DMCA takedown?
They're serving your copyrighted content. Seems like what it was made for.
Ask HN: Someone is proxy-mirroring my website, can I do anything?
151–160 of 310 posts
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#152Earlier quoted context omitted.
Makes me wonder if you could switch serving content based on the URLs. So they redirect back to your website. Or display images marked as copyrighted.
I tried but couldn't redirect back to my website as they stripped / rewrote all JS.
Would it be possible to hide a hash/encoded URL somewhere in JS and delete the site/redirect if the hash/encoded URL contained something unexpected?
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#1531. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…
[deleted]
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#154Earlier quoted context omitted.
Makes me wonder if you could switch serving content based on the URLs. So they redirect back to your website. Or display images marked as copyrighted.
I tried but couldn't redirect back to my website as they stripped / rewrote all JS.
You could have a "stolen content" pure HTML/CSS banner that gets removed by Javascript. Only proxy site visitors will see the banner because the proxy deleted the Javascript.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#155HN probably won't like this but if they are blocking all JS you can make all content invisible with CSS and use JS to unhide it before page load finishes. Temporarily of course until these guys go away. The nice thing about this is it can be made arbitrarily complex. For example you can make the page actually blank and fetch all the normal, real content with JS after validating the user's browser as much as you like…
HN contains multitudes, I love this response. At the very least you collect info about their sophistication level; will they adapt to adversity or will the bail/move on?
I say that because I know there are a lot of people on HN who browse with JS off and rail against sites that require it. But sometimes you need it.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#156Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…
Instead of blocking by IP, just check SERVER_NAME/HTTP_SERVER variables in your backend/web server (or even in JavaScript of the page check window.location.hostname) and in case those include anything but original hostname, redirect to the original website (or serve different content with a warning to the visitor). If you have apache2/nginx this can be easily achieved by creating a default virtualhost (which is not your website), and additionally creating explicitly your website virtualhost. Then the default virtualhost can have a proper redirect while serving any other hostname.
Those variables are populated by the browser, unless proxying server is rewring them, your web-server will be able to detect imposter and serve him/her with a redirect. If rewrites are indeed in place, then check in the frontend. Blocking by IP is the last option if nothing else works.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#1571. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…
Shadow nefarious techniques are the best. Don't give them clear indications that there is a problem. For example, I had an app developer start stealing API content, so once I determined points to key from them, instead of blocking them I simply randomized the API content details returned to their user's apps. Hey, API calls look good, the app looks like it is working, no problem right? Well, the users of the app were…
Serious question — is there a way to defend from this "stealing the API" thing? E.g. building an authentication of some sort and then including a key with your app?
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#158Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#159Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…
Side note: great idea for a website. This could be really helpful. You got a new user here.
Thanks!
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#160.us.to subdomains are sourced from (dynamic) dns provider, FreeDNS: https://freedns.afraid.org/