Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My website is being stolen in real time and I don't know what to do

news.ycombinator.com

Post reply on HN
Print view View original

61–70 of 111 posts

Re: My website is being stolen in real time and I don't know what to do

#61

Post by BlakePetersen »

raverbashing wrote: post #30

Ok, time for a reality check If you can't imagine what to do in this situation you shouldn't be running a website of this nature This type of thing can (and does) happen and it's up to you to know how to defend yourself. The others have given plenty of ideas, but I guess there are more specific things that can be done depending on their page structure/ads etc

So, you're suggesting him just giving up on his site and moving on? One issue that wasn't even his fault and he should walk away?

I guess trying to ask for advice and acting on that advice, all the while learning more and more about the potential attack vectors one should be aware of when dealing with these relatively new cryptocurrency services, is a shit idea.

BTW, love your intolerant handle. I guess you'd be bashing me then. Sorry my taste in music differs from yours, please don't "bash" me.

cowers in fear as the old, bitter hippie grabs his cane

Re: My website is being stolen in real time and I don't know what to do

#62

Post by asmosoinio »

I think mentioning the short URL provider auto-killed fragmede's comment, and my copy&paste of it. Here goes again:

fragmede's comment below is [dead], but has very good advice.

---

Nice bit of news you added to the top, which 4co.in is putting on their own site.

One piece of advice though: Drop the short link and link directly to altexplorer.net, otherwise it looks like 4co.in was 'hacked' and the short link is a phishing/some other sort of scam and not legit.

You should be able to pickup the 4coi.in domain as the referrer if you want metrics for how many people were using 4co.in.

---

Re: My website is being stolen in real time and I don't know what to do

#64

Post by danneu »

Don't punish users. The goal here shouldn't be to silently redirect or deceive them with fake data or throw up goatse.

Instead, make it annoyingly clear to anyone that visits 4co.in that the content is stolen. 4co.in users aren't visiting 4co.in to spite you. They just don't know and will gladly use your website instead.

The game of whack-a-mole is strongly in your favor because you're on the right side of a trapdoor.

Re: My website is being stolen in real time and I don't know what to do

#65

Post by josephg »

rakoo wrote: post #56

And here I thought "copying is not theft"

This isn't copying - its actually much closer to stealing.

The difference is that copying doesn't take anything from the original author. Here, the original author is still hosting 4co.in.

Re: My website is being stolen in real time and I don't know what to do

#66

Post by maxerickson »

BlakePetersen wrote: post #61
raverbashing wrote: post #30

Ok, time for a reality check If you can't imagine what to do in this situation you shouldn't be running a website of this nature This type of thing can (and does) happen and it's up to you to know how to defend yourself. The others have given plenty of ideas, but I guess there are more specific things that can be done depending on their page structure/ads etc

So, you're suggesting him just giving up on his site and moving on? One issue that wasn't even his fault and he should walk away? I guess trying to ask for advice and acting on that advice, all the while learning more and more about the potential attack vectors one should be aware of when dealing with these relatively new cryptocurrency services, is a shit idea. BTW, love your intolerant handle. I guess you'd be bash…

You shouldn't bother with all the personal attacks.

Re: My website is being stolen in real time and I don't know what to do

#67

Post by joeyjones »

lmg643 wrote: post #40
pilom wrote: post #7

You found out the right first step yourself: Block the source IP address. Sure it will turn into a game of whack-a-mole with them changing their IP but eventually, their customers will get fed up with their downtime. Second idea: Javascript redirect all of your pages to your own subdomain. Again, its just a step in an arms race, but this would be a little too hard/expensive to take to court. You can win an arms race…

interesting that they didn't change the donation addresses. so if someone uses theirs, and likes it, sends some BTC to them, it will go to you?

Yup, donations should still go to me.

Re: My website is being stolen in real time and I don't know what to do

#68

Post by intev »

jarrett wrote: post #27
pilom wrote: post #7

You found out the right first step yourself: Block the source IP address. Sure it will turn into a game of whack-a-mole with them changing their IP but eventually, their customers will get fed up with their downtime. Second idea: Javascript redirect all of your pages to your own subdomain. Again, its just a step in an arms race, but this would be a little too hard/expensive to take to court. You can win an arms race…

If you have a hard time determining their IP, here's a trick that might work. Visit their site with a unique but innocuous-looking path or query that would never be accessed by a normal user. For example: http://4co.in/?q=1 If the query string is being passed through, which I suspect it is, you can use the query string to easily locate the corresponding entry in your own logs. Or, if the query string isn't being pass…

Building on this, you could create a script on your server that requests a random url, then greps that url in your logs to figure out the IP and then add that to the banned list. It'll be an auto banning machine!

Re: My website is being stolen in real time and I don't know what to do

#69

Post by mynameismiek »

raverbashing wrote: post #30

Ok, time for a reality check If you can't imagine what to do in this situation you shouldn't be running a website of this nature This type of thing can (and does) happen and it's up to you to know how to defend yourself. The others have given plenty of ideas, but I guess there are more specific things that can be done depending on their page structure/ads etc

Do I need more karma to down vote people? Because, I would totally down vote this guy if I could.

Re: My website is being stolen in real time and I don't know what to do

#70

Post by JohnTHaller »

In addition to the other ideas here, I'd also recommend feeding a completely fake site to the source IP of the thief. Possibly including some political ideas that could get him in trouble in his host country (up to you depending on how mean you wish to be).
Post reply on HN