RE: Intermittent Outages Due to DDoS

[sn0n]

I don't know how much the nodes could handle an attack... I imagine any number of attacks there could render a large majority of the platform basically null and void.. the vectors of attack could be even as simple as spamming tens of thousands of both legitimate posts and illegitimate posts in the form of bad keys, transactions over limts, invalid json and/or otherwise.. be careful of name-calling I guess is the short of it. I don't know what safeguards are in place. Are there tools in place to handle the pressure in the form of processor, ram, bandwidth and disk space attacks.... ? I'm not a full dev, so I can't look into all these inner workings myself. But since a ddos is on the radar, food for thought. See you all on the flip side of this attack, we got this!!
@ned @steemit @steem

Posted using Partiko Android

Comments

[gtg]

Are there tools in place to handle the pressure in the form of processor, ram, bandwidth and disk space attacks.... ?

At UI level we have same issues and solutions as any other web application on the Internet.
At the blockchain level we have Resource Credits system:

The RC Plugin defines blockchain resources and limits medium and long term use through stake based Resource Credits. Based on the usage of a particular resource, there will be a market price in RCs. When a transaction is included, the issuing account will be charged a number of RCs according to the resources consumed by the transaction.

[gray00]

Thanks to solid decisions made by innovative developers, the witness core, Steem is getting more and more decentralized as time goes on. Coming more and more in the future will be applications that enable rpc selection and even fail overs . Thus less down time overall, As well as the constant battle testing (like the negative vest and bigga dicka attacks) we really do have a solid chain right now. It takes a village to make steem work, from developers to end users and promotors .

[moeknows]

Thanks for the simple, frank and respectable explanation. That's why you've got my vote for witness. (Not fishing for an upvote). Ps.

At one time, I seem to remember being able to deny payout on a comment. Do you know of an easy way for a user to do that?

Posted using Partiko Android

[gtg]

Thank you.

Ability to declining payout depends on the frontend you are using, I have no idea how or if that can be done in Partiko, but on a Steemit site you can set in your preferences.
That would however work only for comments created by that site.

[moeknows]

Cool. I never knew about that. It looks like it all or nothing though, which is fine because I could change it then change it back. But it's good to know there is a way to do it. Thanks.

Posted using Partiko Android