Hacker News Reader

Just because they are major places doesn't mean they are right or such practice buys any improvement in security worth the operational cost it imposes.

ICMP ping of death was a thing in the 1990s. Those bugs have been fixed for more than 2 decades now.

What do ping floods do that TCP syn floods don't? (I expect you run at least one service on the exposed hosts)

Also what system even accepts ICMP based route redirects by default from the open internet?