Skip to content

Instantly share code, notes, and snippets.

View tzuryby's full-sized avatar

Tzury Bar Yochay tzuryby

View GitHub Profile

Basecamp was under network attack

The attack detailed below has stopped (for the time being) and almost all network access for almost all customers have been restored. We're keeping this post and the timeline intact for posterity. Unless the attack resumes, we'll post a complete postmortem within 48 hours (so before Wednesday, March 26 at 11:00am central time).

Criminals have laid siege to our networks using what's called a distributed denial-of-service attack (DDoS) starting at 8:46 central time, March 24 2014. The goal is to make Basecamp, and the rest of our services, unavailable by flooding the network with bogus requests, so nothing legitimate can come through. This attack was launched together with a blackmail attempt that sought to have us pay to avoid this assault.

Note that this attack targets the network link between our servers and the internet. All the data is safe and sound, but nobody is able to get to it as long as the attack is being successfully executed. This is like a bunch of people

M[16],X=16,W,k;main(){T(system("stty cbreak")
);puts(W&1?"WIN":"LOSE");}K[]={2,3,1};s(f,d,i
,j,l,P){for(i=4;i--;)for(j=k=l=0;k<4;)j<4?P=M
[w(d,i,j++)],W|=P>>11,l*P&&(f?M[w(d,i,k)]=l<<
(l==P):0,k++),l=l?P?l-P?P:0:l:P:(f?M[w(d,i,k)
]=l:0,++k,W|=2*!l,l=0);}w(d,i,j){return d?w(d
-1,j,3-i):4*i+j;}T(i){for(i=X+rand()%X;M[i%X]
*i;i--);i?M[i%X]=2<<rand()%2:0;for(W=i=0;i<4;
)s(0,i++);for(i=X,puts("\e[2J\e[H");i--;i%4||
puts(""))printf(M[i]?"%4d|":" |",M[i]);W-2
<html xmlns="http://www.w3.org/1999/xhtml" dir="rtl">
<head id="ctl00_Head1">
<base href="http://www.prima.co.il/" />
<meta http-equiv="content-type" content="text/html; charset=UTF-8" /><meta name="ROBOTS" content="NOINDEX, NOFOLLOW" /><meta name="viewport" content="width=device-width,initial-scale=1,user-scalable=yes,minimum-scale=1,maximum-scale=1" /><meta name="author" content="Prima Hotel" /><meta name="rating" content="general" /><meta name="generator" content="Prima Hotels" /><meta name="audience" content="all" /><meta name="category" content="hotel" /><meta name="copyright" content="Hotels E-Commerce - SilverTravel Ltd." /><meta name="distribution" content="Global" /><meta name="page-topic" content="hotel" /><meta name="resource-type" content="document" /><link rel="shortcut icon" href="favicon1.ico" type="image/x-icon" />
<script src="Scripts/BookingEngine/SecureCommon.js" type="text/javascript"></script>
<script src="Scripts/BookingEngine/EngineDatePicker.js" type="text/javascript"></sc
mbp:~ tzury$ curl -v http://images4.engageya.com/05/d8/website_93720/53/fd/d2/grazeit.com.Couple_LowSavings_200x200_133965_1.jpg > /dev/null
* Adding handle: conn: 0x7fbf0b80b600
* Adding handle: send: 0
* Adding handle: recv: 0
* Curl_addHandleToPipeline: length: 1
* - Conn 0 (0x7fbf0b80b600) send_pipe: 1, recv_pipe: 0
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
0 0 0 0 0 0 0 0 --:--:-- --:--:-- --:--:-- 0* About to connect() to images4.engageya.com port 80 (#0)
* Trying 94.31.29.229...
@tzuryby
tzuryby / config.py
Last active August 29, 2015 14:16
config.py
#!/usr/bin/python
# -*- coding: utf-8 -*-
#config for haaretz premium checks
#host to check
#edgecast
# host = '93.184.219.20';
#Akamai
host = '82.166.201.147';
@tzuryby
tzuryby / resume.c
Last active August 29, 2015 14:17 — forked from klange/_.md
#include <stdio.h>
#include <time.h>
/* TODO: resume.h */
typedef struct {
char * company;
char * location;
char * title;
@tzuryby
tzuryby / gist:93927
Created April 12, 2009 09:10
this is the malicious code used to hijack tweets
function XHConn()
{
var xmlhttp, bComplete = false;
try { xmlhttp = new ActiveXObject("Msxml2.XMLHTTP"); }
catch (e) { try { xmlhttp = new ActiveXObject("Microsoft.XMLHTTP"); }
catch (e) { try { xmlhttp = new XMLHttpRequest(); }
catch (e) { xmlhttp = false; }}}
if (!xmlhttp) return null;
this.connect = function(sURL, sMethod, sVars, fnDone)
{
import subprocess, time
import threading
from threading import Thread
process = None
class SThread (Thread):
"""Thread class with a stop() method. The thread itself has to check
regularly for the stopped() condition."""
(function() {
var el=document.createElement('div'),
b=document.getElementsByTagName('body')[0];
otherlib=false,
msg='';
el.style.position='fixed';
el.style.height='32px';
el.style.width='220px';
el.style.marginLeft='-110px';
el.style.top='0';
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<title>jquery-Test</title>
</head>
<body>
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js"></script>
<script type="text/javascript" src="http://js-hotkeys.googlecode.com/files/jquery.hotkeys-0.7.9.min.js"></script>