News for hackers. Stuff that matters.
Re:Using Goatse to Stop App Theft by nonrandomstring on Tuesday October 17, 2023 @12:21PM (#37917499)
Once, out of the kindness of my foolish heart, I ran a server with a lot of great sound effects for all and sundry to download.

Eventually the bandwidth was getting hammered by a huge number of leechers seemingly from some apps that had simply hard-linked to the resources.

After replacing said resources [0] they soon ceased but not without a slew of abusive and entitled emails demanding I restore the SFX.

Oh fun times!

[0] https://fukpig.bandcamp.com/track/all-of-you-are-cunts-and-i...

Re:Using Goatse to Stop App Theft by VHRanger on Tuesday October 17, 2023 @12:42PM (#37917794)
You're selflessly trying to get people to appreciate new music styles and get in touch with their anger and they respond with contempt.

What an entitled bunch

Re:Using Goatse to Stop App Theft by duxup on Tuesday October 17, 2023 @01:10PM (#37918192)
In the days of P2P file sharing I used to share files with file names and metadata indicating they were rare Metallica live recordings of Metallica songs and other metal band's songs.... but instead https://www.youtube.com/watch?v=hwK_WOXjfc0

So many downloads.

Re:Using Goatse to Stop App Theft by ahartmetz on Tuesday October 17, 2023 @03:39PM (#37920491)
Oh, hello Lars Ulrich!
Re:Using Goatse to Stop App Theft by swores on Tuesday October 17, 2023 @04:16PM (#37920944)
Hopefully you've since grown up a bit and discovered some hobbies that don't involve being a dick to annoy strangers?
Re:Using Goatse to Stop App Theft by pseg134 on Tuesday October 17, 2023 @05:39PM (#37921970)
You are stealing from musicians so I think you are the dick and you are annoying me, a stranger!
Re:Using Goatse to Stop App Theft by duxup on Tuesday October 17, 2023 @09:48PM (#37923960)
If you’re pirating music I would hope you could enjoy a good joke…
Re:Using Goatse to Stop App Theft by tormeh on Tuesday October 17, 2023 @04:23PM (#37921046)
> https://www.youtube.com/watch?v=hwK_WOXjfc0

I'm downright shocked that this wasn't Rick Astley.

Re:Using Goatse to Stop App Theft by tbossanova on Tuesday October 17, 2023 @04:45PM (#37921341)
Was expecting to be rickrolled!
Re:Using Goatse to Stop App Theft by extraduder_ire on Tuesday October 17, 2023 @10:44PM (#37924330)
This is part of how Soulja Boy became famous initially, by uploading his song "Crank That" with the metadata from various top-40 tracks of the time.

Or so he says, it may have been mostly copycats after a time.

Re:Using Goatse to Stop App Theft by dpedu on Tuesday October 17, 2023 @01:29PM (#37918488)
Hah, back in the flash days I did a similar thing. I ran a website, one of those one-page deals where the whole point of the site was a single button that played a sound. I too had a problem with people hotlinking my flash app, so I used the same trick to redirect it to a different applet that played loud horrific screams!
Re:Using Goatse to Stop App Theft by jjice on Tuesday October 17, 2023 @01:38PM (#37918623)
Oh I love stories like this - great retort! It reminds me of that time that some app (or apps) was hammering an image of a butterfly from Wikimedia because it was part of some sample code that was never removed. I couldn't find the story but it was a fun but upsetting source of abuse from unknowing devs.
Re:Using Goatse to Stop App Theft by jjice on Tuesday October 17, 2023 @01:47PM (#37918782)
Re:Using Goatse to Stop App Theft by user_7832 on Wednesday October 18, 2023 @07:18AM (#37927156)
Thanks for the links, they’re fascinating!
Re:Using Goatse to Stop App Theft by amatecha on Tuesday October 17, 2023 @01:49PM (#37918822)
hahah yeah years ago when i ran my web server in my home, some images got hotlinked to on forums.. welp, some pretty simple redirects based on referrer probably resulted in some pretty confused forum-goers. :)
Re:Using Goatse to Stop App Theft by tptacek on Tuesday October 17, 2023 @02:02PM (#37919044)
The users of these apps probably don't even understand what it means to hotlink someone else's resources, and, rather than simply remove the resources, you replaced them with an overtly offensive message. I'm not saying you weren't within your rights to do that, but you can't at this point high-horse and complain about the abusive emails you got as a reaction.
Re:Using Goatse to Stop App Theft by BHSPitMonkey on Tuesday October 17, 2023 @02:45PM (#37919704)
I was under the impression the emails came from the app developers. Surely it's reasonable to complain about their entitled demands, unconditionally?
Re:Using Goatse to Stop App Theft by michaelmrose on Tuesday October 17, 2023 @05:50PM (#37922090)
I don't think its possible to create a website without understanding linking.
Re:Using Goatse to Stop App Theft by admax88qqq on Tuesday October 17, 2023 @02:06PM (#37919104)
"I ran a server for free sound effects for all and when it got popular I fucked over my users" lolwut.
Re:Using Goatse to Stop App Theft by nonrandomstring on Tuesday October 17, 2023 @02:23PM (#37919361)
Well that's not quite what happened is it? It was never "popular". I got my stuff abused and retaliated in a benign, schoolboy fashion for laughs.

