• CanadaPlus@lemmy.sdf.org
    link
    fedilink
    arrow-up
    0
    ·
    edit-2
    2 days ago

    If a request is taking a full minute of user CPU time, it’s one hell of a mitigation, and anybody who’s not a major corporation or government isn’t going to shrug it off.

    • daniskarma@lemmy.dbzer0.com
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      2 days ago

      Precisely that’s my point. It fits a very small risk profile. People who is going to be ddosed but not by a big agent.

      It’s not the most common risk profile. Usually ddos attacks are very heavy or doesn’t happen at all. These “half gas” ddos attacks are not really common.

      I think that’s why when I read about Anubis is never in a context of ddos protection. It’s always on a context of “let’s fuck AI”, like this precise line of comments.

      • CanadaPlus@lemmy.sdf.org
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        2 days ago

        There’s heavy, and then there’s heavy. I don’t have any experience dealing with threats like this myself, so I can’t comment on what’s most common, but we’re talking about potentially millions of times more resources for the attacker than the defender here.

        There is a lot of AI hype and AI anti-hype right now, that’s true.

        • setVeryLoud(true);@lemmy.ca
          link
          fedilink
          arrow-up
          0
          ·
          1 day ago

          I do. I have a client with a limited budget whose websites I’m considering putting behind Anubis because it’s getting hammered by AI scrapers.

          It comes in waves, too, so the website may randomly go down or slow down significantly, which is really annoying because it’s unpredictable.