Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Someone is proxy-mirroring my website, can I do anything?

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 310 posts

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#61

Post by mschuster91 »

spiffytech wrote: post #58
musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged. > 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you. There's a popular blog that no longer gets linked on HN. The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer ar…

Goatse? I assume you're referring to jwz - that blog shows a testicle in an egg cup if it sees a HN referrer.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#62

Post by DoctorOW »

JohnAaronNelson wrote: post #48
DoctorOW wrote: post #45

Earlier quoted context omitted.

In my search for this I found @document isn't super supported [0] I suggested something like: a[href*= "sukuns.us.to"] { display:none; } Then use SRI to enforce that CSS. [0]: https://caniuse.com/mdn-css_at-rules_document

Seems like it would be fairly easy to use this pseudo selector, and apply it to every element on the page. Making them show up as empty to the user

You could add a data attribute to the html tag of the document with the current URL, I.E.
then hide the full page with:

  html {display: none;}
  html[data-path*="saashub.com"] {display:block;}

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#63

Post by spiffytech »

mschuster91 wrote: post #61
spiffytech wrote: post #58

Earlier quoted context omitted.

> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged. > 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you. There's a popular blog that no longer gets linked on HN. The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer ar…

Goatse? I assume you're referring to jwz - that blog shows a testicle in an egg cup if it sees a HN referrer.

Yeah, jwz. Looks like I got mixed up - goatse has been a popular choice for this kind of thing, but jwz went with a different image.

Fortunately, there are many upsetting images for the OP to choose from!

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#65

Post by than3 »

Have you considered enabling HSTS on the webserver with dynamic endpoints and rate limiting after detecting the flagged IP, literally to a crawl?

I seem to recall someone doing something similar at one point hosting files and setting up resources that get pulled down only on flagged IPs such as a 300kb gzip encoded file that tries to expand to 100TB.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#66

Post by _siis »

filleokus wrote: post #13
sdrinf wrote: post #8

If the host (DediPath) is not respecting DMCA notices, one other thing you can do is adding the requester's IP address to every page, eg as a div class. If the responses are live proxied, this will surface the cloner's front-facing IP address, and you can block that (and their ASN) specifically.

Oh, I like this idea. Would be pretty easy to automate it by setting up some script scraping the IP revealed on their site, adding it to the block list as they rotate around. Clever.

Wouldn't they be able to do the same preventing you from scraping the site? They may have many IPs to work with, but you may not?

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#69

Post by dspillett »

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

> Maybe write some bad words to the user on random places in the HTML

> Create fake big css files (10MB etc). And repeatedly download that from the adversary's website. This should cost them too much money on proxies.

Be careful when doing things like this, including the shock image option mentioned in other comments, as then it could become an arsehole race with them trying to DoS your site in retribution. Then again, going through more official channels could also get the same reaction, so…

> When you detect proxy, return too big fake HTML files (10GB) etc. That could crash their server if they load the HTML into the memory when parsing.

Make sure you are setup to always compress outgoing content, so that you can send GBs of mostly single-token content with MBs of bandwidth.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#70

Post by zupa-hu »

You can overload their servers as they pass on any URL to you. Just make sure their resource usage is significantly more than yours. Eg. serving a gzipped response that contains millions copies of the same URL to your site. Ideally, make it not fit in their memory. Or, simply large enough to take really long to compute.

Put it under a URL only you know, then start DoS-ing it.

Of course that requires you to be able to serve a prepared gzipped resonse, depends on your stack.

Post reply on HN