News for hackers. Stuff that matters.

A comment on Show HN: “HTTP 419 Never Gonna Give You Up” for bots. Parent comment

Re:Show HN: “HTTP 419 Never Gonna Give You Up” for bots by gitgud on Thursday October 28, 2021 @08:39PM (#29033913)
> "And I remembered another nice trick which someone else came up with, zip bomb the bots :-)"

Just curious, is it legal to host a zip bomb on your website? I would think it would be classified under some kind of Cyber crime....

[ Parent | on HN ]
Re:Show HN: “HTTP 419 Never Gonna Give You Up” for bots by hoppyhoppy2 on Thursday October 28, 2021 @10:29PM (#29034524)
Legality aside, your web hosting provider may consider it as malicious software / cyberattack activity that breaks their TOS.
[ Parent | on HN ]
Re:Show HN: “HTTP 419 Never Gonna Give You Up” for bots by Piskvorrr on Friday October 29, 2021 @04:42AM (#29036532)
Why would that be? It's not even executable code: someone would need to 1.actively request it, 2.actively save it somewhere 3.actively try to extract it.
[ Parent | on HN ]
Re:Show HN: “HTTP 419 Never Gonna Give You Up” for bots by krageon on Friday October 29, 2021 @07:58AM (#29037453)
If the zip bomb explicitly targets bots it becomes not only a zip bomb, but a mitigation tailor-made to prevent abuse of your platform. Phrase it as the latter and it is probably okay.
[ Parent | on HN ]
Re:Show HN: “HTTP 419 Never Gonna Give You Up” for bots by pyuser583 on Thursday October 28, 2021 @10:11PM (#29034409)
It’s a bad idea.
[ Parent | on HN ]