MikeMirzayanov's blog

Codeforces: Our Steps After DDOS Attack
By MikeMirzayanov, 6 years ago, In English

Hello.

As I wrote into a comment, last round we are faced with a strong DDOS-attack which ruined the competition. I don't know who did it, I also don't know reasons to do it. I'm very upset about the situation and ready to make an effort to be prepared for such issues.

I spend a lot of time to be ready for such incidents.

Here are steps you need to do to be ready for unexpected failures:

  • Join our telegram channel by the link https://t.me/codeforces_official to read urgent news.
  • Be sure that you know the password of your Codeforces account. If you don't remember it, just use the password recovery feature. Please, do it right now.
  • I've implemented a minimalistic website for replacing the main site in case of emergencies. Now you can only read problems, view your submissions (without any details), submit codes. Probably, later I'll add some more features, but anyway, the minimalistic version will have only vital features to take part in a contest. I've deployed it in several places, you can visit any of them by the links: http://m1.codeforces.com, http://m2.codeforces.com, http://m3.codeforces.com. If any of them is unavailable, just use another. Do not use them if the main website is alive.

UPD: Now you can enter minimalistic websites without a password. In this case, an email with a secret enter link will be sent to you.

  • Vote: I like it
  • +3010
  • Vote: I do not like it

Comments Comments (122)
| Write comment?
»
6 years ago, # |
  Vote: I like it +93 Vote: I do not like it

thank you

→ Reply
»
6 years ago, # |
← Rev. 2   Vote: I like it +16 Vote: I do not like it

came to give div2 after a long time. All the best! guys.

→ Reply
»
6 years ago, # |
  Vote: I like it +29 Vote: I do not like it

My username and passsord does not let me login to m1.codeforces.com :(

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Great!

→ Reply
»
6 years ago, # |
  Vote: I like it +45 Vote: I do not like it

Thanks Dad

→ Reply
»
6 years ago, # |
  Vote: I like it +3 Vote: I do not like it

My username/password don't work on the minimalistic sites. I just logged into the main site as well. Am I missing something?

→ Reply
»
6 years ago, # |
  Vote: I like it +7 Vote: I do not like it

k

→ Reply
»
6 years ago, # |
  Vote: I like it +20 Vote: I do not like it

No wonder it was really strange just now.. I can't submit my code.. Well, don't be upset, we all will support codeforces WHENEVER.

→ Reply
»
6 years ago, # |
  Vote: I like it +1 Vote: I do not like it

I am just watching how fast this post is getting upvotes .. :D

→ Reply
»
6 years ago, # |
  Vote: I like it +4 Vote: I do not like it

What is DDOS?

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it +3 Vote: I do not like it

    DDOS generaly, attack to the server with using a lot of PC and count's of requests

    → Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it +11 Vote: I do not like it

    удаленный доступ

    → Reply
»
6 years ago, # |
  Vote: I like it +6 Vote: I do not like it

little students ddosing cf triggered

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Login not working on minimal sites. Saying, Invalid handleOrEmail/email or password.

→ Reply
»
6 years ago, # |
  Vote: I like it +3 Vote: I do not like it

Thanks

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Great! Thank you very much.

→ Reply
»
6 years ago, # |
  Vote: I like it -9 Vote: I do not like it

Hard work much appreciated. (Y)

→ Reply
»
6 years ago, # |
  Vote: I like it +18 Vote: I do not like it

this is why codeforces is great.

have a solution for every problem.

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it -44 Vote: I do not like it

    LooOoOoOOoOOoL. Solution to every problem? What about solving the problems with cheaters?

    → Reply
    • »
      »
      »
      6 years ago, # ^ |
      ← Rev. 2   Vote: I like it +59 Vote: I do not like it

      You are right. Codeforces is not great because it don't have any solution to stop you from LooOoOoOOoOOoL LMAO everyone.

      → Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

That's awesome :) Thanks for your work.

→ Reply
»
6 years ago, # |
  Vote: I like it +86 Vote: I do not like it

What doesn't kill us makes us stronger!

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it +1 Vote: I do not like it

    Mind boundary conditions. How limbs amputation and random lobotomy would make you stronger?

    → Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

I have logged in successfully, but I can't enter the contest

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Login works good.

→ Reply
»
6 years ago, # |
  Vote: I like it +27 Vote: I do not like it

MikeMirzayanov Does hacking work in these sites?

→ Reply
»
6 years ago, # |
  Vote: I like it +5 Vote: I do not like it

Can I help in security Issues ?

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

GREAT!!!

→ Reply
»
6 years ago, # |
  Vote: I like it +11 Vote: I do not like it

what should I do if I am logged with VK(so I have no password)?

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Можно на русском?

→ Reply
»
6 years ago, # |
  Vote: I like it +3 Vote: I do not like it

I used to use gmail login, just changed password and it says "Invalid handleOrEmail/email or password" on the back up website :/

→ Reply
»
6 years ago, # |
  Vote: I like it +15 Vote: I do not like it

MikeMirzayanov, I'm just asking, have you ever considered some protections like cloudflare for Ddos attacks?

→ Reply
»
6 years ago, # |
  Vote: I like it -37 Vote: I do not like it

please donate me ^^

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Hackers VS Codeforces

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

I was able to login with my username, but not with email.

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Thank you for your great job.

