News for hackers. Stuff that matters.
Re:A Raspberry Pi as a decent residential proxy by tzs on Monday June 08, 2020 @12:53PM (#23458274)
> Don’t expose the proxy to the world or attackers will be able to interact with your home devices

Or use it to get stuff on the internet that they don't want to get directly themselves. Once upon a time I accidentally enabled open proxying on the web server on my Linux box. This was before smart phones and tablets and such, when my Linux box was the only network client I had, and so I didn't have a NAT router. Just modem straight to Linux box.

One day I checked my Apache logs to see if my extremely low traffic web site had any visitors.

First impression: "What the hell is all this traffic? This is orders of magnitude more than I should have!".

Second impression: "Why the hell is someone trying to get horse_fucking.mov from my server?".

Third impression: "That didn't give a 404. Why is my server actually providing horse_fucking.mov?".

(No, the orders of magnitude extra traffic were not all people getting horse_fucking.mov. There was a whole plethora of bestiality titles, plus a lot of other porn that you would not want to fetch directly from your own IP address either out of embarrassment if you got caught or because it was almost certainly illegal).

Re:A Raspberry Pi as a decent residential proxy by oefrha on Monday June 08, 2020 @02:09PM (#23459043)
I once accidentally left privoxy open on one of my Linux servers and misconfigured ACL. A couple hours later it started getting hit with loads of traffic. A Google search quickly revealed that my ip:port ended up on several “free proxy” lists. They probably found it on Shodan or something. I quickly fixed acl to drop the traffic, but IIRC my server persisted on the free proxy lists for a couple days afterwards.

That was the first hand experience that confirmed my suspicions of what those “free proxies” really are.

Re:A Raspberry Pi as a decent residential proxy by AlexITC on Monday June 08, 2020 @02:12PM (#23459077)
Actually, you are giving one advantage to the custom-made proxy, it's not easily discoverable by bots, nor it could be used right away.
Re:A Raspberry Pi as a decent residential proxy by heavyset_go on Monday June 08, 2020 @04:18PM (#23460308)
Just using non-default settings for your proxy would be enough to thwart 99.9% of automated attacks, and you wouldn't have to rely on a hand-rolled proxy.
Re:A Raspberry Pi as a decent residential proxy by Topgamer7 on Monday June 08, 2020 @04:37PM (#23460493)
This is the same for ssh. If you want to decrease log size, change the port used away from default.
Re:A Raspberry Pi as a decent residential proxy by AlexITC on Monday June 08, 2020 @02:31PM (#23459309)
Adding on this, I just checked the logs and looks like some persons started playing:

    Calling: https://nsa.gov, headers = BOMBTHEMOSQUE -> 911
    Calling: https://fbi.net
    Calling: file:///bin/sh
    Calling: file:///etc/passwd
    Calling: http://127.0.0.1:80
Re:A Raspberry Pi as a decent residential proxy by neilv on Monday June 08, 2020 @07:55PM (#23462139)
20 years ago, I thought it would be cool to monitor Web and other port traffic on my Linux home PC by logging it to my X root window...

That's when I realized from the scrolling log messages that even residental ADSL was already under heavy probing from around the world.

I decided I didn't have the time or the stomach to try to deal with that at home, and there wasn't much I could do, so I disabled the logging.

Re:A Raspberry Pi as a decent residential proxy by AlexITC on Monday June 08, 2020 @01:10PM (#23458434)
> Or use it to get stuff on the internet that they don't want to get directly themselves

That's a good point, another one is people using your proxy to attack other servers.

I find the proxy area to be interesting but something I'm unlikely to use for business, you are quoting some examples that made me laugh, and I'd certainly laugh if it happens to me, but I know I will remove the public access, if I were involved in business with this, the story would be different.

Thanks for sharing.