Live data from Hacker News

Spoilerwall: Respond to port scanning requests with movie spoilers

github.com

61–70 of 112 posts

Re: Spoilerwall: Respond to port scanning requests with movie spoilers

#61
post #6

Earlier quoted context omitted.

This is a short program that listens on a port and responds to any attempt to connect to that port by sending back movie spoilers. The idea being that anyone that tries to port-scan your machine will be punished by having all the twists in all the best movies revealed.

I like this explanation. But is this good network security?

I did a killclient which would send back a malformed packet to any ssh handshake and kill the connecting client. This made the pentesters mad. Sending them spoilers will just make the sad, and not so mad.

Re: Spoilerwall: Respond to port scanning requests with movie spoilers

#64
post #62

How about also responding with censored Russian and Chinese news stories, history, and the like? Seems like a decent way to respond to Kremlin astroturfers and friends, too.

So Russia and China put your servers on their blacklists and you get magical protection from hackers whose last hop comes from those countries? Excellent mitigation :)

Re: Spoilerwall: Respond to port scanning requests with movie spoilers

#66
post #59

Earlier quoted context omitted.

> Quick question I'm always wondering why people prefix a question with the statement "quick question". Now is my chance to ask. Is the question typed quickly? Should I imagine you speaking it in a quick manner? Is it meant as "off topic question"? Do you expect an answer quickly? What does it mean when you prefix your question with the words "quick question"?

It means that the asker believes the question is relatively short and thus won't be too much of a burden on the askee.

Ah, I understand. Like "what is mass" or "who killed JFK". Simple questions like that.

Re: Spoilerwall: Respond to port scanning requests with movie spoilers

#67
post #50

You have to be very careful when running this on the telnet port. I had a server set to spew a full color ANSI Nyancat at you when you telneted in. When the Mirai botnet was in full swing, I was pushing 5+ Mbps of Nyancat down to peoples infected webcams and killing my servers CPU.

Surely some enterprising hacker can optimize Nyancat so that a normal server can saturate a gigabit connection without killing the CPU.

Re: Spoilerwall: Respond to port scanning requests with movie spoilers

#68
post #50

You have to be very careful when running this on the telnet port. I had a server set to spew a full color ANSI Nyancat at you when you telneted in. When the Mirai botnet was in full swing, I was pushing 5+ Mbps of Nyancat down to peoples infected webcams and killing my servers CPU.

Maybe the data usage would have alerted the infected.
Post reply on HN