"Everybody I've spoken to loves the idea of the United States owning that piece of land, developing and creating thousands of jobs"
Yeah, that's what happens when you only interact with people in your bubble, you get a massively warped/blinkered view of reality. It's one reason why diversity & inclusion is so important.
I've been working on an automated triager for the frequent volumetric DDOS we see against www.bbc.com & www.bbc.co.uk.
The idea is to use our edge access logs (stored in BigQuery) to isolate & describe the attack traffic then recommend any additional mitigations/filters etc. It also gives us a database of DDOS metrics/sources we can reference.
Obviously I had to add the obligatory pew-pew map.
@GossiTheDog Thanks for sharing this. We just checked for our IP ranges (nothing in there) but one of my colleagues grouped the IPs in the repo by AS - funnily enough, a good number of the top few are AS from which we frequently see DDOS traffic against our services. Perhaps suggests a lack of care & maintenance on their part & that the DDOS are likely from/via compromised kit. Not a major surprise.
We're recruiting a Networking-focussed Architect in my team at the BBC.
You'll need to be UK-resident for boring tax/legal reasons but this is (IMO) a cool role - working on both corporate/internal & public/peering networks for BBC media & web content, Cloud connections etc. across multiple sites/DCs and with our vendors.
Happy to try to answer Qs informally.
Please share, esp. if you know good people who might be interested.
We monitor traffic to www.bbc.co.uk & www.bbc.com per country & got alerts that daily requests from Angola have dropped off loads recently.
Looking at the Angola traffic split by network AS. AS36907 traffic looks suspicious! Spidey sense triggered...the "before" traffic was *way* too consistent.
Digging in to the logs, looks like they removed their Fortigates on 6th Sept. which'd been sending 343k req/day for www.bbc.co.uk/ , every single day!
Here's a few of the prep tasks we've done for the UK General Election in/around our team: - Add extra CDN/peering capacity - Ensure personal & machine credentials & TLS cert work & won't expire - Raise service quotas for safety - Check that deployment pipeline are clean/deployable - Ask 3rd parties to be extra-vigilant on change requests - Rehearse failovers to backup systems - Make sure all logging/metrics are working correctly Probably mainly/all pretty obvious but maybe useful. #BBC#GE2024