What's Cooking on Sourcehut?

sourcehut.org

4 pointsddevault5 comments

Given the prevalence of crypto miners using CI services lately, I was curious what approaches services like Sourcehut were taking to detect their usage patterns. Looking at https://git.sr.ht/~sircmpwn/builds.sr.ht/log , I wasn’t able to find the detection code. Does it live in a separate repo?

It's handled in small private codebases. Secrecy is a necessary component in this effort, because the attackers can just change their shape to evade our abuse detectors if they could read the code.

I can't believe you're writing proprietary software. I thought you were principled.

It's basically a glorified list of regexes. I'm sure you'll live without it.

I thought I'd share this month's update mainly because it includes pictures of penguins.

Reply on news.ycombinator.com