3 ms·
How hard is it to mitm the IA over http, thus producing fake evidence that a site said something once?
by ikeboy 10y ago
How hard is it to mitm the IA over http, thus producing fake evidence that a site said something once?
- thatcat 10y agoI wonder if they save the IP address for each scraping session
- ikeboy 10y agoI also wonder if they respect HSTS and HPKP for a given site, making this attack only possible against sites without such protection.
- throwaway7767 10y agoIt's the same difficulty as any other MITM - if you control a point in the routing chain, or if you can affect the routing chain through e.g. BGP, you can do it. The crawls will probably originate from random AWS addresses, but you can target by User-Agent, since they identify themselves there.