home.social

#tarpit — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #tarpit, aggregated by home.social.

fetched live
  1. Has anyone got a tip for a #nixos version of #tpotce github.com/telekom-security/tp or similar #tarpit like #honeypot #ids #ips ? How does one easily obtain a suitable #ipv4 & #ipv6 address if one rightly does not want to use one's own?

  2. Has anyone got a tip for a version of github.com/telekom-security/tp or similar like ? How does one easily obtain a suitable & address if one rightly does not want to use one's own?

  3. Has anyone got a tip for a #nixos version of #tpotce github.com/telekom-security/tp or similar #tarpit like #honeypot #ids #ips ? How does one easily obtain a suitable #ipv4 & #ipv6 address if one rightly does not want to use one's own?

  4. Has anyone got a tip for a #nixos version of #tpotce github.com/telekom-security/tp or similar #tarpit like #honeypot #ids #ips ? How does one easily obtain a suitable #ipv4 & #ipv6 address if one rightly does not want to use one's own?

  5. Has anyone got a tip for a #nixos version of #tpotce github.com/telekom-security/tp or similar #tarpit like #honeypot #ids #ips ? How does one easily obtain a suitable #ipv4 & #ipv6 address if one rightly does not want to use one's own?

  6. My girl wants to tar pit all the time
    Tar pit all the time
    Tar pit all the time
    My girl wants to tar pit all the time
    Tar pit all the time
    She tar pits all the time
    - Tar Pit All the Time by Eddie Murphy

    #PartyAllTheTime #EddieMurphy #music #CorruptedLyrics #TarPit

  7. My girl wants to tar pit all the time
    Tar pit all the time
    Tar pit all the time
    My girl wants to tar pit all the time
    Tar pit all the time
    She tar pits all the time
    - Tar Pit All the Time by Eddie Murphy

    #PartyAllTheTime #EddieMurphy #music #CorruptedLyrics #TarPit

  8. My girl wants to tar pit all the time
    Tar pit all the time
    Tar pit all the time
    My girl wants to tar pit all the time
    Tar pit all the time
    She tar pits all the time
    - Tar Pit All the Time by Eddie Murphy

    #PartyAllTheTime #EddieMurphy #music #CorruptedLyrics #TarPit

  9. My girl wants to tar pit all the time
    Tar pit all the time
    Tar pit all the time
    My girl wants to tar pit all the time
    Tar pit all the time
    She tar pits all the time
    - Tar Pit All the Time by Eddie Murphy

    #PartyAllTheTime #EddieMurphy #music #CorruptedLyrics #TarPit

  10. Ow no a bot is stuck in my tarpit:

    proof/honeysweet/manifestation-peritenon/malefically/lobigerous/dovewood/jinniyeh/rife/phacochoerine/unintermissive/vallancy/sericin/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai[.]com/gptbot)",

    Its scraping gerbage and wont stop.

    #ai #tarpit #bot

  11. Ow no a bot is stuck in my tarpit:

    proof/honeysweet/manifestation-peritenon/malefically/lobigerous/dovewood/jinniyeh/rife/phacochoerine/unintermissive/vallancy/sericin/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai[.]com/gptbot)",

    Its scraping gerbage and wont stop.

    #ai #tarpit #bot

  12. Ow no a bot is stuck in my tarpit:

    proof/honeysweet/manifestation-peritenon/malefically/lobigerous/dovewood/jinniyeh/rife/phacochoerine/unintermissive/vallancy/sericin/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai[.]com/gptbot)",

    Its scraping gerbage and wont stop.

    #ai #tarpit #bot

  13. Ow no a bot is stuck in my tarpit:

    proof/honeysweet/manifestation-peritenon/malefically/lobigerous/dovewood/jinniyeh/rife/phacochoerine/unintermissive/vallancy/sericin/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai[.]com/gptbot)",

    Its scraping gerbage and wont stop.

