React hook causes downtime at Cloudflare, which just stopped the biggest DDoS(blog.cloudflare.com)

blog.cloudflare.com

React hook causes downtime at Cloudflare, which just stopped the biggest DDoS

https://blog.cloudflare.com/deep-dive-into-cloudflares-sept-12-dashboard-and-api-outage/

7 コメント

DanielHB10 か月前

It is unfortunate JS doesn't have better capabilities for dealing with immutable data. This is the one major flaw in the React ecosystem. It is quite easy to make this mistake (even with lint rules) and to avoid it in a statically-enforceable way you need a lot of userland cruft that is just not viable to do.

It gets even worse when you start to pass values down several layers of components when the average advice on the web is "don't overuse useMemo". For those unfamiliar it is a way to memoize a value so you get a stable reference that is only mutated if the underlying data mutates, it basically avoids this specific issue.

React wants you to code in functional immutable style, but the language doesn't provide proper immutable data structures.

sangupta10 か月前

I agree that runtime support will definitely help. However, a simple mitigation strategy is to override the `fetch` function and provide a central rate-limiting. This helps prevent such incidents even if this kind of bugs are shipped to production.

have_faith10 か月前

These types of issues have to be the largest footguns in the react architecture. Relying so heavily on the linter to avoid the initial dependency mismatch issues and then on memoising to avoid the re-triggering can really feel like dancing on eggshells.

[deleted]10 か月前

cluckindan10 か月前

Time for ”React considered harmful”

bot40310 か月前

Tomorrow's headline: react use effect hook leads to new, largest npm supply chain attack.

lysace10 か月前

"Ooh, self-DDoS! Those are rare!"