News for hackers. Stuff that matters.

A comment on Implementing fast TCP fingerprinting with eBPF. Parent comment

Re:Implementing fast TCP fingerprinting with eBPF by DamonHD on Sunday June 29, 2025 @04:31PM (#44416184)
Almost nothing pays attention to 429s, at least not in a good way, including big-name sites. I've written a whole paper about it...
[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by noident on Sunday June 29, 2025 @05:17PM (#44416493)
Who cares if they pay attention to 429s? Your load balancer is giving them the boot, and your expensive backend resources aren't being wasted. They can make requests until the cows come home; they're not getting anything until they slow down.
[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by ranger_danger on Sunday June 29, 2025 @05:40PM (#44416678)
If you're rate-limiting by IP, well... some entire countries have only a handful (or one) externally visible IP.
[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by patmorgan23 on Sunday June 29, 2025 @08:58PM (#44418095)
For IPv4 sure, but have you heard of our Lord and Savior IPv6?
[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by ranger_danger on Sunday June 29, 2025 @09:12PM (#44418194)
My local monopoly hasn't. Maybe in 20 years.
[ Parent | on HN ]
Re:Implementing fast TCP fingerprinting with eBPF by DamonHD on Monday June 30, 2025 @03:11AM (#44420371)
And some of the bad bots are snowshoeing across many many IPs (and fabricating UAs). How is that load balancer going to help?
[ Parent | on HN ]