React hook causes downtime at Cloudflare, which just stopped the biggest DDoS(blog.cloudflare.com)

13 pointsby KalanaPerera10 mesi fa6 comments

blog.cloudflare.com

React hook causes downtime at Cloudflare, which just stopped the biggest DDoS

https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/

7 comments

It is unfortunate JS doesn't have better capabilities for dealing with immutable data. This is the one major flaw in the React ecosystem. It is quite easy to make this mistake (even with lint rules) and to avoid it in a statically-enforceable way you need a lot of userland cruft that is just not viable to do.

It gets even worse when you start to pass values down several layers of components when the average advice on the web is "don't overuse useMemo". For those unfamiliar it is a way to memoize a value so you get a stable reference that is only mutated if the underlying data mutates, it basically avoids this specific issue.

React wants you to code in functional immutable style, but the language doesn't provide proper immutable data structures.

sangupta10 mesi fa

I agree that runtime support will definitely help. However, a simple mitigation strategy is to override the `fetch` function and provide a central rate-limiting. This helps prevent such incidents even if this kind of bugs are shipped to production.

have_faith10 mesi fa

These types of issues have to be the largest footguns in the react architecture. Relying so heavily on the linter to avoid the initial dependency mismatch issues and then on memoising to avoid the re-triggering can really feel like dancing on eggshells.

[deleted]10 mesi fa

cluckindan10 mesi fa

Time for ”React considered harmful”

bot40310 mesi fa

Tomorrow's headline: react use effect hook leads to new, largest npm supply chain attack.

lysace10 mesi fa

"Ooh, self-DDoS! Those are rare!"