3 ms·
> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged. > 6. Don't ban the flagged ip's.
by spiffytech 4y ago
> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged.
> 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you.
There's a popular blog that no longer gets linked on HN.
The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer are shown goatse, a notorious upsetting image, instead of the blog content.
- GTP 4y agoOut of curiosity, which blog are you talking about?
- deleted 4y ago[deleted]
- ignoramous 4y agohttps://news.ycombinator.com/from?site=jwz.org https://news.ycombinator.com/from?site=jwz.org
- mschuster91 4y agoGoatse? I assume you're referring to jwz - that blog shows a testicle in an egg cup if it sees a HN referrer.
- spiffytech 4y agoYeah, jwz. Looks like I got mixed up - goatse has been a popular choice for this kind of thing, but jwz went with a different image. Fortunately, there are many upsetting images for the OP to choose from!
- someweirdperson 4y agoDoes anyone not have their referer header supressed or faked?
- heleninboodler 4y agoI have never considered faking or suppressing my referer header. I don't know why I would care. I suspect I'm in the company of well over 99% of all internet users.
- zhfliz 4y agoI strip the referrer generally via https://wiki.mozilla.org/Security/Referrer https://wiki.mozilla.org/Security/Referrer, unfortunately it breaks a small number of sites very badly, such as web.archive.org and a few others. some of them claiming it was done to combat scraping.
- someweirdperson 4y agoBreaking is only part of the problem. The pages that rely on the referer header take it for granted and do not implement any meaningful error handling. They just die a horrible death, instead of responding with an error message stating that they need a referer. One bad example is relying on the referer only for log-out, everything else works. That site also runs massive js on log-out, as if it really needs to rely on explicit log-out, and not just the user disappearing.