3 ms·

It seems he was serving an embedded CAPTCHA from his real IP. http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ http://krebsonsecurity.com

by tveita 12y ago

It seems he was serving an embedded CAPTCHA from his real IP. http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leaky-captcha/ http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leak... Maybe he used a CAPTCHA library that generates absolute URLs using the server host name.