Tag Info

New answers tagged

1

The answer is subjective but wget simply makes HTTP GET requests, just as is done with a browser. At worst one might claim a denial of service (DOS) attack but if only a single thread, most would classify as either normal use or perhaps aggressive crawling.


0

Lets say you need to view the IPs over a 30-minute period to decide on abuse. Here is a scheme to keep the IPs no longer than one hour. Every 30 minutes, generate a memory-only random string, RS. For any time period, keep the current and previous RS: rs_c, rs_p. For every IP, compute the current hmac using the current random string: IP_c = HMAC(rs_c, IP) ...


2

It is little-known, but DoS attacks can be used to hack a website. A carefully calculated attack against a carefully chosen target can, for a LAMP server example, cause the PHP interpreter to crash while leaving Apache standing, effectively revealing all source code on a badly configured server. Then, if the DB config specifies a user with remote access ...


0

We are talking about two different things here. A DoS it is the result of an attack, but at the same time that attack could be done following hacking techniques. A DoS is simply making a service or services unavailable. If you achieve it by hacking into a box and wiping it out (or simply stopping the service), then you hacked someone to attack them with DoS ...


0

This problem can be dealt with a couple of layers. First of all, WordPress is slow, but it shouldn't cause your site to go down. Consider reviewing your WordPress installation. Consider reviewing your static content to ensure it is cached, as well as using a WordPress caching plugin. Additionally, check to make sure that your install is caching PHP ...


2

Gmail requires CAPTCHA solving when it detects suspicious behavior for an account, even if the requests originate from several IPs. There is always a balance to be set between user experience and user security. If a celebrity uses Gmail, she'd rather enter a CAPTCHA each time than having her emails publicly disclosed. Moreover, even if not yet "default on", ...



Top 50 recent answers are included