I just clicked the sidebar link to the blog and got a big warning without much explanation.

This is happening for anything directed to the https://blog.stackoverflow.com



The title of the page is Attention Required! | CloudFlare

What's going on here?


1 Answer 1


I'm Tom Limoncelli from Stack Exchange's SRE team. We're testing a new anti-DoS system. First we've deployed it on the blogs; over time we'll deploy it on other Stack sites as we shake out any problems. What you are seeing is part of that.

"DoS" means a Denial of Service attack. For example, someone configures thousands of machines to hit a website in an attempt to overload it. These automated attacks are done by robots or simply "bots". A collection of bots is called a "botnet".

Why would someone attack Stack Exchange? We can only speculate. However, there is now a blackmarket that will provide "botnet services" for anyone with money, thus it is shockingly easy to attack a website you dislike. Where do botnets come from? Most computer viruses subvert machines and turn them into bots. In other words, that coworker of yours that disabled their anti-virus software may be unknowingly part of a botnet.

An anti-DoS (Denial of Service) system detects if many requests are coming from the same IP address. If such behavior is detected, it presents a "captcha" to the user to prove that they are human and not a bot.

If you saw this message, the system thinks you are a bot. No offense. Chances are you aren't a bot. There may be multiple people sharing your IP address. For example, at most companies all PCs appear to be behind the same IP address. Alternatively, there is a chance you are part of a botnet, so you should make sure you're running an updated anti-virus system.

Since the system we are using is new, the problem may also simply be that it is too sensitive. We're adjusting it find the right balance of sensitivity and protection.

What should you do? After verifying that your PC is running good anti-virus software, fill out the captcha form. That will prove you are a human and let you into our site. More importantly, it will help train our anti-DoS system, which makes it smarter and less prone to false positives.

Feedback about our new system is appreciated, especially since it is new and still in test mode.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .