News for hackers. Stuff that matters.
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by spiffytech on Monday December 12, 2022 @08:00AM (#33954190)
> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged.

> 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you.

There's a popular blog that no longer gets linked on HN.

The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer are shown goatse, a notorious upsetting image, instead of the blog content.

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by mschuster91 on Monday December 12, 2022 @08:17AM (#33954323)
Goatse? I assume you're referring to jwz - that blog shows a testicle in an egg cup if it sees a HN referrer.
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by spiffytech on Monday December 12, 2022 @08:19AM (#33954336)
Yeah, jwz. Looks like I got mixed up - goatse has been a popular choice for this kind of thing, but jwz went with a different image.

Fortunately, there are many upsetting images for the OP to choose from!

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by GTP on Monday December 12, 2022 @08:16AM (#33954315)
Out of curiosity, which blog are you talking about?
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by ignoramous on Monday December 12, 2022 @04:06PM (#33960281)
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by someweirdperson on Monday December 12, 2022 @01:48PM (#33958510)
Does anyone not have their referer header supressed or faked?
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by zhfliz on Tuesday December 13, 2022 @05:07AM (#33966758)
I strip the referrer generally via https://wiki.mozilla.org/Security/Referrer, unfortunately it breaks a small number of sites very badly, such as web.archive.org and a few others. some of them claiming it was done to combat scraping.
Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by someweirdperson on Tuesday December 13, 2022 @06:23PM (#33977743)
Breaking is only part of the problem. The pages that rely on the referer header take it for granted and do not implement any meaningful error handling. They just die a horrible death, instead of responding with an error message stating that they need a referer.

One bad example is relying on the referer only for log-out, everything else works. That site also runs massive js on log-out, as if it really needs to rely on explicit log-out, and not just the user disappearing.

Re:Ask HN: Someone is proxy-mirroring my website, can I do a... by heleninboodler on Monday December 12, 2022 @06:57PM (#33962302)
I have never considered faking or suppressing my referer header. I don't know why I would care. I suspect I'm in the company of well over 99% of all internet users.