Ask HN: Someone is proxy-mirroring my website, can I do anything?

Post by ignoramous » Mon, Dec 12, 2022, 9:01 PM UTC

DoctorOW wrote: post #45

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

In my search for this I found @document isn't super supported [0] I suggested something like: a[href*= "sukuns.us.to"] { display:none; } Then use SRI to enforce that CSS. [0]: https://caniuse.com/mdn-css_at-rules_document

Post by layer8 » Mon, Dec 12, 2022, 9:21 PM UTC

otikik wrote: post #246

santah wrote: post #71

Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…

Once you have their IP addresses you can make them serve anything you want. Set your imagination free. For starters: copyright-infringing material.

Post by wpietri » Mon, Dec 12, 2022, 9:23 PM UTC

yonixw wrote: post #250

wpietri wrote: post #108

One strategy tip: don't play cat and mouse. As you've demonstrated, if you change one thing, they will figure it out and change one thing. Not only does that not work, but you are training them that it's worth trying to beat your latest change. Instead, plot a few different changes and throw them in all at once. Preferably in a way where they will have to solve all of the changes at the same time to figure out what h…

I love it, also add a randomness, there is nothing more frustrating than a problem that only reproducers sometimes!

Post by mkoryak » Mon, Dec 12, 2022, 9:24 PM UTC

Firmwarrior wrote: post #239

mkoryak wrote: post #146

Earlier quoted context omitted.

because I asked them to stop doing it, and they didn't. Technically they were stealing my bandwidth. Also to teach them an important lesson about the internet.

haha, they're just lucky you didn't introduce them to Goatse

Post by oliv__ » Mon, Dec 12, 2022, 9:33 PM UTC