11–20 of 50 posts
Some of the assessments make sense for a server but this is going to be called from client machines. Is there an endpoint to call and pass an IP address to test?
Some of the assessments make sense for a server but this is going to be called from client machines. Is there an endpoint to call and pass an IP address to test?
No IPv6? Goddamnit, it is 2017.
No IPv6? Goddamnit, it is 2017.
> Torrent Downloads: If an IP address detected downloading torrents, the risk level is considered extreme. Why? There is some more info in the README at Github ( https://github.com/binaryedge/ratemyip-openframework ), but nothing about why torrents induce extreme risk level .
> Web: The lack of at least one security header represents an extreme level of exposure
Don't really get that one either. So any site not using HSTS, CSP, or Key Pinning, for example, is automatically at extreme risk?
> Torrent Downloads: If an IP address detected downloading torrents, the risk level is considered extreme. Why? There is some more info in the README at Github ( https://github.com/binaryedge/ratemyip-openframework ), but nothing about why torrents induce extreme risk level .
Also: > Web: The lack of at least one security header represents an extreme level of exposure Don't really get that one either. So any site not using HSTS, CSP, or Key Pinning, for example, is automatically at extreme risk?
I know because I reviewed this library (https://github.com/VincentGarreau/particles.js) when a colleague wanted to add something similar to our site. The problem is it uses a naive O(n^2) algorithm for linking up particles when they get near each other, which wastes a lot of CPU cycles.
Running this script with a large number of particles and auto-linking on is ill-advised - but fortunately you can delete the element quite easily to stop the script.
Does this work with dynamic IP addresses? In the fine print at the bottom of the page, it says that "the data has been collected passively over the last month," and I'm not sure how you can do that for a dynamic IP address. Could you enlighten me?
Hi, essentially we scan the entire IPv4 space, 200 ports per month. What we mean by that is that when you open the page a scan won't open targeted directly at your ip address!
> Torrent Downloads: If an IP address detected downloading torrents, the risk level is considered extreme. Why? There is some more info in the README at Github ( https://github.com/binaryedge/ratemyip-openframework ), but nothing about why torrents induce extreme risk level .
We will add this information, but essentially we and other partners have seen a high quantity of torrents infected with malware. We intend to fine tune this in the future to differentiate the torrents depending on category!
Additional non-related questions:
- How do you scan ipv6s? Scanning the entire space is easy for ipv4 (we do that for some router-security-related projects), but ipv6 space is freaking huge.
- Have you considered using something like Shodan (https://www.shodan.io/) API instead of scanning the address space by yourselves?
Earlier quoted context omitted.
Hi, essentially we scan the entire IPv4 space, 200 ports per month. What we mean by that is that when you open the page a scan won't open targeted directly at your ip address!
Sure, but for dynamic IP addresses, the box that had the IP when you scanned it days ago is not necessarily the same that has it now.