Do you give a toss about DDoS?

Distributed Denial of Service attacks happen to someone else, don’t they? That is certainly the message that I get whenever I talk about the need for safeguarding against such web infrastructure failure. Small business will claim that only big business is targeted, while big business will shrug and say it has an uptime guarantee from some upstream provider so meh. Both are wrong, of course, very wrong indeed.