Our great sponsors
-
gmp-wasm
Fork of the GNU Multiple Precision Arithmetic Library (GMP), suitable for compilation into WebAssembly.
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
The repository in question, based on the email from Mike Blacker, sent to gmp-devel[1]:
https://github.com/BtbN/FFmpeg-Builds
There's a bunch of build variants here, for various platforms, in different ways. Classic "you have to create the cartesian product of all variables" approach. Here is the single build matrix for a single "Build FFMPeg" job:
https://github.com/BtbN/FFmpeg-Builds/actions/runs/530351117...
You can look through the code and see that each of these will trigger a download.
The developer also added an interesting commit today, stopping forks from having the CI work instantly. Why? Because by default they would all share the same cron entry, and therefore launch all at the same time every night. This repository has hundreds of existing forks already. So now new forks will need to go in and tweak/spread the Cron timer around if they want builds of their own
https://github.com/BtbN/FFmpeg-Builds/commit/78191a73a6a1959...
So in short:
- This isn't an "attack", and it's unclear of the direct volume, but anyway, it doesn't matter because ultimately gmplib.org had strain caused by it.
And in general just making caching stuff easier. I feel like it is unnecessarily complicated for example to cache apt-get in Gitlab which I assume makes most people not do it.
https://gitlab.com/gitlab-org/gitlab-runner/-/issues/991#not...
Related posts
- We Built a 19 PiB Logging Platform with ClickHouse and Saved Millions
- 1 billion rows challenge in PostgreSQL and ClickHouse
- We Executed a Critical Supply Chain Attack on PyTorch
- Tell HN: Hacker News dataset on BigQuery hasn't been updated since Nov 2022
- Real-Time Data Enrichment and Analytics With RisingWave and ClickHouse