The case against mtgox's use of DDOS as a scapegoat

ElectricMucus

legendary

Activity: 1666

Merit: 1057

Marketing manager - GO MP

Quote from: Entropy-uc on April 12, 2013, 09:24:17 PM

An exchange which offers an API is subject to flooding attacks either through malice or incompetence.

Automated trades should be forced to operate through a QOS mechanism which limits both individual activity, and the aggregate automated action to a small percentage of total exchange capacity. A fee for API driven trades would also be an effective mechanism to moderate the load caused by automated trading systems.

I maintain that streaming a HD video and decoding it takes more resources than operating the entirety of mtgox on a single machine. Processing an order should be a trivial operation.

darkmule

legendary

Activity: 1176

Merit: 1005

Quote from: NikolaTesla on April 12, 2013, 09:12:42 PM

Whatever it is, this market will not stabilize until some better, more reliable exchanges open up.

More importantly, until no one exchange can basically exacerbate a panic just by incompetently failing when it is most needed. Any exchange with 80% of volume needs cut down to size.

Entropy-uc

hero member

Activity: 756

Merit: 501

An exchange which offers an API is subject to flooding attacks either through malice or incompetence.

Automated trades should be forced to operate through a QOS mechanism which limits both individual activity, and the aggregate automated action to a small percentage of total exchange capacity. A fee for API driven trades would also be an effective mechanism to moderate the load caused by automated trading systems.

NikolaTesla

newbie

Activity: 28

Merit: 0

Whatever it is, this market will not stabilize until some better, more reliable exchanges open up.

SomeWhere

member

Activity: 71

Merit: 10

I would also attribute it to incompetence. It's quite simple, actually.

If it was DDoS and the problem was with the network, the API would return ZERO as the API lag value, as the API should be unaware of any network issues.

As soon as their API returns a lag value, it's the trading engine itself that can't handle it, irrespective of the network connectivity.

That's the reason why even the best DDoS protection company in the world won't change a thing.

ElectricMucus

legendary

Activity: 1666

Merit: 1057

Marketing manager - GO MP

Lets recap:

During the rally we've seen short selloffs which were all accompanied by lag.
Lag is an internal mechanism of the mtgox infrastructure and not subject to network latency.
Neither the "lots of small orders" nor the "insufficiently funded orders" explanation makes sense.

The obvious conclusion: They hired inept coders which constructed a system which doesn't scale and covering it up.
This is core infrastructure which has become sustainable, a fundamental reason.

The worst part of this is market intervention by scapegoating, discontinuation of service and propping up of the volume.

Topic: The case against mtgox's use of DDOS as a scapegoat (Read 925 times)