Bender

9 ms·

301.
by Bender 3mo ago
It's crazier than that. I block two entire continents. Don't worry you are not missing anything. There is a link to archive.is that mirrors the page if you are curious.
302.
by Bender 3mo ago
No they were specifically trying and failing of course to AXFR from the only domains I had added the zeroconf addresses to and shortly thereafter all the scanning went quiet. If they were not skiddies they could have just updated their t
303.
by Bender 3mo ago
I like those ideas. If people are truly operating purely through LLM's then I am fine with being partitioned from them. The LLM operators will provide their reality and their truth. This is all for low trust internet-wide access. Fo
304.
by Bender 3mo ago
visibly ravaged by the more shady denizens of the global internet That is both funny, sad and oddly appropriate. Indeed, decades of running forums, chan and chat servers. I came here to take a break from all of that. It's been a n
305.
by Bender 3mo ago
Techno-Thriller/Sci-Fi/Mystery novels Nice, I will have to take a look at some point.
306.
by Bender 3mo ago
For me it's just a fun exercise to see what generalizations I can make about bots that botters can not really avoid or code around such as javascript . Yeah this blog is all precompressed static content in a ram disk. I'm sure
307.
by Bender 3mo ago
I can spot them but the feds are working on taking down the biggest residential proxy malware nodes. It's a game of whack-a-mole but I will let them play that game. There are some easy ways to spot some of them but I will save that
308.
by Bender 3mo ago
Most load balancers will silently drop the real IP address header on the ingress side to avoid exactly what you are describing. That used to be a thing around 2000 - 2001 era. If you find a load balancer with that issue today open a ca
309.
by Bender 3mo ago
Didja happen to confirm they were blocked initially They were the reason I started blocking data-centers. I wanted to see if I could block all of their addresses which turned into quite an exercise. Initially I was able to block them by
310.
by Bender 3mo ago
load balancer / proxy, since you need a way to get the real ip If it is at all helpful most layer-7 load balancers have an option to enable a header that contains the real IP address, then one need only reconfigure their web daemon t
311.
by Bender 3mo ago
I used to log the bots too but there are so many they drown out the humans. I fully expect to block a lot of real humans as many people today use VPN's and most VPN's will egress from a data-center. Maybe it would make sense to
312.
by Bender 3mo ago
I disabled blocking for a few hours then crawled several of my pages with their site.
313.
by Bender 3mo ago
I can accept that. I've sat with RMS a few times. He's an interesting and very smart person. There are things he and I agree and disagree on. I'm sure I would never hear the end of it on this one. I'm glad he put th
314.
by Bender 3mo ago
Thankyou for the kind words. I am not for everyone which is the way I would like to keep it. I agree there need to be more alternatives to a big centralized MitM caching proxy even if they can be a bit rough around the edges like mine. T
315.
by Bender 3mo ago
I did not and could not downvote you as you replied to me. Only others can. I have not downvoted any comments on this thread. I appreciate all feedback.
316.
by Bender 3mo ago
AI will not ingest or operate on anything with obscene or foul terms or at least that is what I have been led to believe.
317.
by Bender 3mo ago
That makes sense. I block most data-centers and that would include much of Apple's data-centers. What I am doing is of course unorthodox for a blog. This is more of a test site to show what could be done. People can pick and choo
318.
by Bender 3mo ago
The comments can be misleading. About 2600 people thus far and a few bots have been able to view it. Sunday is the best day to see all the unusual browsers and applications people browse the web with. Weekdays tend to be more mainstrea
319.
by Bender 3mo ago
Basically a proclamation of incompetence. I understand your frustration. Normally a blog site would not have any or many of these measures enabled. This is more of a test site to show what could be done on any other type of site. Peo
320.
by Bender 3mo ago
That's likely from me blocking data-centers as they probably do not have residential exit nodes. There are a couple nftable rules that could block most VPN's as well but they also block some cellular networks so I left that out.
321.
by Bender 3mo ago
This may block schools and libraries Oh, well that is ok for me I suppose. I add RTA/adult headers that hopefully they also look for and block using parental controls as adult content should not be viewed in a school or library. I
322.
by Bender 3mo ago
A guy gets sent to hell. The demons guide him into the lobby. Satan jumps out and lets out a big evil roar to no effect. Satan then glances down and sees the spot on the mans finger where there was a ring. "Oh... well you've b
323.
by Bender 3mo ago
Mostly harmless(c) load average: 0.00, 0.01, 0.00
324.
by Bender 3mo ago
I would be interested in some examples of valid traffic that they would block. For the purposes of the document I do not consider anything from a data-center to be valid traffic. People can of course skip any or all steps, experiment with
325.
by Bender 3mo ago
When I first experimented with that I was not expecting anything to happen. Within a few days one person in Amazon EC2 in Germany started trying to do zone transfers for some of my domains likely to figure out which records to avoid and
326.
by Bender 3mo ago
Real browsers send it. [1] Some of the reader apps do not. Most bots aside from those utilizing Chrome Headless do not. People can see a few headers here [2] [1] - https://caniuse.com/?search=sec-fetch-mode [2] - https:&#
327.
How to Block Some of the Bots(nochan.net)
133 points by Bender 3mo ago|149 comments
328.
'Rain Makers' Say They Can Boost Wyoming's Water Supply, Lawmakers Want Proof(cowboystatedaily.com)
2 points by Bender 3mo ago|1 comments
329.
Met police break their own record for seizing illegal e-bikes(electrek.co)
3 points by Bender 3mo ago|0 comments
330.
by Bender 3mo ago
/etc/machine-id also exists Indeed. One can regenerate it on each shutdown / reboot. The process is a little different depending on whether one has systemd or not. It's a dbus thing but systemd ingests it and there

More ›