I use zip bombs to protect my server
idiallo.com
I use zip bombs to protect my server
1–10 of 467 posts
Re: I use zip bombs to protect my server
#2[deleted]
Re: I use zip bombs to protect my server
#3Mildly amusing, but it seems like this is thinking that two wrongs make a right, so let us serve malware instead of using a WAF or some other existing solution to the bot problem.
Re: I use zip bombs to protect my server
#4I think it's a good idea, but it must be coupled with robots.txt.
Re: I use zip bombs to protect my server
#5Mildly amusing, but it seems like this is thinking that two wrongs make a right, so let us serve malware instead of using a WAF or some other existing solution to the bot problem.
Something like https://xeiaso.net/notes/2025/anubis-works/
Re: I use zip bombs to protect my server
#6I think it's a good idea, but it must be coupled with robots.txt.
AI scraper bots don't respect robots.txt
Re: I use zip bombs to protect my server
#7Mildly amusing, but it seems like this is thinking that two wrongs make a right, so let us serve malware instead of using a WAF or some other existing solution to the bot problem.
Something like https://xeiaso.net/notes/2025/anubis-works/
I did actually try zip bombs at first. They didn't work due to the architecture of how Amazon's scraper works. It just made the requests get retried.
Re: I use zip bombs to protect my server
#8I think it's a good idea, but it must be coupled with robots.txt.
AI scraper bots don't respect robots.txt
I think that's the point, you'd use robots.txt to direct Googlebot/Bingbot/etc away from countermeasures that could potentially mess up your SEO. If other bots ignore the signpost clearly saying not to enter the tarpit, that's their own stupid fault.
Re: I use zip bombs to protect my server
#9Mildly amusing, but it seems like this is thinking that two wrongs make a right, so let us serve malware instead of using a WAF or some other existing solution to the bot problem.
WAF isn't the right choice for a lot of people: https://news.ycombinator.com/item?id=43793526
Re: I use zip bombs to protect my server
#10I also had the idea of zip bomb to confuse badly behaved scrapers (and I have mentioned it before to some other people, although I did not implemented it). However, maybe instead of 0x00, you might use a different byte value.
I had other ideas too, but I don't know how well some of them will work (they might depend on what bots they are).