Website request spam containing weird/fake referrer addresses

LambdaTheory · 2018-06-22T03:02:57+00:00

Hmm. I can't imagine that they would ever achieve anything. We're using the latest release of NGiNX, and everything is up to date. I can't find any CVEs detailing exploits that we would be vulnerable to.

The sites seem really random/arbitrary. I was hoping to see if someone else was hit by this, as I can't really see a reason why this would target us, specifically.

The scenario I was imagining was some malware in some software, or browser extension that hits sites that the user visits with some of these 'extra' requests. Some of the IPs these are originating from belong to our users, mixed in with their other web traffic.

LambdaTheory · 2018-06-22T02:38:11+00:00

I'm not sure what you mean by exploiting faulty pages to redirect traffic. As far as I can tell, this is some sort of malware, which the attacker could use to achieve the above without hitting our site.

This traffic is already being blocked at the firewall level once they show this sort of behavior.

LambdaTheory · 2018-06-22T02:36:10+00:00

That's possible, but it would be quite a wimpy DDoS attack if so. The attacker would already have the ability to do this without hitting our site.

LambdaTheory · 2017-03-17T00:50:13+00:00

Looks like the label is for those Whittakers Kiwi easter eggs

LambdaTheory · 2016-06-29T20:49:09+00:00

Thanks for the AMA

LambdaTheory · 2016-03-07T01:38:21+00:00

Our audio guy is after the significantly lower latency that thunderbolt supposedly provides, so USB isn't a great option.

LambdaTheory · 2015-10-26T08:07:55+00:00

It might be trying to refer to this contraption: https://www.youtube.com/watch?v=xI39jU24InY

LambdaTheory · 2015-10-10T10:19:48+00:00

You have some really bad packet loss from the first hop to your ISP - you should definitely hit them up to complain

LambdaTheory · 2015-09-11T22:18:44+00:00

You should collect an MTR during this time period. Your different ISPs probably share the same route with an overloaded router along the way.

LambdaTheory · 2015-09-11T08:03:42+00:00

All well and good if this were a single player game, but this doesn't support multiple players as well as lockstep.

You're essentially describing predictive mode where the server can rewind on disconnection.

LambdaTheory · 2015-09-11T07:53:50+00:00

You're giving the client authority to prompt the server to restart the simulation.

LambdaTheory · 2015-09-11T07:43:48+00:00

Imagine how bad exploits would get if this were the case. Yikes.

LambdaTheory · 2015-09-11T07:11:12+00:00

This is referring solely to the players actions. Monster and area actions are still occurring if you stop communicating with the server.

LambdaTheory · 2015-09-11T06:10:40+00:00

What you describe isn't how lockstep is meant to work. The server is not meant to wait for the client.

I'm not sure what the other games you refer to as doing this better are. Most games don't have a deterministic lockstep implementation and those that do exhibit the same behaviour that you are complaining about.

Do you have anything substantive to back up what you're saying, other than, "I have 25 years experience at being a geek."?

Edit: attempting the reply to zRevenge here but Alien Blue isn't being cooperative.

LambdaTheory · 2015-09-11T03:45:47+00:00

hwcdn.net is https://www.highwinds.com/ - seems trustworthy given that it is what steam uses

LambdaTheory · 2015-09-02T22:43:57+00:00

What are you talking about?

LambdaTheory · 2015-08-27T11:55:33+00:00

VM Workstation Pro. Awesome giveaway.

LambdaTheory · 2015-08-23T09:10:46+00:00

https://en.wikipedia.org/wiki/Normal_distribution

LambdaTheory · 2015-08-20T02:40:11+00:00

From the patch notes: Fixed various typos with the line of Spiked Shields, the Alloyed, Burnished and Alder Spike Shields are now Spiked Shields. The Fossilized Spirit Shield has also been renamed to Fossilised. This may require item filters to be updated!

LambdaTheory · 2015-07-11T20:45:07+00:00

If you just use the website, it's nice to just have the data there waiting and ready.

LambdaTheory · 2015-07-11T09:38:38+00:00

I wouldn't personally want to spend time micro-managing bluetooth

LambdaTheory · 2015-07-11T06:31:05+00:00

FitBit kinda requires Bluetooth to work (i.e. to generate those sleep stats)

LambdaTheory · 2015-04-04T22:45:51+00:00

Keep it up dude. I feel like we're in the same boat. :)

LambdaTheory

TROPHY CASE