Comment We are probably OK (Score 1) 33
As long as they didn't all say THERE IS ANOTHER SYSTEM when they resumed, we'll probably be OK.
As long as they didn't all say THERE IS ANOTHER SYSTEM when they resumed, we'll probably be OK.
Well, technically, we're letting Natalie do it, which is, of course, worse in every way imaginable, since she's immune to the sense of embarrassment that sometimes restrains him from acting on every little whim.
To be honest that was actually my first theory, since the bots didn't seem interested in exploring the rest of the domain. I suppose there's no way to know for certain. I concluded that it must be an imbecile's attempt at harvesting, though, because the queries weren't really exploring the string space in any useful way. Here's a sample:
"GET
/index?author=15&go=Search&id=48&name_restrict=1&q&re&results_&results_pagenum=2980 HTTP/1.1"
"GET/index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=5440&template=41&type HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=33500&templat HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=32640&templ HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&res&results_page&results_pagenum=39300 HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&results_&results_pa&results_pagenum=12340 HTTP/1.1"
"GET/index?author=2&go=Search&group=0&group_restrict=1&id=48&name_r&res&results_pagenum=6100 HTTP/1.1"
"GET/index?author=2&go=Search&group=0&group_restrict=1&id=48&name_restrict=1&q&results_pagenum=2920&te HTTP/1.1"
"GET/index?author=15&go=Search&id=48&nam&results_&results_pagenum=17940 HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&results&results_pag&results_pagenu&results_pagenum=37720 HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&results_pagenum=9360&template=41&type_r HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_restrict=1&q&r&results_pagenum=28040 HTTP/1.1"
"GET/index?author=15&go=Search&id=48&name_&results_pag&results_pagenum=10400 HTTP/1.1"
The only thing this is fuzzing is the query string parser. It's not testing the limits of string buffers, it's not using interesting characters, it's just brain-damaged. The fact that it's also fetching different page numbers shows it's trying to follow page links and failing badly at doing so.
The site gets plenty of sniffing from garden-variety pests. e.g. this half-hearted attempt to find a framework or two that I don't have:
"POST
/__rsc HTTP/1.1"
"POST/api/auth/session HTTP/1.1"
"POST/api/auth HTTP/1.1"
"POST/__nextjs_action HTTP/1.1"
"POST/.action HTTP/1.1"
"POST/_rsc HTTP/1.1"
"POST/api/auth/callback HTTP/1.1"
"POST/_middleware HTTP/1.1"
"POST / HTTP/1.1"
(of course, none of these URLs exist other than
All this said... I've seen that spammers regularly misconfigure their tools, they'll try to register accounts with names like #[X:\LISTS\NAMES.TXT] and it only makes sense that some other cybercriminals trying to get rich quick have a similar lack of interest in programming shit correctly. Generally people don't turn to script kiddie shit if they have a personality conducive to putting in an honest hard day's work perfecting their craft.
I believe the plan was to give that sobriquet to Lake Michigan, in honour of its decidedly flaccid silhouette.
I had a problem where AI scrapers were absolutely DETERMINED to fish out every possible query string from a search results page. Almost all of the query strings they tried were invalid due to shitty and dysfunctional string substitution. "&page=100" wouldn't be followed by "&page=101", it would be followed by "&pag&pag=1010" or something even more insanely half-baked, until the query strings were like 100+ characters long. It was the technological equivalent of watching HIV mutate in real time.
But the insane thing was that, aside from page number, they were always requesting info about the same other criteria: filtered by the same user, the same page type, and with no text string. So I just took those particular values and started banning logged-out users who requested that combination of criteria.
I figured I'd need to change my tactics in a couple of days once the botnet got bored of that particular page and moved on to requesting bogus entries for another user.
MariaDB> select count(*) from ip_bans;
+----------+
| count(*) |
+----------+
| 671671 |
+----------+
It hasn't.
There is no such thing as "immutable" storage, despite being the current buzzword in the storage industry. Even LTO WORM tapes - as close as you can get these days - are just regular tapes with a bit set in the RFID chip that asks the drive to "please don't erase me".
What you really want is at least one copy of the data "offline".
I regret to inform you that you have woefully underestimated it. The actual retail rate offered to consumers is closer to $2200 US per gallon. Sources: internet-ink.com, cbc.ca. This $14 million fine is only worth like, seven thousand gallons, or less than 200 oil barrels of ink.
...divorced from the grinding reality of regular folks.
What's the grinding reality of regular folks? I worked two jobs for years to put myself through college, got a job as an electrical engineer / firmware engineer (I've moved around a lot, working for some stable and some startup companies). I own a house and two cars, and work ~8 hours a day. Am I regular folk? Is my reality "grinding"?
I was able to buy a few shares of SPCX in the IPO, just for the hell of it. Now, as business builds, and Elon gets ever richer, so will I (a little). And, this is despite the fact that, YES, I AM regular folk.
Extending his wealth increases what he is capable of
YES
and deprives the rest of us the opportunity to do likewise.
NO, that's retarded.
By your powers combined, I am... the British Colonies!
That's the thing about people who think they hate computers. What they really hate is lousy programmers. - Larry Niven and Jerry Pournelle in "Oath of Fealty"