Postmortem of a little community hobby wiki struggling to survive an extinction-event-tier DDOS purely because they banned one guy for using Claude on the wiki blog.xkeeper.net/the-cutting-room-floor/tcrf-2026-ddos-postmortem/
August 27 TCRF DDoS Attack Postmortem – Xkeeper's blog
August 27 TCRF DDoS Attack PostmortemXkeeper (Xkeeper's blog)
like this
reshared this
Dio9sys
in reply to abadidea • • •Hypolite Petovan likes this.
StoneBear 🎃
in reply to Dio9sys • • •@Dio9sys
Whose operators deserve steel-toed boots delivered at high speed to their various nether regions. Committing a DDOS like that, knowingly and with malice aforethought, should mean that the DDOSser and his cohorts don't breathe free air or have internet for long enough that they'll be old and grey and have three marbles left in their heads. I have no patience and less empathy for these monkeyfeathers.
@0xabad1dea
rk: it’s hyphen-minus actually
in reply to Dio9sys • • •TCRF is such a fantastic resource too. Man fuck that guy.
Leeloo
in reply to Dio9sys • • •atraidez
in reply to Dio9sys • • •amarioguy
in reply to Dio9sys • • •@Dio9sys as far as I can tell, there is an unnervingly large overlap between the AI bros and the people who give zero respect for the concept of consent....
(overlap so large the venn diagram is practically a circle)
basically a very large number of the AI boosters are operating on rapist logic...
Sarcastic stochastic carrot.
in reply to abadidea • • •rubi
in reply to Sarcastic stochastic carrot. • • •X ΘΔ (@Xkeeper@icosahedron.website)
X ΘΔ (Icosahedron)Carlos Solís
in reply to rubi • •like this
Sarcastic stochastic carrot. y Juho Mäntysalo like this.
Sarcastic stochastic carrot.
in reply to Carlos Solís • • •@csolisr @majirubi
Like, seriously, how important is this teeny-tiny corner of the internet to him? Move on, dudebro, move on lol
Carlos Solís
in reply to abadidea • •like this
Niels Walta, Ozzelot y Dec [{()}] like this.
Cat!
in reply to Carlos Solís • • •Carlos Solís
in reply to Cat! • •like this
Mre. Dartigen [maker mode] y KaKetelmug like this.
Nicolás Alvarez
in reply to Carlos Solís • • •Carlos Solís
in reply to Nicolás Alvarez • •Mx Rey 💜 🏳️⚧️ (bikesexual)
in reply to Carlos Solís • • •Tom Walker
in reply to abadidea • • •This is a lot of words (and actions) for them to reach the conclusion that yes, they do have to sign up for Cloudflare – which solves it immediately.
I don't *like* it as a solution but I don't have another one. And they could have done it in the first minute.
rubi
in reply to Tom Walker • • •Carlos Solís
in reply to Tom Walker • •fraggLe!
in reply to Tom Walker • • •@tomw Yes, this is one of the things that many anti-CloudFlare folks often don't seem to get - there's no one else out there that does what they do.
They're a dogshit company led by dogshit people, but they will eat a giant DDoS and laugh about it for free while everyone else will charge you hundreds of dollars a month if they can even successfully mitigate it.
Is it sustainable? Probably not, but for the time being they're basically it and that sucks.
Morten
in reply to fraggLe! • • •abadidea
in reply to Morten • • •Robert Hutchinson
in reply to Tom Walker • • •Tom Walker
in reply to Robert Hutchinson • • •Robert Hutchinson
in reply to Tom Walker • • •Todd Knarr
in reply to Tom Walker • • •Rachel Rawlings
in reply to abadidea • • •Miko Blissful [he/fae]
in reply to Rachel Rawlings • • •@linuxandyarn Nah, a slow, incurable rot from the inside out, an excruciating pain of a thousand cuts and unstoppable exsanguination.
Or, there's Menzie's Sphere of Immolation..