    #ai #tarpit #bot

  14. Ow no a bot is stuck in my tarpit:

    proof/honeysweet/manifestation-peritenon/malefically/lobigerous/dovewood/jinniyeh/rife/phacochoerine/unintermissive/vallancy/sericin/" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; GPTBot/1.3; +https://openai[.]com/gptbot)",

    Its scraping gerbage and wont stop.

    #ai #tarpit #bot

  15. Tarpits like Nephentes are cool, but can't I just bypass them by waiting for "network idle" before scraping and setting a reasonable timeout for that?

    #Tarpit #AI #Nephentes

  16. Tarpits like Nephentes are cool, but can't I just bypass them by waiting for "network idle" before scraping and setting a reasonable timeout for that?

    #Tarpit #AI #Nephentes

  17. Tarpits like Nephentes are cool, but can't I just bypass them by waiting for "network idle" before scraping and setting a reasonable timeout for that?

  18. Tarpits like Nephentes are cool, but can't I just bypass them by waiting for "network idle" before scraping and setting a reasonable timeout for that?

    #Tarpit #AI #Nephentes

  19. Tarpits like Nephentes are cool, but can't I just bypass them by waiting for "network idle" before scraping and setting a reasonable timeout for that?

    #Tarpit #AI #Nephentes

  20. Since I setup a #tarpit (using #nepenthes) about 3 days ago, the server has been hit more than 1 million times by the likes of #OpenAI and #Meta. Apart from the usual parasitic crawlers.

    This only proves, how unethical the whole industry is.

  21. Since I setup a #tarpit (using #nepenthes) about 3 days ago, the server has been hit more than 1 million times by the likes of #OpenAI and #Meta. Apart from the usual parasitic crawlers.

    This only proves, how unethical the whole industry is.

  22. Since I setup a #tarpit (using #nepenthes) about 3 days ago, the server has been hit more than 1 million times by the likes of #OpenAI and #Meta. Apart from the usual parasitic crawlers.

    This only proves, how unethical the whole industry is.

  23. Since I setup a #tarpit (using #nepenthes) about 3 days ago, the server has been hit more than 1 million times by the likes of #OpenAI and #Meta. Apart from the usual parasitic crawlers.

    This only proves, how unethical the whole industry is.

  24. Since I setup a #tarpit (using #nepenthes) about 3 days ago, the server has been hit more than 1 million times by the likes of #OpenAI and #Meta. Apart from the usual parasitic crawlers.

    This only proves, how unethical the whole industry is.

  25. I have written a #blog entry about my experience with running a #tarpit with the intention of boycotting #AI #bots.

    blog.n41.lat/posts/boycotting-

  26. I have written a #blog entry about my experience with running a #tarpit with the intention of boycotting #AI #bots.

    blog.n41.lat/posts/boycotting-

  27. I have written a #blog entry about my experience with running a #tarpit with the intention of boycotting #AI #bots.

    blog.n41.lat/posts/boycotting-

  28. I have written a #blog entry about my experience with running a #tarpit with the intention of boycotting #AI #bots.

    blog.n41.lat/posts/boycotting-

  29. I have written a #blog entry about my experience with running a #tarpit with the intention of boycotting #AI #bots.

    blog.n41.lat/posts/boycotting-

  30. As an experiment, today I setup an instance of #Nepenthes in a #VPS.

    It is a poisoning #tarpit intended for crawlers that scrape data for #LLMs. It will generate endless linked pages with randomly generated content.

    Interestingly, just minutes after deployment, the #OpenAI crawler showed up. Since then, it has been happily eating all the crap thrown at it.

    I know this is a tiny effort against one of the most toxic industries in history, but I love the feeling of fighting back even if it is almost symbolic.

    zadzmo.org/code/nepenthes/

  31. As an experiment, today I setup an instance of #Nepenthes in a #VPS.

    It is a poisoning #tarpit intended for crawlers that scrape data for #LLMs. It will generate endless linked pages with randomly generated content.

    Interestingly, just minutes after deployment, the #OpenAI crawler showed up. Since then, it has been happily eating all the crap thrown at it.

