with you, she wanted an Amazon echo dot, not in my house honey

[@keenoogodlike]

The scary part of security service is that attacker and defender could be the same person.

[@trietang2304]

I would think a better standard for infrared control would be better than iot. Imagine a remote control that can help you control a lot of device in your house with infrared only.

[@ionutale1950]

or bluetooth. bluetooth 4 has like 18 meters range.

[@Flimzes]

This is exactly what zigbee is for

[@baxterdevin]

Best Prime take of the year: IoT is indeed the Devil and it needs to stop. 100% agree!

[@chainingsolid]

18:30, TCP and IP are from the same time period/standard but are different layers, so the TCP header (or UDP) will be enclosed in whatever is implementing IP (ethernet and or wifi), and the TCP header won't have to care about ip/mac address, as that's the layer below's problem. But the OS will pass that info up to the programmer/application as they do care.

[@Sommyie]

A company I worked at 10 years ago survived 1.2Tb/s and I thought we were awesome.... Gosh darn, 3.8 is a lot of packets.

[@Marfig]

They do keep putting these IoT devices out because when is the last time you heard of a 0-day attack resulting in a lawsuit against the company that developed the software? IoT generates sales without any of the responsibility.

[@geepfish7935]

100% the NSA TOR network "hosts" is been repurposed for CF lol

[@AIDsLTK]

IoT rant just made me a life long fan of the prime! 💯💯😂

[@bourgtai5057]

primeagen @ 4:58 unwittingly becomes proud sponsor of Lite Brite

[@t3g3b3]

8:14 to skip the rant about IoT I totally agree, but dang that was a long one

[@theblinkingbrownie4654]

It healed the soul.

[@paulmcburney6874]

@9:15 the reason for this exercise is that these types of corporate or academic papers have an expectation of explaining the outline, primarily because it helps people with varying levels of expertise know what to read. People who don't need to understand the foundations or basics can skip to methodology and results, people just looking for "conclusions" can skip to reseasrch questions, results, and conclusion, etc. I'm not saying it's right, I'm just saying what it's expected

[@iNuchalHead]

Hearing Prime rant about IoT warms the cockles of my heart.

[@Dude6978]

Anycast is actually the IP routing, thing you sent AT&T customers to one server vs another ISP overseas

[@edhahaz]

NSA running the production tests on themselves.

[@SirSithly]

You forgot to mention subscription services with the IOT devices being some of the most predatory.

[@drooplug]

DVRs need a network connection for the tv guide data. Also, tgey are also streaming devices now.

[@thewhitefalcon8539]

TV guide used to be periodically broadcast one-way...

[@purpinkn]

"Mitigated". It wouldn't matter if everyone didn't shove thousands of sites under the same umbrella!

[@V1etnow]

i feel like the customer that was under attack would have cared if the attack wasn’t mitigated.

[@CarlTSpeak]

​@@V1etnowWith that level of traffic their hosting company and likely their upstreams would have been pretty unhappy too.

[@mikebierle1979]

I love home automation because I’m lazy and have the attention span of a gnat. But I also hate the idea of a constant cloud pinging proto-botnet. Home Assistant is GOAT because everything runs locally, letting me block the phone calls home.

[@backhdlp]

imagine youre responsible for that ddos and just watch as absolutely nothing happens

[@kahnfatman]

Is the a commercial piece from Cloud F? And what if Cloud F were supposedly the one behind all this DDos?

[@hescominsoon]

l3 or l4 refers to layer 3 or layer 4 of the osi networking model. layer 3 is the routing layer and layer 4 is the transport layer.

[@macademin864]

WiFi Coffee mugs already exist Ember and Nextmug to name two brands.

[@Bassalicious]

100% Agree on the "not everything needs wifi or a touch screen" boomer take. I'll be a boomer on this one. My freaking electric kettle has a touch interface. You can't easily turn the thing on in the dark, you know, before your eyes have adjusted to light in the morning, right when you need a coffee most. Sometimes I hit the wrong spot, accidentally set the maximum temperature to 40°C and get back to a lukewarm kettle. It freaking sucks and I totally understand why my mom gave it to me and got a new one herself whenever my trusty old switch-operated one broke.

[@nathanpotter1334]

First 30s got me rolling already

[@andythedishwasher1117]

I think we could start a movement of futuristic, non-networked computing devices.

[@lxyacht]

I love being able to control all my lights and a/c remotely and set them up on timers.

