metalruler

6 ms·

1.
by metalruler 13y ago
This could be handy for joining a fledgling peer-to-peer network, where there are connected peers forming a network, but for one reason or another new nodes cannot find them - just do a masscan of the default listen port to find IPs to atte
2.
by metalruler 13y ago
Does this mean that a huge transaction for the right amount will hit the perfect low note, and cause everyone within earshot of listentobitcoin.com to simultaneously crap themselves?
3.
by metalruler 13y ago
I don't understand why it's necessary for the server to be open, and have recursion enabled. I run a couple of authoritative name servers and have seen them used for amplification attacks. Sure, it's not as easy as querying every open rec
4.
by metalruler 14y ago
That's ~600GB compressed - over 9TB when decompressed...... extremely slowly by ZPAQ. Seriously, at current rates the entire data set would take over 100 days to decompress on my computer. I'm only downloading a subset so I expect decompr
5.
by metalruler 14y ago
This is a way cool idea. Probably not the best thing to happen to the internet on a daily basis, but an amazing project nevertheless. Just waiting for someone to start mining bitcoins on 420,000 slightly underpowered CPUs... (Ok, seriously
6.
by metalruler 14y ago
Land? A single spoofed TCP SYN packet with identical src/dst addresses was enough to crash or at least impact many OSs. http://www.physnet.uni-hamburg.de/physnet/security/vulnerabi...
7.
by metalruler 14y ago
From a site owner's perspective: if you have a LOT of data then scraping can be very disruptive. I've had someone scraping my site for literally months, using hundreds of different open proxies, plus multiple faked user-agents, in order to
8.
by metalruler 14y ago
I checked my logs and there are several fetches from 72.94.249.37 and 72.94.249.38, over a number of domains that I host. None are particularly popular as far as the greater internet is concerned; one is a semi private site that I set up fo
9.
by metalruler 14y ago
Another hole that has been exploited in the past (speaking generally here, not about this specific startup) is a password reset function that confirms the email address it is sending the password/recovery link to. If the accounts are sequen
10.
by metalruler 14y ago
You could also argue that designing for the average phone may be holding others back. My Nokia N900 has a screen 800px wide, supports CSS, can display inline images, execute flash, execute javascript. Yet a lot of the time I get redirected
11.
by metalruler 14y ago
Last time I looked into javascript based mining perhaps a year ago, the effective earnings for a site with a few thousand uniques per day was only a few cents. Considering that a CPU intensive background process will impact negatively upon
12.
by metalruler 14y ago
Speaking of slowdowns - until recently, a gmail login quietly set cookies by redirecting through multiple subdomains during the "Loading" prompt. Most notable was that it passed through accounts.youtube.com to set a cookie. It now seems to
13.
by metalruler 14y ago
Agreed. More likely a catastrophic and significant loss for a small number of customers rather than a fraction of a percentage of loss for a large number. Similar deal for hard drive bit error rates, where the quoted average BER may not nec
14.
by metalruler 14y ago
I've seen forum participants give matter-of-fact, state-the-obvious replies which I'm pretty sure must have come from simple.wiki. I don't think it's a bot, just someone copying and pasting, however the simplified language could be very use
15.
by metalruler 14y ago
It really is a disgusting hack, and specific to FreeBSD. It does need to be a bit more sophisticated than "block an IP if it floods me" because as it is now someone can simply spoof the IP of an ISP's DNS server and effectively firewall the
16.
by metalruler 14y ago
I've been seeing a lot of reflector attacks in the past couple of weeks, where the attacker sends a relatively small query for a valid domain that will return a large reply. The trick is that they spoof the source IP, so the DNS reply goes