3 ms·
Given the prevalence of crypto miners using CI services lately, I was curious what approaches services like Sourcehut were taking to detect their usage patterns
by akerl_ 6y ago
Given the prevalence of crypto miners using CI services lately, I was curious what approaches services like Sourcehut were taking to detect their usage patterns. Looking at https://git.sr.ht/~sircmpwn/builds.sr.ht/log https://git.sr.ht/~sircmpwn/builds.sr.ht/log , I wasn’t able to find the detection code. Does it live in a separate repo?
- ddevault 6y agoIt's handled in small private codebases. Secrecy is a necessary component in this effort, because the attackers can just change their shape to evade our abuse detectors if they could read the code.
- audience_mem 6y agoI can't believe you're writing proprietary software. I thought you were principled.
- ddevault 6y agoIt's basically a glorified list of regexes. I'm sure you'll live without it.