Brutkey

Xe :verified:
@cadey@pony.social

RE: https://fosstodon.org/@sourceware/115800159159159361

Oh fun, this is a proper layer 7 attack, I may need to learn the git HTTP protocol at some point.

Sourceware
@sourceware@fosstodon.org

There is a distributed attack on our git over https service. Lots of git clone https://sourceware.org/git/... https://cygwin.com/git/... and https://gcc.gnu.org/git/... from lots of different ip addresses.

For now we have disabled git-http-backend.

Please use either the git:// or ssh:// protocol to clone the git repos.

gitweb and cgit are still functioning. But this does break builder.sourceware.org buildbots and forge.sourceware.org mirroring.

Suggestions to block these git clone bots welcome.