Though if shall own any blame it's for being naive and inexperienced in the days before we all needed rate limiting against corporate bots.

As it goes, the whole shebang got archived on Wayback/Internet Archive so all the goodies remain up there for people to enjoy and I stopped needing to run a box and deal with misuse. God bless the Internet Archive I guess.

Re:Using Goatse to Stop App Theft by karaterobot on Tuesday October 17, 2023 @02:12PM (#37919194)
The issue was hotlinking directly to resources, which has been a no-no on the web since day one. The fault is entirely on the side of the bad actors who misused a free resource and in so doing ruined it.
Re:Using Goatse to Stop App Theft by adhoc_slime on Tuesday October 17, 2023 @02:09PM (#37919149)
You know that is not in the spirit of the website. They were taken advantage of.
Re:Using Goatse to Stop App Theft by worthless-trash on Tuesday October 17, 2023 @11:47PM (#37924655)
Old mate probably doesn't know, as a lot of people have been conditioned that if its online it's free.
Re:Using Goatse to Stop App Theft by ngcazz on Tuesday October 17, 2023 @02:23PM (#37919360)
Should've cached the responses!
Re:Using Goatse to Stop App Theft by michaelmrose on Tuesday October 17, 2023 @05:55PM (#37922139)
If you offer a zap sound for a game maybe 3 devs download it if they use it on their games 30,000 people might download it. Its pretty obvious one is the intended use and one is not.
Re:Using Goatse to Stop App Theft by mrweasel on Tuesday October 17, 2023 @02:10PM (#37919158)
> simply hard-linked to the resources

It's fairly surprising to see that approach from pretty large brands/companies. Some Indian ISPs are kinda notorious in that they'll just link to huge image files on third-party sites and just let their 300 million customers hammer the poor site into the ground. I guess it saves them bandwidth, but they also run a huge risk of pissing someone off and have that asset replaced by something nasty. When people use this kind of hard-linking/hot-linking of resource I don't think they do it to save money or to be evil, I think it mostly gross incompetence.

We had an issue where our product images would just be ruthlessly scraped, if there had been some rate-limiting in place we'd most likely just have allowed it or not noticed. Normally I just pointed the poor scraper to a multi-gigabyte file or funny and unrelated image, if you want to download the same image of a beaver 25.000 times go ahead.

But I also seen amateurishly search engines just pound a site to the point where it was easier to just deny all traffic coming from their crawler, as compared to try to reach out and figure something out. Say what you will about Google and Bing, their crawlers are well written and well behaved.

Re:Using Goatse to Stop App Theft by ecshafer on Tuesday October 17, 2023 @02:57PM (#37919894)
The isps can pretty easily set up a cache for things that are popular. There was a time when I worked for an ISP consultancy, where Netflix would literally give ISPs a prebuilt cache server iirc for free, and that was a win win for everyone. I shouldn’t be surprised that some shitty isp thinks it’s easier to hard link, but making a cache isn’t that hard.
Re:Using Goatse to Stop App Theft by abdullahkhalids on Tuesday October 17, 2023 @03:08PM (#37920073)
A couple of years ago, the main submarine link connecting my country to the internet was damaged, and internet basically slowed to a crawl for a day. Could barely open anything.

