Hacker News Reader

> given the circumstances we believe that taking the Django project's servers offline to investigate was the correct response

But that's how you get DOSed with Photoshop and bullshit. There must be a better policy than disappearing for 2 hours while you investigate.

View on HN

Why does "we're taking it down while we figure out what's going on" not qualify as a valid approach? Shouldn't safety be a higher priority than "well someone might want to look at the home page so we'll put more effort into a crappy default landing page?"

It's easy (and often correct), in hindsight, to say that some things should be prepared for in better or different ways. However, that's a different animal than "crap, something is up, we need to react in the best way we can now."

> Why does "we're taking it down while we figure out what's going on" not qualify as a valid approach?

Because availability is more important than your forensic shenanigans. (2 hours to verify a bunch of checksums? really?)

Reply on news.ycombinator.com