Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

I use zip bombs to protect my server

idiallo.com

Post reply on HN
Print view View original

271–280 of 467 posts

Re: I use zip bombs to protect my server

#271

Post by Mashimo »

charcircuit wrote: post #214
gkbrk wrote: post #202

Earlier quoted context omitted.

It's also cheaper to search Google Images for "Eiffel tower" than booking a flight to Paris and going there, but a lot of people enjoy doing the latter.

Many people would be better off sticking with the former than realizing what Paris actually is and being disappointed. https://en.wikipedia.org/wiki/Paris_syndrome

I had this in mind when visiting Paris and was pleasantly surprised. Lovely and beautiful city.

And to heck with cloudflare :S We don't need 3 companies controlling every part of the internet.

Re: I use zip bombs to protect my server

#272

Post by cobbaut »

mkwarman wrote: post #232
seanhunter wrote: post #228

Once upon a time around 2001 or so I used to have a static line at home and host some stuff on my home linux box. A windows NT update had meant a lot of them had enabled this optimistic encryption thing where windows boxes would try to connect to a certain port and negotiate an s/wan before doing TCP traffic. I was used to seeing this traffic a lot on my firewall so no big deal. However there was one machine in parti…

I enjoyed reading this, thank you for sharing. When you say you tried to contact the admin of the box and that this was common back then, how would you typically find the contact info for an arbitrary client's admin?

Back then things like postmaster@theirdomain and webmaster@theirdomain were read by actual people. Also the whois command often worked.

Re: I use zip bombs to protect my server

#275

Post by foundzen »

It is surprising that it works (I haven't tried it). `Content-Length` had one goal - to ensure data integrity by comparing the response size with this header value. I expect http client to deal with this out of the box, whether gzip or not. Is it not the case? If yes, that changes everything, a lot of servers need priority updates.

Re: I use zip bombs to protect my server

#277

Post by Aachen »

foundzen wrote: post #275

It is surprising that it works (I haven't tried it). `Content-Length` had one goal - to ensure data integrity by comparing the response size with this header value. I expect http client to deal with this out of the box, whether gzip or not. Is it not the case? If yes, that changes everything, a lot of servers need priority updates.

You don't need to set a content length header, it'll take the page as finished when you close the connection

Re: I use zip bombs to protect my server

#278

Post by thayne »

jedberg wrote: post #263
thayne wrote: post #245

Earlier quoted context omitted.

> The word "accessed" is used multiple times throughout the law. So what? It isn't in the section I quoted above. I could be wrong, but my reading is that transmitting information that can cause damage with the intent of causing damage is a violation, regardless of if you "access" another system. > Also, the protected computer has to be involved in commerce Or communication . Now, from an ethics standpoint, I don't t…

> So what? It isn't in the section I quoted above. You can't read laws in sections like that. They sections go together. The entire law is about causing damage through malicious access. But servers don't access clients. The section you quoted isn't relevant because the entire law is about clients accessing servers, not servers responding to clients.

Every reference to access I see in that law is in a separate item in the list of violations in section 1. Where do you see something that would imply that section 5a only applies to clients accessing servers?

Re: I use zip bombs to protect my server

#279

Post by Tistron »

pettycashstash2 wrote: post #143
socalgal2 wrote: post #111

Earlier quoted context omitted.

Jekyll and other static site generators do not repo Wordpress any more than notepad repos MSWord In one, multiple users can login, edit WYSIWYG, preview, add images, etc, all from one UI. You can access it from any browser including smart phones and tablets. In the other, you get to instruct users on git, how to deal with merge conflicts, code review (two people can't easily work on a post like they can in wordpress)…

what are your favorite static site generators? I googled it and cloudflare article came up with Jekyll,Gatsby,Hugo,Next.js, Eleventy. But would like to avoid doing research if can be helped on pros/cons of each.

I've come to really appreciate Astro.js It's quite simple to get started, fairly intuitive for me, and very powerful.

Re: I use zip bombs to protect my server

#280

Post by dmje »

carlosjobim wrote: post #78
sunaookami wrote: post #76

Earlier quoted context omitted.

Hosting WordPress myself for 13 years now and have no problem :) Just follow standard security practices and don't install gazillion plugins.

There's a lot of essential functionality missing from WordPress, meaning you have to install plugins. Depending on what you need to do. But it's such a bad platform that there really isn't any reason for anybody to use WordPress for anything. No matter your use case, there will be a better alternative to WordPress.

Just not true, although entirely aligned with HN users who often believe that the levels of nerdery on HN are common in the real world. WP isn’t bad, you’ve just done it wrong, and there really isn’t a better alternative for hundreds and hundreds of use cases..
Post reply on HN