[@progamler1]

For refrence, AT&Ts fibre backbone doeas about 55TB/s, so just the Attack would be 6% more traffic on one of the largest Domestic networks. if you are a Cloud Provider 6TB/s isn't to bad. my network can only do 400Gbit/s of outsite Traffic so this would kill us in an instand. L4 Cleaning is just crazy for me but up to layer3 its fairly easy in modern routers.

[@covle9180]

7:05 those clunky lightswitches that have existed since forever, that was peak light switch. Every smart switch and touch panel and WiFi enabled light bulb are worse in every goddamn imaginable way. I don't want to open a fucking app to turn on the light, and I don't need 5 different governments to know what time I go to bed and I don't want to be part of a Russian botnet.

[@One.manuel]

More lost packages than USPS

[@jpf51286]

I wonder what the customer bill is gonna be like

[@akhilleusuggo]

💀

[@ask_carbon]

@@jpf51286 Don't think CF charges extra for DDOS mitigation also I hope the customer had some rate limiting already in place

[@saggygnaw]

Bout three fiddy

[@pieterrossouw8596]

Can anyone estimate this? Even a ballpark?

[@Demiuuu]

IMO, cloudflare and other DDoS protection should legally be able to sue producers of these "smart" devices for participating because they are trivial to hack. That, or the FCC should

[@aminallam4188]

I feel the same way, I have a Honda Civic that has a key ignition start, and I love that. All these new cars with push to start can literally just be stollen with a bit of hacking. It’s insane to me that we had a system that worked and we threw it away for aesthetics.

[@dscham1507]

And convenience, to be honest. Keyless is just really convenient.

[@theblinkingbrownie4654]

@@dscham1507 Not so convenient though when the company actively blocks you for some reason (usually subscriptions) or goes bankrupt/stops supporting the outdated api.

[@dscham1507]

@@theblinkingbrownie4654 I said keyless, not internet. A car which requires internet to run, is not a car, it's a liability.

[@theblinkingbrownie4654]

@@dscham1507 Fair enough, my bad.

[@dscham1507]

@@theblinkingbrownie4654 No worries. Wasn't to clear myself neither.

[@xDahl]

I've begun taking electronic classes, and unfortunately one of the topics we'll learn is IoT, which I consider to be the biggest scam of all time. Learning how these things work and are put together electronically is valuable information, but I don't think I'll ever willingly make an IoT device, it seems such a rarity where IoT is the right answer to a problem.

[@HyperionStudiosDE]

Touch controls in cars are super annoying. I'll never buy a car without physical, tactile controls.

[@UNgineering]

"Great job NSA that you're doing" excellent

[@josephosborne8264]

If you want a heated mug without the botnet fuel: try Glowstone Mug

[@isaacyoungyxt]

the signed int32 instinct is beautiful

[@anotherriddle]

I agree 110% that IoT causes a lot of problems and I avoid it wherever I can. However, in many cases you are probably wrong about physical buttons being cheaper, or non connected stuff beeing cheaper. For example: Think about a car. Most people nowadays expect there to be a screen in the car for infotainment garbage, camera and/or navigation system. So, you need a screen and the cost difference from a bare screen to a touch screen is very low. So, technically you can replace almost any physical button or dial with touch input that costs nothing extra compared to a physical button, that costs a couple of cents to a buck, the injection molding needed, wiring, ... . So the cost of adding a single button might be a buck or more. Now multiply by the number of buttons per car and the number of cars ... that's a lot of money. I am convinced that many crappy touch interfaces exist because it is in fact actually cheaper than buttons. Similarly any wifi connected device now doesn't need any interface or buttons at all, as long as you have an app. Voi là, now your smartphone is the interface. Don't get me wrong. In most use cases I hate this developement ... but it is what it is. I don't think we can really change it.

[@MeriaDuck]

Ip is the outer envelope around tcp and udp. Anycast lives on the ip and udp level. If cloudflare dosd has a bug, the internet world will feeeze over bigtime, bigger than crowdstrike

[@Pentross]

It’s tragic that the new Thread radio standard took the perfectly good IP-less zigbee network and is giving it IP addresses

[@KDill893]

IoT can be good, but only if you're the engineer making the device for your specific use case. Most commercial-grade IoT products are data hogs and use a lot more network traffic than is necessary.

