<div dir="ltr"><br><br><div class="gmail_quote">On Tue, Oct 19, 2010 at 9:34 PM, Maxim Veksler <span dir="ltr"><<a href="mailto:maxim@vekslers.org">maxim@vekslers.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">Follow up question:<div><br></div><div>ICMP can be used for DoS. Cool.<div><br></div><div>How does google battle with that? All google services are ping'able (which is very cool obviously).</div><div><br>
</div></div></div></blockquote><div><br>DoSing 10k's (100k's ?) on a worldwide geographically distributed cloud of servers is a bit more difficult than one (10. 100. typical hosting facility..), for starters. I assume they also do rate limiting on how much you can ping them, and just discard attacks when it goes above a certain threhold. I know I do :)<br>
<br></div><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div dir="ltr"><div><div>
</div><div>How do they protect against the attack?, surly there are enough script kiddies that constantly try to DoS Google.</div><div><br></div></div></div></blockquote><div><br>See above. They also have a similar limit on the HTTP level; If you query google too much from a single IP, you'll be blocked and they'll refuse to solve queries for you, before you solve their CAPTCHA.<br>
<br>-- Shimi <br></div><div><br> </div></div></div>