News for hackers. Stuff that matters.

A comment on Buy An Ad, Own a Browser Botnet.

Re:Buy An Ad, Own a Browser Botnet by mike-cardwell on Thursday August 01, 2013 @03:02PM (#6142645)
"And with respect to DDoS, NoScript wouldn’t help because we could have done it all with HTML,"

"RequestPolicy" on the other hand does work against this. For example, when I visit threatpost.com, it wants to pull in content from the following external domains:

  kasperskycontenthub.com
  addthis.com
  gravatar.com
  wordpress.com
  google.com
  twitter.com
  google-analytics.com
  cloudfront.net
  fonts.googleapis.com
RequestPolicy blocks all of this by default, and the site and content is still perfectly readable.

In my browser it takes 39 http requests and 1MB of data transfer to view the page. If I were to disable RequestPolicy however, due to all the extra pointless crap the site wants to load those numbers would increase to 86 requests and 2.3MB.

[ Parent | on HN ]
Re:Buy An Ad, Own a Browser Botnet by jluxenberg on Thursday August 01, 2013 @04:54PM (#6143465)
Your browser isn't the problem, it's the hundreds of thousands of others that are using the default configuration and have no such protection.
[ Parent | on HN ]
Re:Buy An Ad, Own a Browser Botnet by dudus on Thursday August 01, 2013 @06:47PM (#6144124)
So it's the browser vendors fault.
[ Parent | on HN ]