[@lesto12321]

me: 3.8 table spoon, does not seems much

[@dogyX3]

Came for the Largest DDos Attack Mitigation, Stayed for IoT rant (he's completely right tho #worthit)

[@duckner]

11:11 DVRs are nice on the Internet, so you can view recordings anywhere

[@ivanmaglica264]

@Prime you do need Ethernet on security cameras, but be firewalled from accessing internet. Large scale deployments need long cables (USB does not go 100 meters) and lots of ports. For wiring a building you would need a hefty USB hub to plug all cameras in, let alone power them and receive any kind of signal from them. But I agree, they don't need access outside their subnet.

[@kzalesak4]

Why not just a closed wireless network?

[@ivanmaglica264]

@@kzalesak4 wireless for security camera is the worst because you can spam the channel the cameras are on and the data from cameras will not reach the DVR, so no video recording.

[@SickofTired]

I open wifi devices and disconnect the antenna and wrap that area in aluminum foil. I use $20 wyze cameras for security and they don't microwave my brain 24/7. If I need the video I pull the sd card or open the foil

[@funkdefied1]

We need more React in our lightbulbs.

[@ethernetwink7230]

I'm building my first web app, was wondering how I'd host it. No brainer now that my brand new web app needs protection like this

[@Jaxy804]

cars are required by law now to have a screen for a backup camera its insane

[@your_new_sjw_waifu]

I only use CF for their free CDN. Anything remotely sensitive I just handle myself. Automatic null routing scripts have been more than sufficient for me.

[@treetracer]

Get yourself a cx90 forces you not to touch screen in the car and can fit your family.

[@thekwoka4707]

Bot gonna lie, i like having s washing machine that notifies me that its done

[@sivumakhonco]

Coming up, wifi on a toothbrush 😂

[@MarvinRB3]

Love the IoT rant. chef's kiss

[@Mic_Glow]

b... but HOW will I know that my fridge needs a software update if it's NOT connected to wifi and to Amazon servers?!!!111111

[@yamix-tr]

now we know what the Windows + R copy/paste Captcha Trojan that circulated in the last few weeks was used for ... Interesting

[@LivvieLynn]

4:30 Didn't Bluetooth 6 announce tracking and location services for your coffee cups? Guess problem solved. 😎

[@samcolak]

Has anyone asked the obvious question as to why this comes up after all the negative press regarding CF sales tactics a few months back?

[@rnts08]

Shhh the glowies are listening...

[@samcolak]

@@rnts08 Im guessing they need more sales for the Christmas party coming up

[@alexholker1309]

Because it's their job? It would be more suspicious if the anti-DDoS service suddenly stopped mitigating DDoS attacks.

[@MoonDweller1337]

I am really starting to think it's a PR campaign where CF pays these botnets to attack them so they can show off later on.

[@thewhitefalcon8539]

There's speculation that cloudflare pays people to ddos websites so they'll sign up for cloudflare

[@wdavid3116]

my ember mug has bluetooth, but not wifi unfortunately. It sounds crazy but it's actually one of the best IOT things I've ever encountered (because most are garbage).

[@steffenrumpel2784]

Capped at 2.14 billion .... Sooo ... Thank god IPv4 is still around to save the day?

[@GameOn0827]

My roomba has a nifty app with a bunch of cool features. Problem is, it doesn't bluetooth to my phone, it instead has to be on the wifi. My foreign made floor cleaner with 4 different cameras won't connect to my phone unless I give it internet access... I just do without those features. I hit the go button and let it figure it out the hard way.

[@Jaxy804]

everytime ive read about a ddos attack in the past 5-6 years its always iot and recently all the big ones ive seen are mikrotik

[@deathbornium]

I use a Mikrotik router at home, im kinda concerned. There are bots that can jack your router though. It happened to me this week, had to reset the entire thing. Always deactivate admin and make your own account with a strong password!

[@DamjanDimitrioski]

04:40 I turned off all my wifi AP's in my house, it's all wire :). To increase LAN performance.

[@ferdynandkiepski5026]

Since when was the Primeagen half transparent?

[@greatwhiteswag]

since the vax

[@orterves]

Looks to me like he's half opaque

[@theblinkingbrownie4654]

@@orterves Which half? I'll vote for the other.

[@melongrasp]

Guys, I think Prime doesn't like IoT.

[@quercus3290]

probably benchmarking their own systems

[@adamz01h]

I love the low tech rant

[@Edwin-nl3qu]

14:27 fastly, Akamai are two ones that I can remember. Never used them tho and I’ll Probably default to cludflare

[@Lee-wh3ht]

Since iot existed I thought it was useless without Ethernet port. Since WiFi is a security risk for devices and irl wall hacks……..