Thought on status post details

[Itsapov]

I want to raise a concern about operational security in the recent status updates.

First, I appreciate the transparency during all this. It's clear you're working hard and want to keep the community in the loop. That matters.

Some of the recent posts include infrastructure details (provider names, mitigation setup, attack timelines) that could give the attacker a free feedback loop. They know when they launched, but the defender-side timestamps and architecture details tell them things they can't see from their end. Like detection latency and when mitigation actually kicked in.

You can keep the same level of communication without any of that. Status + rough ETA gives people everything they need, and it keeps your cards hidden from whoever is on the other end.

Might also be worth pulling some of the specifics from the older posts, that stuff stays searchable long after the incident is over.

Happy to lend a hand if you ever want another set of eyes on anything. Rooting for you guys.

[Rainy]

Yes I 100% stand by this, we only need ETA's not that much information, I want Octo to be safe

[Defiant]

A single ping would show that information. You're acting like they revealed some kind of secret information. They didn't.

[Itsapov]

A ping gives you an IP and RTT not everything I listed.
But that's also besides the point. There is no benefit to spelling any of this out in public.

[Hfm1]

Take op´s advice and stop giving us information.

All i want to know is can u get the server stable in a overseeable timeframe or not.

[Gibom]

yes

[Trusty420]

Take op´s advice and stop giving us information.

All i want to know is can u get the server stable in a overseeable timeframe or not.

This honestly, i kept thinking the same, they give out way too much detail the potential attackers can use against them.

Keep up the good work, we will not give up on this server!
There will be a day where we get past these constant attacks but until then, the community needs to stay strong and not give in and jump ships.

Stay persistent guys, we will get through it eventually!

[Itsapov]

I do hope someone from the team reads this before the next announcement is posted and that they will take down some of the things they have posted.

[Hysterics]

I do hope someone from the team reads this before the next announcement is posted and that they will take down some of the things they have posted.

Ah yes, the old taking things off the Internet strategy. Let's see how that pans out.

You seem to have some technical knowledge, which is why I'm confused here and feeling like you're being disingenuous and just trying to essentially make the devs look bad. None of what you've said is something that the attackers wouldn't already know from the various attacks and probes. Kestrel has acknowledged this in other threads when people raised similar concerns. Also I'm really not sure what you're implying the timeline of the attacks would let the attacker know that they don't already know. They're the ones that initiated the attacks. They know when they start and finish. They can see on their end when they stop being effective.

The correspondence with Floki, I mean they've made the choice to inform the community. They are obviously aware that gives information to the attackers. What does that information even change though? Knowing roughly when they'll need to ramp up the attacks? It's not like we've been given an exact date anyways. Stop treating them like idiots and maybe consider that they want to ensure the community doesn't feel abandoned. If they don't give us details, people get upset. It's a lose lose for them, and they weighed out the pros and cons and decided to keep the community in the loop. But to be clear, Kestrel has acknowledged your concerns in other threads. He's aware.

[Darien]

You seem to have some technical knowledge, which is why I'm confused here and feeling like you're being disingenuous and just trying to essentially make the devs look bad. None of what you've said is something that the attackers wouldn't already know from the various attacks and probes. Kestrel has acknowledged this in other threads when people raised similar concerns. Also I'm really not sure what you're implying the timeline of the attacks would let the attacker know that they don't already know. They're the ones that initiated the attacks. They know when they start and finish. They can see on their end when they stop being effective.

It speaks volumes when the guy called "Hysterics" is the one being the least hysterical.

Which said, yes, you're exactly right; Kestrel gets raked over the coals multiple times every day by the internet middle-manager crowd for not being "transparent" enough, and then he posts some rudimentary, harmless details to try to make them happy and the internet security experts declare it a protocol breach and how dare he. I just feel bad for the guy; he can't win no matter what he does.