Miko Blissful [he/fae]
in reply to abadidea • • •George B
in reply to abadidea • • •SpaceLifeForm
in reply to abadidea • • •It is an excellent report.
The main problem with DDoS is money.
You can get DDoSed even if you DROP every packet.
Pay some Danegeld, and you buy protection.
Nice website you have there, be a shame if something happened to it.
I love this, so I
in reply to abadidea • • •Vysogota
in reply to I love this, so I • • •There's a person who decided to ban bot traffic from their own site, and there's a person who committed a felony in response. Definitely a 'both sides' situation according to HN comments.
Greylord
in reply to abadidea • • •Sensitive content
that is what nazis and supremacists do, they don't respect rights, even when arguing, they will step over the line until they are physically stopped from doing so.
some will even continue until they are arrested or killed, and this is why currently political affiliation matters because it explains everything about the current dynamic. technology ain't insulated from shit, it's being actively weaponized against people, by people who see you as an obstacle. you cannot reason with someone who has decided you're incompatible with their worldview, it doesn't work like that.
Henrik Pauli
in reply to abadidea • • •Maria Ivy
in reply to abadidea • • •Sensitive content
@0xabad1dea@infosec.exchange
LisPi
in reply to abadidea • • •LukefromDC
in reply to abadidea • • •If you have any clues as to who the offender is, you might be able to get them banned from Claude itself. It not, Claude can be considered a return address on this attack.
AI is really resource intensive, so don't DDOS them unless their water and electricity use is already maxxed out and each garbage prompt will block a real one.
I can think of lots of other ways to make things difficult for Claude and for Claude users however...
LukefromDC
in reply to abadidea • • •One thing I would do different regarding tor:
For what I do, allowing Tor access can be very seriously important, I have even been in a situation where I had to use Tor for all internet activity to avoid broadcasting my position.
Therefore, if a site I ran was being attacked over Tor, I would look for a way to temporarily block single Tor exit nodes and clear the block when the offending traffic moves on to another exit node. In my situation as an opposition activist against an open Fascist country, keeping Tor blocked is not an option unless the alternative is that the DDOS threatens Tor itself. In that case I would be obligated to yield to the needs of all other Tor users.
An attacker able to saturate all Tor exit nodes would be unlikely, would be a major problem for all Tor users, and such an event would probably force changes in Tor itself.
Note that this is site-type and content specific: a site used for discussing gaming doesn't need to be accessable over Tor to protect people from harm, an activist site may well have to be.
Personally I detest
... Mostrar másOne thing I would do different regarding tor:
For what I do, allowing Tor access can be very seriously important, I have even been in a situation where I had to use Tor for all internet activity to avoid broadcasting my position.
Therefore, if a site I ran was being attacked over Tor, I would look for a way to temporarily block single Tor exit nodes and clear the block when the offending traffic moves on to another exit node. In my situation as an opposition activist against an open Fascist country, keeping Tor blocked is not an option unless the alternative is that the DDOS threatens Tor itself. In that case I would be obligated to yield to the needs of all other Tor users.
An attacker able to saturate all Tor exit nodes would be unlikely, would be a major problem for all Tor users, and such an event would probably force changes in Tor itself.
Note that this is site-type and content specific: a site used for discussing gaming doesn't need to be accessable over Tor to protect people from harm, an activist site may well have to be.
Personally I detest all this AI slop. I shoot video with real cameras, and if the time ever comes that AI "video" doesn't usually contain obvious errors it will be impossible to prove that say, an ICE agent shot someone for their skin color by catching them on video firing the gun. They'll demand proof the video wasn't AI if it goes to court (or even the Court of Public Opinion) and that may become impossible in the future.
nek0
in reply to abadidea • • •First of all: I'm sorry to hear about everything you had to go through. I sincerely hope those attacks stop rather sooner than later.
I also want to thank you for your detailed writeup. It was very insightful. I hope I never encounter such an attack myself, but if I do I now know what I can do.
Edvin Malinovskis
in reply to abadidea • • •Epic Null
in reply to abadidea • • •amarioguy
in reply to abadidea • • •