Post #2836438
2025-08-15 16:49 UTC
Replies (4)
-
@Codeberg@social.anoxinon.de 2025-08-15 16:52
For the load average auction, we offer these numbers from one of our physical servers. Who can offer more? (It was not the "wildest" moment, but the only for which we have a screenshot)
-
@rotnroll666@mastodon.social 2025-08-15 16:53
@Codeberg@social.anoxinon.de Great thread and explanation. Thank you.
-
@usul@piaille.fr 2025-08-15 16:53
@Codeberg@social.anoxinon.de #opshugs
-
@Suiseiseki@freesoftwareextremist.com 2025-08-15 16:58
@Codeberg@social.anoxinon.de >now that they managed to break through Anubis There was no break - it's a simple matter of changing the useragent, or if for some reason there's still a challenge, simply utilizing the plentiful computing power that is available on their servers (which far outstrips the processing power mobile devices have). Anubis is evil and is proprietary malware - please do not attack your users with proprietary malware. If you want to stop scraper bots, start serving GNUzip bombs - you can't scrape when your server RAM is full. dd if=/dev/zero bs=1G count=10 | gzip > /tmp/10GiB.gz dd if=/dev/zero bs=1G count=100 | gzip > /tmp/100GiB.gz dd if=/dev/zero bs=1G count=1025 | gzip > /tmp/1TiB.gz nginx; #serve gzip bombs location ~* /bombs-path/.*\.gz { add_header Content-Encoding "gzip"; default_type "text/html"; } #serve zstd bombs location ~* /bombs-path/.*\.zst { add_header Content-Encoding "zstd"; default_type "text/html"; } Then it's a matter of bait links that the user won't see, but bots will.