News for hackers. Stuff that matters.

A comment on Mēris botnet, climbing to the record. Parent comment

Re:Mēris botnet, climbing to the record by colejohnson66 on Thursday September 09, 2021 @11:42AM (#28470924)
But how do you distinguish an abnormal traffic spike (HN hug-of-death) vs a botnet? Cloudflare’s solution is a CAPTCHA, but are there better options?
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by jgrahamc on Thursday September 09, 2021 @12:15PM (#28471336)
Cloudflare's solution is not a CAPTCHA. We have a ton of stuff going on that detects bots. CAPTCHAs are a small part of the tools we use. https://blog.cloudflare.com/cloudflare-bot-management-machin...
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by colejohnson66 on Thursday September 09, 2021 @01:42PM (#28472436)
Sorry. I didn’t mean to imply that you don’t have anything but CAPTCHAs. My wording could’ve been better.
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by geitir on Thursday September 09, 2021 @02:48PM (#28473153)
Do you have a scraper that looks for mentions of Cloudflare or did you just happen upon this?
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by jgrahamc on Thursday September 09, 2021 @03:26PM (#28473612)
Yeah. I use something like this: https://github.com/jgrahamc/hncomments

Although I really need to commit the final version as that one isn't quite what I use.

[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by mleonhard on Thursday September 09, 2021 @03:44PM (#28473826)
Cloudflare uses CAPTCHA to drive away proxy users. Privacy conflicts with Cloudflare's endgame of profiling every Internet user and then monetizing that data.
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by smasher164 on Thursday September 09, 2021 @12:06PM (#28471227)
An attack-resistant trust metric? Although I haven’t seen them used against denial of service attacks.
[ Parent | on HN ]
Re:Mēris botnet, climbing to the record by aj3 on Thursday September 09, 2021 @11:46AM (#28470962)
Generally you don't. Just be prepared to scale resources and handle everyone.
[ Parent | on HN ]