Coincidentally (?) we’ve seen a huge uptick in failed login attempts to our MFA-protected admin accounts on our self-hosted Gitlab CE instance today. They’re coming from thousands of IPs across hundreds of networks (VPS providers and, apparently, residential proxies).
There was a relative lull in GitHub bot activity the last few weeks, but they seem to be back today. I assume the promo token flood gates opened for the new models.
I dont think bots need bonus/trials. There are lots and lots of ways to get free, or virtually free tokens. Hell half the vibe coded AI chrome extensions send store their openrouter keys client side.
Interesting that the status page was updated immediately. Is this the norm now? I remember back in the day when status pages showed all green even when servers were clearly down for a long time already.
It's also not accurate. After nearly a half hour the page shows "git operations" as green but I'm not able to push/pull from my repos with SSH or HTTPS (and haven't been able to the whole time).
You can use GitSocial to mirror to your own bucket for situations like this:
`gitsocial mirror https://gitlab.com/owner/repo s3://s3.example.com/mybucket/repo`
I like what tangled seems like it could be but it's still too new to really use. It'd be nice if it was more of an aggregator for git servers where still access a git server whether tangled is up or not.
True, my thought was a site that just makes it easier to see all the various users. Like GitHub but links to users and orgs actually go to each person’s server.
Coincidentally (?) we’ve seen a huge uptick in failed login attempts to our MFA-protected admin accounts on our self-hosted Gitlab CE instance today. They’re coming from thousands of IPs across hundreds of networks (VPS providers and, apparently, residential proxies).
There was a relative lull in GitHub bot activity the last few weeks, but they seem to be back today. I assume the promo token flood gates opened for the new models.
I dont think bots need bonus/trials. There are lots and lots of ways to get free, or virtually free tokens. Hell half the vibe coded AI chrome extensions send store their openrouter keys client side.
It's probably related to the issue published by aikidolabs where leaked per-user gitlab issued emails were being used as a sort of credential.
https://www.aikido.dev/blog/gitlab-email-push-to-main
Interesting that the status page was updated immediately. Is this the norm now? I remember back in the day when status pages showed all green even when servers were clearly down for a long time already.
It was not updated immediately. I was seeing 503s for a solid 15 minutes while the status page was all green. This is also their second outage today:
https://status.gitlab.com/pages/history/5b36dc6502d06804c083...
Yep, status page was certainly all green when I started noticing it.
As others mentioned, it wasn't that quick.
It's also not accurate. After nearly a half hour the page shows "git operations" as green but I'm not able to push/pull from my repos with SSH or HTTPS (and haven't been able to the whole time).
It was updated at least 5 minutes after I noticed the outage first. Guess it's typical organisation lag
It took at least 5 minutes, closer to 10. I think the outage is so bad, it got pushed fast.
You can use GitSocial to mirror to your own bucket for situations like this: `gitsocial mirror https://gitlab.com/owner/repo s3://s3.example.com/mybucket/repo`
https://gitsocial.org/
It would be nice to disclose that you're the creator of the tool which you are promoting here.
Maybe Sam or Dario is playing hide and seek again with the agents….
I like what tangled seems like it could be but it's still too new to really use. It'd be nice if it was more of an aggregator for git servers where still access a git server whether tangled is up or not.
You don't really need one of these systems. You can just host git.
True, my thought was a site that just makes it easier to see all the various users. Like GitHub but links to users and orgs actually go to each person’s server.
Another day, another reminder why we self-host our GitLab instance. Cloud convenience always has these kinds of trade-offs.
We self host ours too. 100% uptime ;)
How do you do upgrades?
what host are you using that gets 100%uptime? A hyperscaler like AWS?
Just means it hasn't crashed yet.
I run it on Digital Ocean but AWS should be fine too.
VMWare Cloud Foundation with Dell R7725s
Just went to push code and found this out.
Code review for me... Hit the 503. The status page lagged the event by ~10 mins or so it seems.
git+ssh also seems affected, as I'm unable to push/pull right now.
Incident link(s):
https://status.gitlab.com/pages/incident/5b36dc6502d06804c08...
https://status.gitlab.com/pages/incident/5b36dc6502d06804c08...
Gasp! immediately builds a complete git alternative to never expirence a single second of downtime ever again
Well, git is already distributed, so you could use _any other computer_ instead of gitlab.com...
I'm only kidding, although it could be a good excersise to learn. I think a pure TUI git front end / back end project would be fun to make.
or go back to Mercurial...
Do you remember Mercurial?
Pepperidge Farm remembers.
Isn't it just git but harder to use?
Right, on to another alternative now
Seems they can compete with GitHub after all! /s