The DDoS variant run in March was conducted to hit two popular Github projects, the GreatFire and CN-NYTimes, that are two anti-censorship tools used to avoid censorship operated by China and circumvent The Great Firewall Of China.
This time the DDoS attack seems to be the consequence of the decision of the platform to remove software capable of bypassing the Chinese censorship.
On August 22, an open source project called ShadowSocks was removed from GitHub, the author explained that the police contacted him and asked him to stop working on the software and to remove it from GitHub. Shadowsocks is a secure SOCKS5 proxy plug-in protocol for Internet users, it is used to circumvent the Chinese Great Firewall.
According to the GreatFire.org organization, another repository was recently removed from GitHub, GoAgent, another tool used to Chinese censorship.
“GoAgent’s Github repo is also removed today (Aug 25, 2015). GoAgent was the most popular circumvention tool in China. It relied on Google App Engine to tunnel traffic across GFW. It was hosted on Google Code(link is external) and later moved to Github.
The author phuslu deleted the repo without explanation but changed his account description to be “Everything that has a beginning has an end”.” states the GreatFire.org organization.
(Security Affairs – GitHub, DDoS)