→ Reply
»
6 years ago, # |
  Vote: I like it +91 Vote: I do not like it

There is a reliable information that DDOS attack was organized by a Russian-speaking schoolboy (we don't publish his name), who was losing the TechnoCup Round 3, estimated that he has no chances to qualify to the next stage of TechnoCup and bought a DDOS attack to turn the site down and get one more chance in the additional round.

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it +28 Vote: I do not like it

    Good for him that Mike is probably not going to react or respond to any comments of Samarskie Trolli ever

    → Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it +10 Vote: I do not like it

    No Mr duck, the DDOS attack was made by the organization, I'm trying to break the convergence to stop the organization ambitions

    → Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it -28 Vote: I do not like it

    What if it was the author of codeforc.es?

    → Reply
»
6 years ago, # |
  Vote: I like it +9 Vote: I do not like it

the hacker who did it must be failed in algorithms and data structures in college and hate them :D

→ Reply
»
6 years ago, # |
← Rev. 2   Vote: I like it +14 Vote: I do not like it

Hello, MikeMirzayanov. Don't you think it would be great to make this sites available during all contests, not just when there are problems, like today, when there is a competition, which is not available in m1.codeforces.com. It could help users with bad internet connection and as for me, I think I would use it to read statements and make submissions because as I see it works faster than main site.

→ Reply
»
6 years ago, # |
  Vote: I like it +59 Vote: I do not like it

Be sure that you know the password of your Codeforces account. If you don't remember it, just use the password recovery feature. Please, do it right now.

I've implemented a minimalistic website for replacing the main site in case of emergencies.

There is an unreliable information that MikeMirzayanov's account was hacked. 

`NEVER ENTER YOUR PASSWORDS YOU NUBS!`
→ Reply
»
6 years ago, # |
  Vote: I like it +4 Vote: I do not like it

We all with you Mike

→ Reply
»
6 years ago, # |
  Vote: I like it +4 Vote: I do not like it

Will this post be in Russian. I hope to it

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Thank you for the new system, there more faster loading conditions and sending solutions))

→ Reply
»
6 years ago, # |
  Vote: I like it +6 Vote: I do not like it

Thank MikeMizayanov for your effort. I guess someone do it to avoid huge rating loss. hope my guess is not ture but if it is then it's a such shame for our sports programmer community that we have such a cheep mind between us.

→ Reply
»
6 years ago, # |
  Vote: I like it +60 Vote: I do not like it

Thank MikeMirzayanov trying to protect our studying places. I experience the DDOS-attack last round.And last year someone attack an Chinese OJ --Universal OJ.These websites all help us to develop our program skills. It's so hard understand why the hacker do this.

→ Reply
»
6 years ago, # |
  Vote: I like it +59 Vote: I do not like it

Mike is the ultimate sysadmin https://xkcd.com/705/

We don't deserve you, Mike.

→ Reply
»
6 years ago, # |
  Vote: I like it +2 Vote: I do not like it

We were together in good times and will be together in bad times.

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Thank you for your strive <3

→ Reply
»
6 years ago, # |
  Vote: I like it +62 Vote: I do not like it

I am not familiar with all these attacks etc, but can these three mirrors be ddosed as well? If yes, is ddosing all four of them significantly harder than ddosing codeforces alone?

→ Reply
  • »
    »
    6 years ago, # ^ |
      Vote: I like it 0 Vote: I do not like it

    If it can serve more requests per second, it will be harder to DDOS = the DDOSer has to pay more, so it's a good deterrent. I don't know about the capabilities of those sites, but the number of issued requests when loading them is much smaller than for default CF (a good way to see requests is just throwing the site into archive.fo).

    → Reply
»
6 years ago, # |
  Vote: I like it -35 Vote: I do not like it

→ Reply
»
6 years ago, # |
  Vote: I like it +5 Vote: I do not like it

https://codeforces.me/blog/entry/61885?#comment-458818

→ Reply
»
6 years ago, # |
  Vote: I like it +24 Vote: I do not like it

I'm still logon in m1 after changing my password.

→ Reply
»
6 years ago, # |
  Vote: I like it +3 Vote: I do not like it

Some people just do this because they can. I'm afraid creating m1, m2 and m3 won't solve the problem. The attacker only needs to add them into the attack target list to ruin them.

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Thank you！

→ Reply
»
6 years ago, # |
  Vote: I like it +5 Vote: I do not like it

Is there any reason to show Please, read the post alert in groups with specific domain (even for users defined only for this domain)? Main site can be blocked by local network, so it will just create broken link.

Check https://example.contest.codeforces.com/

→ Reply
»
6 years ago, # |
  Vote: I like it +39 Vote: I do not like it

That green PopUp makes me nervous, I read the post about 10 times

→ Reply
»
6 years ago, # |
  Vote: I like it 0 Vote: I do not like it

Thank you!

→ Reply
»
5 years ago, # |
  Vote: I like it +31 Vote: I do not like it

Now you can enter minimalistic websites without a password. In this case, an email with a secret enter link will be sent to you.

→ Reply
»
5 years ago, # |
  Vote: I like it +8 Vote: I do not like it

ah sh*t , here we go again

→ Reply
  • »
    »
    5 years ago, # ^ |
      Vote: I like it +11 Vote: I do not like it

    Things are getting better, buddy.

    → Reply
    • »
      »
      »
      5 years ago, # ^ |
        Vote: I like it 0 Vote: I do not like it

      yeah totally i was just joking i was participating in m2.codeforces which worked almost 95% of the time for me

      → Reply