Can a website be Ddosed?

DDoS stands for distributed denial of service but is often referred to as a simple denial of service. A DDoS attack consists of a website being flooded by requests during a short period of time, with the aim of overwhelming the site and causing it to crash.

Does VPN protect against DDoS?

Generally speaking, yes, VPNs can stop DDoS attacks. With a hidden IP address, DDoS attacks can’t locate your network, making it much harder to target you. Additionally, VPNs encrypt web traffic, creating a tunnel between your computer and network, thus hiding activity from your internet service provider (ISP).

Can you DDoS with a VPN?

VPNs are a great way to stop DDoS attacks, but not 100 percent of the time. VPN companies could have poorly implemented DDoS protection, and attackers might already have your IP address, in which case there’s not much a VPN can do.

Can you DDoS with IP?

If someone has your internal IP address, it means he is on same internal network which you are connected to. The internal IP address gets converted to a Public IP at your or your ISP gateway (as the case may be). So, yes somebody can DDoS you, but not from internet, only from your internal network.

Can a CAPTCHA be used to prevent DoS attacks?

DDoS attacks are almost always at the network level, well before data is submitted over HTTP. If an HTML form is vulnerable to DoS (not DDoS) attacks, a CAPTCHA would make exploitation difficult, but the proper solution is to fix the form, not slap a band-aid (CAPTCHA) on it.

Does a JavaScript CAPTCHA slow down the server?

This answer just DOESN’T MAKE SENSE. During a DDoS, sending a javascript captcha doesn’t slow down anything, it will assist DDoS and brought down the server even faster, i.e. by establish connections and send tons of captcha payload to the DDoS attack node. @mootmoot I also whole-heartedly disagree with this answer.

How do you check if a CAPTCHA is correct?

It is easier/faster to checkif a CAPTCHA is correct than to lookup a user in the database (this may include new connections, hashing and more). A server first check the CAPTCHA, if it is correct then process the rest of the login, if not return an error.

Should we outsource reCAPTCHA processing?

@overrider both points are backwards. 1) Processing CAPTCHAs, if done right, would take more processing than logins; 2) outsourcing to reCAPTCHA, while saving on CPU power, will instead block over network access, which is orders of magnitude slower than CPU. – AviD♦ Oct 22 ’12 at 9:54