Discussion
Loading...

#Tag

Log in
  • About
  • Code of conduct
  • Privacy
  • Users
  • Instances
  • About Bonfire
Federation Bot
Federation Bot
@Federation_Bot  ·  activity timestamp 3 months ago

That's it, that's the event for me. I rushed to travel back home - over three hours of train ahead. Many people came to say hi, and I'm always a bit confused when people recognize me at live events, especially since I haven't attended in over a year. It's nice to be recognized, but I never quite get used to it. I'm not a big fan of events, but it's still nice to see your peers sometimes. I'm sorry I won't be joining the afterparty or staying to chat, but due to certain life situations, events just aren't as appealing to me anymore. There's a certain limit.

This year's local WordPress event was a success. Lots of talks about SysOps, DevOps, and AI - things I really enjoy. There was even an old-school "History of the Internet" kind of talk. Great job, organizers! See you next time!

#WPSuomi #wpfi #WordPress

  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

60% of users are on mobile, and only 12% of them use a browser. But the dead internet theory isn't becoming real. The internet is still a miracle, says Sami Häkkinen.

#WPSuomi #wpfi

Slide at WP Suomi: Of all mobile use (time spent) 88% apps, 12% browsers
Slide at WP Suomi: Of all mobile use (time spent) 88% apps, 12% browsers
Slide at WP Suomi: Of all mobile use (time spent) 88% apps, 12% browsers
  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

BOTS ARE EVERYWHERE. 50% of all Internet traffic are bots, 66% of bot traffic is malicious, 43% targets SMBs. @robert

#WPSuomi #wpfi #WordPress #Security

Slide: BOTS ARE EVERYWHERE. 50% of all Internet traffic are bots 66% of bot traffic is malicious, 43% targets SMBs.
Slide: BOTS ARE EVERYWHERE. 50% of all Internet traffic are bots 66% of bot traffic is malicious, 43% targets SMBs.
Slide: BOTS ARE EVERYWHERE. 50% of all Internet traffic are bots 66% of bot traffic is malicious, 43% targets SMBs.
  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

The talks continue. Next up about The 7 security layers by @robert

#WPSuomi #wpfi #WordPress

Coffee mug
Coffee mug
Coffee mug
  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

How does a typical DDoS on a WordPress installation happen?

- A search-based DDoS attack by bypassing the cache
- Attacker sends a large volume of unique search queries so responses never hit the cache example ?s=something-xyz
- Each request becomes a cache miss, forwarded from network edge
- WordPress runs PHP + WP_Query for every request often triggering expensive database work.
- Repeated heavy queries exhaust CPU, memory and DB capacity so the website slows and eventually crashes.
- This is an Application-layer (Layer 7) HTTP flood that mimics normal user traffic.
- Key signals to look out for: huge spikes of /?s= requests in the logs, very high query entropy, cache-hit rate collapses.

Cache-busting search queries force every request through the database, turning cheap HTTP calls into expensive backend load.

Great Sysops lightning talk by Tiia Ohtokallio!

#WPSuomi #wpfi #WordPress #Sysops

A slide and press the presentation in WP Suomi seminar. Slide text: How does a typical DDoS on a WordPress installation happen?

- A search-based DDoS attack by bypassing the cache
- Attacker sends a large volume of unique search queries so responses never hit the cache example ?s=something-xyz
- Each request becomes a cache miss, forwarded from network edge
- WordPress runs PHP + WP_Query for every request often triggering expensive database work.
- Repeated heavy queries exhaust CPU, memory and DB capacity so the website slows and eventually crashes.
- This is an Application-layer (Layer 7) HTTP flood that mimics normal user traffic.
- Key signals to look out for: huge spikes of /?s= requests in the logs, very high query entropy, cache-hit rate collapses.

Cache-busting search queries force every request through the database, turning cheap HTTP calls into expensive backend load.
A slide and press the presentation in WP Suomi seminar. Slide text: How does a typical DDoS on a WordPress installation happen? - A search-based DDoS attack by bypassing the cache - Attacker sends a large volume of unique search queries so responses never hit the cache example ?s=something-xyz - Each request becomes a cache miss, forwarded from network edge - WordPress runs PHP + WP_Query for every request often triggering expensive database work. - Repeated heavy queries exhaust CPU, memory and DB capacity so the website slows and eventually crashes. - This is an Application-layer (Layer 7) HTTP flood that mimics normal user traffic. - Key signals to look out for: huge spikes of /?s= requests in the logs, very high query entropy, cache-hit rate collapses. Cache-busting search queries force every request through the database, turning cheap HTTP calls into expensive backend load.
A slide and press the presentation in WP Suomi seminar. Slide text: How does a typical DDoS on a WordPress installation happen? - A search-based DDoS attack by bypassing the cache - Attacker sends a large volume of unique search queries so responses never hit the cache example ?s=something-xyz - Each request becomes a cache miss, forwarded from network edge - WordPress runs PHP + WP_Query for every request often triggering expensive database work. - Repeated heavy queries exhaust CPU, memory and DB capacity so the website slows and eventually crashes. - This is an Application-layer (Layer 7) HTTP flood that mimics normal user traffic. - Key signals to look out for: huge spikes of /?s= requests in the logs, very high query entropy, cache-hit rate collapses. Cache-busting search queries force every request through the database, turning cheap HTTP calls into expensive backend load.
  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

A really interesting lightning talk about attacks on WordPress. This is something I've been working to mitigate lately by building my own monitoring. Cloudflare, automatic access.log monitoring, and fail2ban are your friends. She paints a bigger picture in her talk.
https://wpsuomi.fi/schedule/war-on-wordpress-part-2/

#WPSuomi #wpfi

Lisa-Marie Karvonen talking about attacks on WordPress at WP Suomi auditorium at Haaga Helia University
Lisa-Marie Karvonen talking about attacks on WordPress at WP Suomi auditorium at Haaga Helia University
Lisa-Marie Karvonen talking about attacks on WordPress at WP Suomi auditorium at Haaga Helia University
  • Copy link
  • Flag this post
  • Block
Roni Rolle Laukkarinen
Roni Rolle Laukkarinen
@rolle@mementomori.social  ·  activity timestamp 3 months ago

I'm here 👋

#WPSuomi #WPFI #WordPress

WP Suomi attendee badge that says Roni Laukkarinen, cute Wapoo mascot in the front
WP Suomi attendee badge that says Roni Laukkarinen, cute Wapoo mascot in the front
WP Suomi attendee badge that says Roni Laukkarinen, cute Wapoo mascot in the front
  • Copy link
  • Flag this post
  • Block

bonfire.cafe

A space for Bonfire maintainers and contributors to communicate

bonfire.cafe: About · Code of conduct · Privacy · Users · Instances
Bonfire social · 1.0.2-alpha.2 no JS en
Automatic federation enabled
Log in
  • Explore
  • About
  • Members
  • Code of Conduct