91–100 of 114 posts
Are there any defenses I can put in front of my websites that are good for stopping these things? The amount of traffic I see from residential proxies is just killing me. In particular defense against residential proxies.
You can also check if your network is running a residential proxy exit node here: https://layer3intel.com/is-my-network-a-residential-proxy
I never connect any “smart” device to wifi. If it doesn’t work without connectivity, I don’t want it. I use my TVs as display devices. They have HDMI-in and that’s it.
I have a smart TV that's never spoken to the internet after exiting the factory, but it's a pretty tenuous state of affairs. I have this fear that someone staying over is going to see the "Services unavailable, press [menu] to troubleshoot" toast that shows up overtop the HDMI feed for a few seconds and think they're helping me by connecting it. 4-5 years worth of firmware updates all at once... half a decade of watc…
It is able to identify content directly from the pixels, they will know what you've watched even if it was from a pirated .mp4 served from your PC:
- DNS block & SNI filtering: I expect BrightData to rotate the endpoints if this issues gains enough attention. It will take some time once all the apps embedding the SDK catch up, but if they're smart SDK may already have a backup C&C connection they will try to reach out to after prolonged unavailability of the current endpoints.
- TLS fingerprint: unless SDK pins it, it's the cheapest one to rotate continously.
- MDM solution: almost unattainable to private users; not clear how stable the SDK name is to rely on.
Not saying I have a better approach. It seems behavior like this should be explicitly banned on Apple/Google's side with immediate termination of their publisher accounts.
> After config fetch, the SDK opens a persistent WebSocket to: wss://proxyjs.brdtnet.com:443 This hostname resolves to AWS Global Accelerator IPs There is some irony that both the scrapers and the websites being scraped are probably hosted on AWS, while playing an elaborate cat-and-mouse game pretending that they weren't.
https://aws.amazon.com/marketplace/seller-profile?id=bf9b432...
Earlier quoted context omitted.
> I have this fear that someone staying over is going to This happened to me. After they left, I tried a factory reset, but I don't have confidence there's not some code to remember previously saved wifi connections because my tinfoil hat is firmly in place. However, as you've said I only use the TV as an HDMI receiver. None of the TV's apps are used again. So I'm not sure how much they can detect from just the use o…
HDMI is heavily used for ACR (automatic content recognition) in smart TVs: "Our findings indicate that (1) ACR operates even when it is used as a “dumb” display via HDMI" "For both LG (a) and Samsung (b)TVs, the scenarios with the highest ACR traffic are Linear and HDMI." * https://dl.acm.org/doi/epdf/10.1145/3646547.3689013
I never connect any “smart” device to wifi. If it doesn’t work without connectivity, I don’t want it. I use my TVs as display devices. They have HDMI-in and that’s it.
Personally I'd just not want any TV in my house, but convincing the family of that is not easy ;-)
Earlier quoted context omitted.
Groups like Bright Data have pretty good KYC. After the scare of the police visit, the actual perpetrator would go to prison.
> Groups like Bright Data have pretty good KYC. They don't. I use their residential proxies without ever having KYC'd.
If the kind of proxying isn't illegal, in my opinion it should be -- saying it's bordering on circumvention of fundamental assumptions about Internet routing and IP address leasing (and ownership), would be a sorry understatement compared to what Bright Data has managed to package into a product payment: > you are allowing Bright Data to occasionally use your device’s free resources and _IP address to download public…
It's completely legal and the law you mentioned about IP routing and address ownership does not exist.
Earlier quoted context omitted.
It's completely legal and the law you mentioned about IP routing and address ownership does not exist.
But I didn't mention any law? My first sentence is written the way it is, for a reason?