    I know this is a tiny effort against one of the most toxic industries in history, but I love the feeling of fighting back even if it is almost symbolic.

    zadzmo.org/code/nepenthes/

  32. As an experiment, today I setup an instance of #Nepenthes in a #VPS.

    It is a poisoning #tarpit intended for crawlers that scrape data for #LLMs. It will generate endless linked pages with randomly generated content.

    Interestingly, just minutes after deployment, the #OpenAI crawler showed up. Since then, it has been happily eating all the crap thrown at it.

    I know this is a tiny effort against one of the most toxic industries in history, but I love the feeling of fighting back even if it is almost symbolic.

    zadzmo.org/code/nepenthes/

  33. As an experiment, today I setup an instance of #Nepenthes in a #VPS.

    It is a poisoning #tarpit intended for crawlers that scrape data for #LLMs. It will generate endless linked pages with randomly generated content.

    Interestingly, just minutes after deployment, the #OpenAI crawler showed up. Since then, it has been happily eating all the crap thrown at it.

    I know this is a tiny effort against one of the most toxic industries in history, but I love the feeling of fighting back even if it is almost symbolic.

    zadzmo.org/code/nepenthes/

  34. As an experiment, today I setup an instance of #Nepenthes in a #VPS.

    It is a poisoning #tarpit intended for crawlers that scrape data for #LLMs. It will generate endless linked pages with randomly generated content.

    Interestingly, just minutes after deployment, the #OpenAI crawler showed up. Since then, it has been happily eating all the crap thrown at it.

    I know this is a tiny effort against one of the most toxic industries in history, but I love the feeling of fighting back even if it is almost symbolic.

    zadzmo.org/code/nepenthes/

  35. @dnsprincess @Walker in any event you should always opt to build the monster app or apps that wring out not only many opsec oversights but also work together in gestalt catalyzing manner - good examples of this could be cve in a wiki or diy shodan plus maltego or a graph #tarpit #artillery by dave kennedy #osint #dfir #tags #arroyo cluster #firehose #version number

  36. @dnsprincess @Walker in any event you should always opt to build the monster app or apps that wring out not only many opsec oversights but also work together in gestalt catalyzing manner - good examples of this could be cve in a wiki or diy shodan plus maltego or a graph #tarpit #artillery by dave kennedy #osint #dfir #tags #arroyo cluster #firehose #version number

  37. @dnsprincess @Walker in any event you should always opt to build the monster app or apps that wring out not only many opsec oversights but also work together in gestalt catalyzing manner - good examples of this could be cve in a wiki or diy shodan plus maltego or a graph #tarpit #artillery by dave kennedy #osint #dfir #tags #arroyo cluster #firehose #version number

  38. @dnsprincess @Walker in any event you should always opt to build the monster app or apps that wring out not only many opsec oversights but also work together in gestalt catalyzing manner - good examples of this could be cve in a wiki or diy shodan plus maltego or a graph #tarpit #artillery by dave kennedy #osint #dfir #tags #arroyo cluster #firehose #version number

  39. I was playing around with fail2ban and started thinking.

    If I ban bots, is that actually a net negative to the health of the internet?

    When you ban bots, they just go to the next server. Because your server does not have default or dumb passwords it was unlikely to be breached anyways, the bot was just wasting its resources.

    When you ban it, it moves to the next one where it has a higher chance to succeed.

    The two ideas I have to impose higher costs on bots is

    1. Tarpit

    Tying up resources indefinitely seems more useful than just blocking it. Although compute is so cheap it probably doesn't matter nowadays. Maybe more effective back when bots were simpler.

    1. Report it to abuseipdb and similar

    I'm not sure if the aipdb et al are actually annoying enough that bots would spend time avoid getting on those lists?

    I have an idea for doing a test, I'll take two IP:s and put fail2ban on them.

    On one, we don't ban, just report it to abuseipdb.

    On the other we just ban.

    I'm curious if this will affect the amount of scans hitting it.

    #fail2ban #tarpit

  40. I was playing around with fail2ban and started thinking.

    If I ban bots, is that actually a net negative to the health of the internet?

