Forgot your password?
typodupeerror

Comment Re:Dumb crawlers require dumb solutions (Score 1) 43

To be honest that was actually my first theory, since the bots didn't seem interested in exploring the rest of the domain. I suppose there's no way to know for certain. I concluded that it must be an imbecile's attempt at harvesting, though, because the queries weren't really exploring the string space in any useful way. Here's a sample:

"GET /index?author=15&go=Search&id=48&name_restrict=1&q&re&results_&results_pagenum=2980 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=5440&template=41&type HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=33500&templat HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=32640&templ HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&res&results_page&results_pagenum=39300 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_&results_pa&results_pagenum=12340 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_r&res&results_pagenum=6100 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=2920&te HTTP/1.1"
"GET /index?author=15&go=Search&id=48&nam&results_&results_pagenum=17940 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results&results_pag&results_pagenu&results_pagenum=37720 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=9360&template=41&type_r HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&r&results_pagenum=28040 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_&results_pag&results_pagenum=10400 HTTP/1.1"

The only thing this is fuzzing is the query string parser. It's not testing the limits of string buffers, it's not using interesting characters, it's just brain-damaged. The fact that it's also fetching different page numbers shows it's trying to follow page links and failing badly at doing so.

The site gets plenty of sniffing from garden-variety pests. e.g. this half-hearted attempt to find a framework or two that I don't have:

"POST /__rsc HTTP/1.1"
"POST /api/auth/session HTTP/1.1"
"POST /api/auth HTTP/1.1"
"POST /__nextjs_action HTTP/1.1"
"POST /.action HTTP/1.1"
"POST /_rsc HTTP/1.1"
"POST /api/auth/callback HTTP/1.1"
"POST /_middleware HTTP/1.1"
"POST / HTTP/1.1"

(of course, none of these URLs exist other than /, and you definitely can't just POST to it)

All this said... I've seen that spammers regularly misconfigure their tools, they'll try to register accounts with names like #[X:\LISTS\NAMES.TXT] and it only makes sense that some other cybercriminals trying to get rich quick have a similar lack of interest in programming shit correctly. Generally people don't turn to script kiddie shit if they have a personality conducive to putting in an honest hard day's work perfecting their craft.

Comment Dumb crawlers require dumb solutions (Score 5, Interesting) 43

I had a problem where AI scrapers were absolutely DETERMINED to fish out every possible query string from a search results page. Almost all of the query strings they tried were invalid due to shitty and dysfunctional string substitution. "&page=100" wouldn't be followed by "&page=101", it would be followed by "&pag&pag=1010" or something even more insanely half-baked, until the query strings were like 100+ characters long. It was the technological equivalent of watching HIV mutate in real time.

But the insane thing was that, aside from page number, they were always requesting info about the same other criteria: filtered by the same user, the same page type, and with no text string. So I just took those particular values and started banning logged-out users who requested that combination of criteria.

I figured I'd need to change my tactics in a couple of days once the botnet got bored of that particular page and moved on to requesting bogus entries for another user.

MariaDB> select count(*) from ip_bans;
+----------+
| count(*) |
+----------+
| 671671 |
+----------+

It hasn't.

Comment "Policing" Is Doing a Lof of Heavy Lifting Here (Score 4, Insightful) 57

"It is clear Flock has aspirations far beyond ALPRs to become a digital platform for policing," [emphasis mine]

They misspelled, "Orwellian suveillance and harrassment."

Law enforcement officers are already abusing Flock's existing capabilities for stalking. This will not improve matters one iota.

Comment Re:Putin's "Project Panama" (Score 2) 64

They don't need to be.

The thousand-men armies scanning books get the books by buying them by the pallet load. It's stuff that nobody really wants, like old technical books that are out of date, self-published books, etc.

If the book was actually valuable you wouldn't expect the seller to sell it for dirt cheap.

Submission + - Solar power and batteries have been keeping Europe's grid stable. (euronews.com)

AleRunner writes: "Solar has been doing the “heavy lifting” to help Europe meet its energy needs amid a string of blistering heatwaves." Euronews tells us as Europe's energy demands in the meantime, heat and Jellyfish have been causing shutdowns and reduced power output at multiple reactors at French nuclear plants as we already discussed

Submission + - AI and the 4-Day Work Week (bbc.com)

hadleyburg writes: The BBC reports "Tech leaders say AI means less work — their staff say they work up to 90 hours a week".

While a 4-day working week was suggested as one of the benefits of AI, it hasn't yet come to pass — not even in the AI companies themselves.

Comment Nothing gonna change (Score 1, Interesting) 116

Planet gonna keep getting hotter bc politicians don't have the political will to actively try fixing things

Europeans will (finally) install AC

People will keep getting sick and dying from the heat

People will relocate to try and escape from the heat

Eventually we will implement the Mexican mid-day Siesta due to the heat

After that we will be forced to convert everything to night-shift and become a night-based society starting an hour before sundown, bc nothing can be done anymore in the sunlight

Planet keeps getting hotter

Eventually the whole place is a smoking ruin and hopefully we have migrated to space cuz the Earth ain't worth living on anymore - bc H U M A N S A R E S T U P I D for destroying the only planet we were given.

Submission + - Freenet: Apps Without Platforms

Sanity writes: Earlier this year Slashdot covered the launch of the completely redesigned Freenet. I recently gave a talk about what we've been building since then. Unlike traditional web applications, apps on Freenet have no central server or database, with application state instead distributed across the network. These now include decentralized group chat, publishing, search, and fully decentralized Git hosting. The talk also gets into some of Freenet's internals, including how we use machine learning for network routing.

Slashdot Top Deals

He who steps on others to reach the top has good balance.

Working...