Live data from Hacker News

Wikimedia narrows down the app sendin 90M requests to a pic of flower

phabricator.wikimedia.org

91–100 of 105 posts

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#91
post #23

> To narrow down the app, we decided to observe connections to the image from clients (phones) to our servers. We did this by opening the popular apps one-by-one and noting down the time. After doing this for all the apps, we then ran this query in Hive: SELECT * FROM wmf.webrequest WHERE year=2021 AND month=2 AND day=9 AND parse_media_file_url(uri_path).base_name='/wikipedia/commons/1/16/AsterNovi-belgii-flower-1mb.…

[deleted]

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#92
post #81

Earlier quoted context omitted.

Even worse: You might be seen as an easy way to Goatse people. Just give the yahoos the URL of an image you're rewriting to be the infamous gape. The traffic would only grow once you came to be known for Goatse as a Service.

> Goatse as a Service (YC S21)

Help us solve the problem of hotlinking.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#93

Earlier quoted context omitted.

> Goatse as a Service (YC S21)

Implemented via several dozen geographically distributed 1U servers with 10 or 100GbE network interfaces, and anycast DNS. You could do it pretty much the same as anycast DNS recursive resolvers, but all sharing the same hostname, IP and TLS keys.

We need goatse anycast address

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#94
post #59

Earlier quoted context omitted.

No, you can selectively decrypt HTTPS requests for only some domains, and act as passthrough for others.

Nope. Starting from Android 10, unless an app has explicitly allowed user certificates (and no-one reasonably does, it's all behind a flag), you will not be able to MITM it. You may inject your certificates as much as you want. The only option is to have a device on which you have root access, which can push system certificates with adb. This pretty much only means the android emulator these days.

So it's still possible on rooted devices? Seems good enough.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#95
post #5

This seems interesting from a legal point of view as well: Is an app downloading, but never displaying, creative commons content infringing on copyright (by not showing correct attribution and violating the CC terms)? Besides copyright, could this be considered theft of service?

I don't think this is theft. Nothing was stolen. At most Wikipedia suffered some damage in the form of slightly increased bandwidth costs. Also, theft is involuntary. The Wikipedia server has the power to simply refuse the connection.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#96
post #93

Earlier quoted context omitted.

Implemented via several dozen geographically distributed 1U servers with 10 or 100GbE network interfaces, and anycast DNS. You could do it pretty much the same as anycast DNS recursive resolvers, but all sharing the same hostname, IP and TLS keys.

We need goatse anycast address

You can totally get your own asn, acquire a /24 of ipv4 space, and announce as anycast your netblock containing the goatse httpd from multiple geographic locations.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#98
post #60
post #56

Earlier quoted context omitted.

It's usually not a good idea to explain a joke, and I'm not the GP so I'm not sure that's what they meant, but "plant" has multiple meanings, and I suspect they are referring to meanings 3 to 5 from this list: https://www.oxfordlearnersdictionaries.com/definition/americ... . Basically, you were asking for some kind of elaborate meaning to a random image downloaded by a random app, and they provided an elaborate consp…

Thanks, I appreciate your effort but there really isn't any need to explain this to me. I understood the parent comment this way too (i.e. as a snide remark trying way too hard to be funny in the worst possible, low effort, Reddit kind of way). It's just that since it's rare to see this kind of response here, I was wondering if the author was trying to make any finer point, although admittedly that was unlikely to be…

I've majored for years in cracking jokes on Hacker News; often a hazardous undertaking given the capricious and judgemental denizens of this forum. And yet comments whose kernel or allusions contain a mode of wit or wry observation have supplied roughly one third of the aggregate approbation tally, for what that's worth (which is, admittedly, very little, but remains nevertheless a useful guide to one's welcome).

What's curious is that many folks claim the subthreads of their comment as a personal fiefdom, taking umbrage at any remark they deem unworthy of the continuation, the self-appointed gatekeepers of repartee.

Specifically, though, I don't think this is a valid complaint:

> there really isn't any need to explain this to me

since it follows from:

> how does anything you wrote relate to anything I wrote?

which is, rhetorical or otherwise, and notwithstanding the pilgarlic territoriality, a clear request for an explanation, which rob74 has elegantly supplied, and to which I'd append only one additional observation, viz. that the image is a plant

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#99
post #76

Earlier quoted context omitted.

Heaven forbid someone make a joke on the internet and not take your frustrations as seriously as you seem to take yourself. To address your frustration at the analysis stopping there: What do you expect someone who is likely more versed in web dev and their unique distributed systems to do? Do you expect them to have the expertise to decompile an app from a third party, an app popular enough to cause this much traffi…

> Heaven forbid someone make a joke on the internet Jokes are funny. https://news.ycombinator.com/item?id=7609289 > I agree with what people have already said, but I think there's one more point to add: people usually over-estimate how funny their own comments are. We have a tendency to think, "This idea of mine is hilarious! And different! Surely this witticism is the exception." And we are usually wrong. When you h…

I'll offer a counterpoint that humour containing a kernel of truth, or simply tickling enough grey matter to be stimulating, especially when coupled to topical opinion or informative substance, however obliquely, or by contrapunctus an uncomfortable notion delivered via a candy-coating of levity, is often appreciated, and although I am not generally concerned with the integer popularity contest it is helpful feedback for training one's temporal lobe, and I will reveal that on this occasion the jest has strong positive reinforcement, most likely due to diffusely enclosing a distorted subtext of real events and the innate conflict of reconciling this to the mock-paranoiac narrative, but perhaps also due to the coupling thereof to the construction of a pun, and further observe that my own stumbling path to exploring which modes of wit might be appreciated on this forum, vs those rejected as noise, has been largely empirical, and years in the walking, and remains an ongoing process for the ages, and although I cannot claim to have discovered a global maxima, but instead have merely blindly grasped the whimsical elephant, I would question whether the existence and forms of comedy could be otherwise derived from first principles or any other means, all of which is to breathlessly recommend: go ahead, crack a joke, see what happens.

Re: Wikimedia narrows down the app sendin 90M requests to a pic of flower

#100
post #23

> To narrow down the app, we decided to observe connections to the image from clients (phones) to our servers. We did this by opening the popular apps one-by-one and noting down the time. After doing this for all the apps, we then ran this query in Hive: SELECT * FROM wmf.webrequest WHERE year=2021 AND month=2 AND day=9 AND parse_media_file_url(uri_path).base_name='/wikipedia/commons/1/16/AsterNovi-belgii-flower-1mb.…

They didn't have 'the phone'. They only had traffic logs and had to find the app that matched a certain traffic pattern. And they did have 'something like ElasticSearch', it's all in the link, and even in this reply.

It sounds like they did have the phone. Otherwise, Wikipedia is doing some sketchy stuff if they can figure out what apps are on my phone just from my IP address (IMO unlikely)
Post reply on HN