dylz

49 ms·

1. 511.▲
   by dylz 7y ago

   I find it hilarious that I peer with them for a total of 2 players. The thing about a lot of residential connections is that probably a not-insignificant amount of the problems are very close to last mile, as opposed to bandwidth availabili
2. 512.▲
   by dylz 7y ago

   https://lichess.org/password/reset is a fun example.
3. 513.▲
   by dylz 7y ago

   Yes. It costs less than $1-3 for a month or week of 'service' with a maximum of typically 3-5 minutes per attack, you can pay with PayPal, you can pay with Runescape gold or Roblox/Fortnite/game of the month currency, si
4. 514.▲
   by dylz 7y ago

   I feel like there's a bunch of other things in play, like for example if you're running a public API, one api key should not be able to take you down - you should be rate limiting them against repeated hits, for instance. I'm
5. 515.▲
   by dylz 7y ago

   I am kind of curious what field you see attacks in, or how "most attacks are small" - even two slapfighting kids having a minecraft argument routinely exceeds 50-70Gbps+ from what I've seen..
6. 516.▲
   by dylz 7y ago

   It is not useful for small time attackers - small time attackers/children/etc just use booters which at least usually output double digit gbps, often spoofed, costs a cent or pay in runescape gold or other bullshit like that. Your
7. 517.▲
   by dylz 7y ago

   iptables to defend against an attack will not accomplish much in 2019. It's pretty much futile to even try.
8. 518.▲
   by dylz 7y ago

   If you have any G cookies set at all you will be forced to log in
9. 519.▲
   by dylz 7y ago

   My own experience is that from running adblock all the time, aggressive blocking measures, and disabling targetting/personalisation, I get the absolute worst ads/ad networks when I do get them (for example when Firefox broke all a
10. 520.▲
    by dylz 7y ago

    There's been stuff like this: https://www.insidehighered.com/news/2017/03/06/u-california-...
11. 521.▲
    by dylz 7y ago

    It's a JS client side application, it really doesn't make that much of a difference..
12. 522.▲
    by dylz 7y ago

    Payroll internationally is likely a PITA.
13. 523.▲
    by dylz 8y ago

    PureVPN, Ivacy, and a few others (unsure if IAPS still exist in 2019) are large liars
14. 524.▲
    by dylz 8y ago

    Their opt out of marketing tracking box has been a meme because you have to manually click hundreds of checkboxes in a very small window on every pageload to not be tracked, accidentally closing the box or hitting accept once will enable al
15. 525.▲
    by dylz 8y ago

    Don't let me get you down. After all, look at what HN users said about Dropbox when it launched :) As a dev I am sick of marketing bullshit and believe none of it, prefer spec sheets and seeing the code myself, competent engineer suppo
16. 526.▲
    by dylz 8y ago

    Personally, my belief is that a completely unvetted, uncurated list of links is not very useful. Maybe others may differ. It would be more work but I would much rather look at a list of curated services that are also affiliate links that te
17. 527.▲
    by dylz 8y ago

    I'd also be interested in why some of your external scripts are (very badly and slowly) trying to fingerprint the browser and do persistent tracking. Your aiva thing is triggering "site is attempting to load adobe flash" noti
18. 528.▲
    by dylz 8y ago

    This is an affiliate link farm with obnoxious shaming dark patterns...
19. 529.▲
    by dylz 8y ago

    I'd pay for ad and analytic and tracking free. Not just making the ads invisible, but the other code along with it disabled.
20. 530.▲
    by dylz 8y ago

    Blocking these domains seems to make it not spin up the CPU/GPU. https://i.imgur.com/Aq8qT0c.png
21. 531.▲
    by dylz 8y ago

    They were entering their details into a presumably infected and logged machine?
22. 532.▲
    by dylz 8y ago

    I see it used in DDoS defense by "hijacking" the traffic of the /32. The standard unprotected provider gets hit and the mitigation provider announces a more specific /48 then tunnels the traffic back out of band
23. 533.▲
    by dylz 8y ago

    Sure - I see nothing wrong with separating out the categories. There are different types and different levels. End of the day, at least in my opinion, it is acceptable to be added to blocklists, and it is acceptable to not use those blockli
24. 534.▲
    by dylz 8y ago

    By definition, loading it will send your (regardless of whether or not they save this or associate it permanently on their end) coarse location via IP, OS, CPU architecture, browser and via user agent, referrer, execute code on your machine
25. 535.▲
    by dylz 8y ago

    They're running on VMs, not bare metal, presumably, because their (new) server's reverse DNS is vps-*, and previously on Digitalocean. You can just dump the VM's memory space while unlocked, can't you? A lot of this seem
26. 536.▲
    by dylz 8y ago

    Yes. Easylist/EasyPrivacy here is intended to block ANY third party tracker. This is a tracker. I use this adblock list and I don't care what country you're hosted in, simpleanalytics is a third party tracker and should be bl
27. 537.▲
    by dylz 8y ago

    ATT, ATT Wireless, Verizon, Verizon Wireless WTF?
28. 538.▲
    by dylz 8y ago

    At least he sticks to his word and doesn't take vaccinations himself?
29. 539.▲
    by dylz 8y ago

    The demographic of people buying the bots are not... very technical. Discord is what they are "used to".
30. 540.▲
    by dylz 8y ago

    They run VPN: https://play.google.com/store/apps/details?id=com.nielsen.od...