Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

What a Hacker Stole from Me

mynoise.net

Post reply on HN
Print view View original

71–80 of 134 posts

Re: What a Hacker Stole from Me

#71

Post by socalgal2 »

acomjean wrote: post #25
FreeTrade wrote: post #22

It's traumatic to be victim of malevolence. There's the injury, but it is the lack of a motivation which is disturbing - it's a loss of innocence.

It does suck. Because it’s a reminder that they’re are jerks out there and hard to avoid. Especially on the web. It also must sting because he’s trying to be a good citizen. We see this in abusive behavior towards open source maintainers. It saps their will. And 100 thanks About a year ago the site I worked on had a hacking attempt. I’m not sure why, it was a site that provided online genetic tools for researchers. W…

Just as a note to 100 thanks 10 years. I get less than 2 thanks a year. I'm not saying I deserve any or that I want them. Only providing data.

I also have 100+ open source projects on github. A few with ~1000 stars. Same thing, few if any thanks.

I wish there was some way to make it easier to thank. I'm just as guilty of not thanking all the open source projects I use except for the few I donate to.

It would still suck to get attacked but it would be motivating to get thanked as well.

Re: What a Hacker Stole from Me

#72

Post by Drunkfoowl »

socalgal2 wrote: post #69

hackers effectively killed https://glslsandbox.com It's been closed for about a year and a half because some hackers spammed it and no one has time to deal with it. There are other sites like shadertoy that do something similar but still, it sucks to see someone's project get shit on by assholes. As for denial of service issues, because it's free I've mostly hidden behind cloudflare in the hope of not having to perso…

The last part is so true.

I’m a big guy, 6’3’’ 260, multiple Ironman, sport, climbing, lifting and hunting brush with a bit of combat training over the years. Most people in my life I imagine I could kill with my bare hands. But I don’t, because like you said that isn’t how life works.

Yet people apply it to anything they want recklessly. Cars, phones, or like above peoples projects. I wonder how they would feel if I beat the shit out of them and laughed, telling them their mom should have fucked someone bigger.

Anyway, I agree it sucks.

Re: What a Hacker Stole from Me

#73

Post by madaxe_again »

This is just how some people are.

A few years back someone set fire to our land and our home just to see what it would look like on fire.

Vast destruction, hundreds of hectares reduced to ash, wildlife displaced, us displaced, thousands of man-hours of firefighter time used, millions of euro of aviation costs for firefighting aircraft, years of rebuilding now behind us, years of restoring the land ahead of us.

The individuals concerned faced no consequences, as extradition was refused, and our insurer refused coverage as they don’t cover arson.

This is just the way things are. Some people just want to watch the world burn, and there’s nothing you can do about it.

Re: What a Hacker Stole from Me

#74

Post by VladVladikoff »

rvnx wrote: post #66
drpixie wrote: post #50

1. Don't take it personally. They don't know or care who you are. 2. Some kind of rate limiter is becoming essential for servers. Scanning/probing is worse than rude but there's plenty of obnoxious out there. Fail2ban can easily be configured to handle simple login or vulnerability scans. If there's not something similar for web servers, it wouldn't be hard to write one. Anyone know of fail2ban or rate-limiters for w…

Needs to put Cloudflare (free plan) in front of the website and the problem is fixed

Maybe I’m just a curmudgeonly old fart but I’m so tired of everyone pretending like the entire internet being MiTM’d by Cloudflare is somehow a good thing.

FWIF if you are looking for a decent alternative take a look at ModSecurity project by OWASP.

Re: What a Hacker Stole from Me

#76

Post by lcnPylGDnU4H9OF »

bronlund wrote: post #65
thijson wrote: post #61

Earlier quoted context omitted.

I think I saw an article recently where someone used the http protocol to serve gzipped content that was specially crafted to explode in size on the receiver side. This could be a good preventative to crawlers as they don't typically have that much space dedicated to each instance.

I like the general idea of having zero tolerance for bad behaviour.

> bad behaviour

It’s worth noting that the “zip bomb” was at a resource location specified in the Disallow section of robots.txt, meaning the server specifically told the bot not to go there and it did anyway.

(Not that the parent commenter seems confused, just that it hadn’t been noted.)

Re: What a Hacker Stole from Me

#77

Post by kmoser »

reddalo wrote: post #68
rvnx wrote: post #66

Earlier quoted context omitted.

Needs to put Cloudflare (free plan) in front of the website and the problem is fixed

The state of the internet is a bit sad if we need to collectively rely on Cloudflare. And we don't even have other free alternatives (that I know of).

Nobody needs to rely on Cloudflare when they can use server-side solutions like Fail2ban (already mentioned). Other tools like iptables exist for more granular control over incoming traffic. There is no one-size-fits-all solution, so just pick the tool(s) that work for your situation. If your situation is so unique that no existing tool will work, you likely have the resources to write your own.

Re: What a Hacker Stole from Me

#78

Post by rvnx »

VladVladikoff wrote: post #74
rvnx wrote: post #66

Earlier quoted context omitted.

Needs to put Cloudflare (free plan) in front of the website and the problem is fixed

Maybe I’m just a curmudgeonly old fart but I’m so tired of everyone pretending like the entire internet being MiTM’d by Cloudflare is somehow a good thing. FWIF if you are looking for a decent alternative take a look at ModSecurity project by OWASP.

It’s a good cost vs reward ratio in that specific case. Very little risk if NSA knows your MyNoise history. And for emails and very confidential content they have partnerships with Apple, Google, Meta, etc

Re: What a Hacker Stole from Me

#79

Post by rvnx »

kmoser wrote: post #77
reddalo wrote: post #68

Earlier quoted context omitted.

The state of the internet is a bit sad if we need to collectively rely on Cloudflare. And we don't even have other free alternatives (that I know of).

Nobody needs to rely on Cloudflare when they can use server-side solutions like Fail2ban (already mentioned). Other tools like iptables exist for more granular control over incoming traffic. There is no one-size-fits-all solution, so just pick the tool(s) that work for your situation. If your situation is so unique that no existing tool will work, you likely have the resources to write your own.

It costs a lot of time and energy, especially for a music artist, for a website that has no private data and that is not sensitive. Cloudflare has specialized people who watch 24/7 and they provide free bandwidth, all of that for 0 USD

Re: What a Hacker Stole from Me

#80

Post by type0 »

Pine_Mushroom wrote: post #47

Feel for the guy. I had a couple of long owned domains stolen recently. They were so low value to anyone but me though, it makes me wonder why someone would bother.

Newly registered domains don't get the same recognition in search engines as older ones. That's why there's a market for stolen domains, the same is true for social media accounts
Post reply on HN