But Netflix was running at full HD with no problem. So they must have had local cache's with the ISPs.

Re:Using Goatse to Stop App Theft by andylynch on Tuesday October 17, 2023 @03:28PM (#37920354)
Very likely. Netflix has a program where they ship edge cache appliances to ISPs free of charge.
Re:Using Goatse to Stop App Theft by Lukas_Skywalker on Tuesday October 17, 2023 @03:37PM (#37920471)
There are some public details about the program, and it's quite interesting: https://openconnect.netflix.com/en/appliances/
Re:Using Goatse to Stop App Theft by gorlilla on Tuesday October 17, 2023 @07:02PM (#37922728)
I recall when they approached Verizon for the same thing; Verizon wanted rent[0].

[0]: https://time.com/2866004/verizon-netflix/

Re:Using Goatse to Stop App Theft by masukomi on Monday October 23, 2023 @12:20PM (#37987863)
this is how CDNs make their money. They replicate popular content close to the users. They generally do that WITHOUT giving anyone hardware, but by renting hardware in smaller areas, and setting up their own data centers in popular areas.

source: I used to work at Akamai (it was a while ago). The myriad things they do with their edge servers is pretty amazing, but for simple CDN stuff, most of the time clients aren't shipping hardware to isps. That being said, if Netflix can convince an isp to pay its electricity and hardware maintenance costs for a popular isp's customers that's going to pay for itself very quickly. So, i can see why Netflix offers this. It's just not normal AFAIK.

Re:Using Goatse to Stop App Theft by bombcar on Tuesday October 17, 2023 @04:37PM (#37921237)
I think they're referring to the famous Wikimedia flower - https://phabricator.wikimedia.org/T273741

And it's much harder now to have a caching server because everything is HTTPS, so you have to coordinate with both ends to make it work.

Re:Using Goatse to Stop App Theft by Logans_Run on Tuesday October 17, 2023 @04:33PM (#37921188)
I'm not defending the practice by any stretch of the imagination (it's wrong to hotlink, simple as) but I can remember in the heady halcyon days of the early internet (back when Windows 95 had yet to become a thing) hotlinking was done out of pure ignorance about the impact it had on the hosting site and most doing it knew no better nor of the impact it had on the hot-linked servers' resources.

Given that Eternal September remains a thing to this day, I wonder if that remains the case?

As for Google Bot being well behaved - I'm glad to hear that this has changed because at the turn of the century (which is the last time I dipped my toe in to self hosting) it certainly wasn't well behaved in the slightest and it would ruthlessly crawl away, happily ignoring any robots.txt limitations applied.

Re:Using Goatse to Stop App Theft by LordDragonfang on Tuesday October 17, 2023 @04:43PM (#37921320)
Yeah, if it were someone as important as an ISP doing it, you could easily be very petty and change it to an image that read "<isp> officially endorses <toxic political view>" (say, the statehood of Taiwan)
Re:Using Goatse to Stop App Theft by ngcazz on Tuesday October 17, 2023 @02:23PM (#37919352)
Hey, this is a proper banger!
Re:Using Goatse to Stop App Theft by Modified3019 on Tuesday October 17, 2023 @03:44PM (#37920562)
Truly, thou has cast pearls before swine.
Re:Using Goatse to Stop App Theft by Pxtl on Tuesday October 17, 2023 @05:37PM (#37921949)
Honestly, I know that it's far too late to change now, but I think the ability of a web-page to silently request resources from other domains has proven to be a complete misfeature overall. What's it given us? Tracking cookies, spy-pixels, cross-site-scripting-attacks, hard-link-bandwidth-stealing, SSL mixed-content warnings, etc.

Yes, I know it's also given us CDNs and Single Sign-On, but there are ways to implement SSO as a more active action without that, and I'm not convinced that CDNs are worth the cost we paid.

Re:Using Goatse to Stop App Theft by rtldg on Tuesday October 17, 2023 @07:33PM (#37922965)
I was browsing the source of Cookie Clicker and noticed that it blocks sounds from soundjay.com (which third-party mods used) for similar reasons.