4 ms·

What's Cooking on Sourcehut?

• ddevault 5y ago
  I thought I'd share this month's update mainly because it includes pictures of penguins.
• akerl_ 5y ago
  Given the prevalence of crypto miners using CI services lately, I was curious what approaches services like Sourcehut were taking to detect their usage patterns. Looking at https://git.sr.ht/~sircmpwn/builds.sr.ht/log https://git.sr.ht/~sircmpwn/builds.sr.ht/log , I wasn’t able to find the detection code. Does it live in a separate repo?
  • ddevault 5y ago
    It's handled in small private codebases. Secrecy is a necessary component in this effort, because the attackers can just change their shape to evade our abuse detectors if they could read the code.
    • audience_mem 5y ago
      I can't believe you're writing proprietary software. I thought you were principled.
      • ddevault 5y ago
        It's basically a glorified list of regexes. I'm sure you'll live without it.