    When you ban bots, they just go to the next server. Because your server does not have default or dumb passwords it was unlikely to be breached anyways, the bot was just wasting its resources.

    When you ban it, it moves to the next one where it has a higher chance to succeed.

    The two ideas I have to impose higher costs on bots is

    1. Tarpit

    Tying up resources indefinitely seems more useful than just blocking it. Although compute is so cheap it probably doesn't matter nowadays. Maybe more effective back when bots were simpler.

    1. Report it to abuseipdb and similar

    I'm not sure if the aipdb et al are actually annoying enough that bots would spend time avoid getting on those lists?

    I have an idea for doing a test, I'll take two IP:s and put fail2ban on them.

    On one, we don't ban, just report it to abuseipdb.

    On the other we just ban.

    I'm curious if this will affect the amount of scans hitting it.

    #fail2ban #tarpit

  41. I was playing around with fail2ban and started thinking.

    If I ban bots, is that actually a net negative to the health of the internet?

    When you ban bots, they just go to the next server. Because your server does not have default or dumb passwords it was unlikely to be breached anyways, the bot was just wasting its resources.

    When you ban it, it moves to the next one where it has a higher chance to succeed.

    The two ideas I have to impose higher costs on bots is

    1. Tarpit

    Tying up resources indefinitely seems more useful than just blocking it. Although compute is so cheap it probably doesn't matter nowadays. Maybe more effective back when bots were simpler.

    1. Report it to abuseipdb and similar

    I'm not sure if the aipdb et al are actually annoying enough that bots would spend time avoid getting on those lists?

    I have an idea for doing a test, I'll take two IP:s and put fail2ban on them.

    On one, we don't ban, just report it to abuseipdb.

    On the other we just ban.

    I'm curious if this will affect the amount of scans hitting it.

    #fail2ban #tarpit

  42. I was playing around with fail2ban and started thinking.

    If I ban bots, is that actually a net negative to the health of the internet?

    When you ban bots, they just go to the next server. Because your server does not have default or dumb passwords it was unlikely to be breached anyways, the bot was just wasting its resources.

    When you ban it, it moves to the next one where it has a higher chance to succeed.

    The two ideas I have to impose higher costs on bots is

    1. Tarpit

    Tying up resources indefinitely seems more useful than just blocking it. Although compute is so cheap it probably doesn't matter nowadays. Maybe more effective back when bots were simpler.

    1. Report it to abuseipdb and similar

    I'm not sure if the aipdb et al are actually annoying enough that bots would spend time avoid getting on those lists?

    I have an idea for doing a test, I'll take two IP:s and put fail2ban on them.

    On one, we don't ban, just report it to abuseipdb.

    On the other we just ban.

    I'm curious if this will affect the amount of scans hitting it.

    #fail2ban #tarpit

  43. I was playing around with fail2ban and started thinking.

    If I ban bots, is that actually a net negative to the health of the internet?

    When you ban bots, they just go to the next server. Because your server does not have default or dumb passwords it was unlikely to be breached anyways, the bot was just wasting its resources.

    When you ban it, it moves to the next one where it has a higher chance to succeed.

    The two ideas I have to impose higher costs on bots is

    1. Tarpit

    Tying up resources indefinitely seems more useful than just blocking it. Although compute is so cheap it probably doesn't matter nowadays. Maybe more effective back when bots were simpler.

    1. Report it to abuseipdb and similar

    I'm not sure if the aipdb et al are actually annoying enough that bots would spend time avoid getting on those lists?

    I have an idea for doing a test, I'll take two IP:s and put fail2ban on them.

    On one, we don't ban, just report it to abuseipdb.

    On the other we just ban.

    I'm curious if this will affect the amount of scans hitting it.

    #fail2ban #tarpit

  44. Fediverse website managers, have you deployed an #AI #tarpit?

  45. Fediverse website managers, have you deployed an #AI #tarpit?

  46. Fediverse website managers, have you deployed an #AI #tarpit?

  47. Fediverse website managers, have you deployed an #AI #tarpit?