2026-09-07 14:42 UTC
Replies (2)
-
@Edelruth@mastodon.online 2026-09-07 20:30
@jerry@infosec.exchange @bsdphk@fosstodon.org @tinker@infosec.exchange "... like the Borg." You set that down, and now it is permanently there. Chef's kiss.
-
@gnyman@infosec.exchange 2026-09-17 05:46
@jerry@infosec.exchange this is a digression, but on the topic of defences, I guess you're using all kinds of tricks, one thing I noticed when my older server was overwhelmed was AI scrapers are slow(er) to update their chrome (or fake UA) than normal users. So for my limited use case I got rid of all the scanners by only allowing the last few versions of Chrome. Worst case I block some users with old chrome with a message telling them to update (which is maybe a net good as using old chrome seems seriously dangerous nowadays). A more inclusive solution would maybe be to allow them but apply stricter rate limiting / throttle them from the start. They will adapt of course but just another trick to add to the toolbox of defences. Also yes, it's sad that we need to spend all this energy on this, and the only real alternative to playing catch up with them is to pay cloudflare or similar to play catch up instead...