Online Democracy Poll

Online Democracy Poll, also known as PopVote, operates as an unofficial platform for conducting digital surveys on political topics in Hong Kong. The service is designed to gather public opinion on issues such as political representation and governance. Access to the poll is limited to residents of Hong Kong, a measure intended to focus the data collection on the local electorate. The platform functions through a web interface that allows participants to submit their responses securely. By focusing on civic engagement, PopVote seeks to provide an alternative channel for citizens to express their views outside of formal governmental processes.

In its most notable exercise, the poll attracted more than 680,000 responses from participants across the territory. This level of participation indicates a significant reach within the Hong Kong populace despite the initiative's unofficial status. The collected data were intended to inform discussions about electoral reform and representation. Because the poll is not administered by any governmental body, its results are considered indicative rather than binding. The scale of the response demonstrates the platform's ability to mobilize a substantial number of users for a single civic initiative.

The platform gained widespread attention when it became the target of a sophisticated distributed denial of service attack on June 21, 2014. Attackers directed a peak traffic volume of approximately 300 gigabits per second at the site, employing a novel HTTPS flood technique that exploited TLSv1 with the DES‑CBC3‑SHA cipher suite to maximize computational load on the servers. The assault was described as highly advanced due to its focus on encryption‑handshake resources rather than simple volumetric traffic. Cloudflare, which provided protective services, mitigated the incident by activating preemptive DNS sinkholes after receiving advance warnings, thereby diverting malicious traffic away from the poll’s infrastructure. The successful defense highlighted the effectiveness of proactive threat intelligence and specialized DDoS mitigation strategies. Although the perpetrators were never identified, the episode underscored the vulnerability of online civic platforms to politically motivated cyber threats. The incident also illustrated how encryption‑based attack vectors can be leveraged to increase the impact of a DDoS campaign. The event remains a reference point for understanding the intersection of digital activism and cybersecurity in the region.