Forgot your password?
typodupeerror

Comment Re:Just ruining all the words... (Score 1) 174

LLMs progressing rapidly while your views are lagging by years. Current models can present coherent pro and con arguments on most topics and then can evaluate these to provide a reasoned conclusion. They don't do this by default, at least not on free models, but you can and should ask that when you prompting.

Comment Re:Software Defined Vehicle (Score 1) 165

Auto industry going crazy for it because they want to harvest your data and show you ads. They also learned from smartphone manufacturers and locked down ecosystem so there is no possibility of you flashing custom ROM or IP blocking ad servers, because "safety". About the only move you still have is to rip out cell modem hardware to air gap the car.

Comment Re:we’re probably gonna bust past 1.8C (Score -1, Troll) 194

You also have to ask why solutions suggested by "green" are so anti-abundance and anti-humanity. My answer to that is that the system is what the system does - they are anti-abundance and anti-humanity and environmentalism is just a method of achieving these goals. This is easy to demonstrate with an example - just look at anti-nuclear energy view, if they were serious about reducing greenhouse emissions switching to nuclear energy production away from burning fossil fuels makes perfect sense, yet they oppose it. Similarly, purported sustainability position ignores the disaster of wind energy, they are still burying blades while talking about how supposedly green these are. Similar with ethanol in gasoline. Similar with lithium mining. etc. etc.

Comment Re: we’re probably gonna bust past 1.8C (Score -1, Troll) 194

Because we have to believe there will be a future. And currently our kids are not sure there will be.

There will be a future and alarmists spreading FUD about extinction is the key reason why your kids going to hate you in 50 years when they figure out not much changed, other than some places got slightly hotter and/or wetter.

Submission + - Instrument cluster are now paid extra feature (caranddriver.com)

sinij writes:

Hyundai is charging customers extra for a driver’s display in the new Elantra generation (more specifically, the Korea-market Avante), as well as the Ioniq 3.

Enshittification of car controls rapidly accelerating.

Comment Re:Dumb crawlers require dumb solutions (Score 1) 43

To be honest that was actually my first theory, since the bots didn't seem interested in exploring the rest of the domain. I suppose there's no way to know for certain. I concluded that it must be an imbecile's attempt at harvesting, though, because the queries weren't really exploring the string space in any useful way. Here's a sample:

"GET /index?author=15&go=Search&id=48&name_restrict=1&q&re&results_&results_pagenum=2980 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=5440&template=41&type HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=33500&templat HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=32640&templ HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&res&results_page&results_pagenum=39300 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_&results_pa&results_pagenum=12340 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_r&res&results_pagenum=6100 HTTP/1.1"
"GET /index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=2920&te HTTP/1.1"
"GET /index?author=15&go=Search&id=48&nam&results_&results_pagenum=17940 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results&results_pag&results_pagenu&results_pagenum=37720 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=9360&template=41&type_r HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_restrict=1&q&r&results_pagenum=28040 HTTP/1.1"
"GET /index?author=15&go=Search&id=48&name_&results_pag&results_pagenum=10400 HTTP/1.1"

The only thing this is fuzzing is the query string parser. It's not testing the limits of string buffers, it's not using interesting characters, it's just brain-damaged. The fact that it's also fetching different page numbers shows it's trying to follow page links and failing badly at doing so.

The site gets plenty of sniffing from garden-variety pests. e.g. this half-hearted attempt to find a framework or two that I don't have:

"POST /__rsc HTTP/1.1"
"POST /api/auth/session HTTP/1.1"
"POST /api/auth HTTP/1.1"
"POST /__nextjs_action HTTP/1.1"
"POST /.action HTTP/1.1"
"POST /_rsc HTTP/1.1"
"POST /api/auth/callback HTTP/1.1"
"POST /_middleware HTTP/1.1"
"POST / HTTP/1.1"

(of course, none of these URLs exist other than /, and you definitely can't just POST to it)

All this said... I've seen that spammers regularly misconfigure their tools, they'll try to register accounts with names like #[X:\LISTS\NAMES.TXT] and it only makes sense that some other cybercriminals trying to get rich quick have a similar lack of interest in programming shit correctly. Generally people don't turn to script kiddie shit if they have a personality conducive to putting in an honest hard day's work perfecting their craft.

Comment Dumb crawlers require dumb solutions (Score 5, Interesting) 43

I had a problem where AI scrapers were absolutely DETERMINED to fish out every possible query string from a search results page. Almost all of the query strings they tried were invalid due to shitty and dysfunctional string substitution. "&page=100" wouldn't be followed by "&page=101", it would be followed by "&pag&pag=1010" or something even more insanely half-baked, until the query strings were like 100+ characters long. It was the technological equivalent of watching HIV mutate in real time.

But the insane thing was that, aside from page number, they were always requesting info about the same other criteria: filtered by the same user, the same page type, and with no text string. So I just took those particular values and started banning logged-out users who requested that combination of criteria.

I figured I'd need to change my tactics in a couple of days once the botnet got bored of that particular page and moved on to requesting bogus entries for another user.

MariaDB> select count(*) from ip_bans;
+----------+
| count(*) |
+----------+
| 671671 |
+----------+

It hasn't.

Slashdot Top Deals

Work without a vision is slavery, Vision without work is a pipe dream, But vision with work is the hope of the world.

Working...