Hacker News Reader

Keep in mind this is for NodeJS applications. Where there are not .PHP and .CGI files, etc. This dataset would not work for other applications, for obvious reasons.

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Is there one that comes in (.txt, .csv, etc) that I can download for free? I'd like to put together a proof of concept for ExpressJS (NodeJS) tomorrow.

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Loading a big .txt file into memory and comparing each request to it feels like a good first start. Hopefully the open source community takes it further.

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

That's beyond my capabilities. I can certainly create a big preliminary .txt file from my dataset, and hopefully the open source community can take it from there.

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Can't do that when 404's are expected from actual customers. I need to redirect 404 to /

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Thats a great start. But blocking entire data centers seems too aggressive for public SaaS applications.

This has lit a fire in my arse. I'm going to create a repo tomorrow for ExpressJS (I'm a NodeJS nerd).

It can be used like this

app.use(blacklist.middleware)

It will compare every request to a known .txt of strings such as '.env' and others.

Regex is NOT my forte, Can I count on some of you guys to pitch in?

usernamebiason Ask HN: Can we collaborate on a IP Address or Regex blacklist?

Maybe we don't filter by ip address, and instead filter requests based on known strings (or regex). That's what i'm currently doing. Ex. If request includes '.env'. Blocked!

I'd love to implement a more aggressive strategy. Rather than a reactive one. I'm currently finding myself going through server logs, and adding new 'keywords' to the 'banned list'.

usernamebiason Show HN: Formsend – Serverless Website Forms

Hi, apologies for the delay.

The public POST endpoint has strict rate limiting. And user dashboard has custom spam filters options.

Allowing public-key owner time to realize they are getting spammed, and block the IP via dashboard.

If a more complex attack was lunched, such as IP Masking, our API middleware would trigger and deny access based on more complex conditions.

usernamebiason Show HN: Formsend – Serverless Website Forms

Thank you! Hope you enjoy it.

usernamebiason Show HN: Formsend – Serverless Website Forms

Hi HN,

I'm really excited to introduce this little SaaS that's been on the market for some time now, but we finally polished the UI enough to advertise it to the general public.

Use case: Instantly add forms to any website or process existing HTML forms client-side.

I personally use it for all my AWS S3 static websites.

It's built 100% on NodeJS.

Happy to answer any questions.

usernamebiason Cracking of encrypted messaging service dealt major blow to organised crime

If you visit the app's website, you get this big popup.

-------------

Sky ECC platform remains secure and our authorized devices have not been hacked.

There have been recent news articles that claim Sky ECC has been hacked and is involved in criminal activity. This information is not accurate. We have looked into these claims and discovered that a small group of individuals illegally created and distributed an unauthorized version of Sky ECC which they modified and side-loaded onto unsecure devices. Security features that come standard with the Sky ECC phones were eliminated in these bogus devices.

Sky ECC considers these actions as malicious and we are taking legal action against these individuals for defamation and fraud.

We have also blocked these users from our system and enhanced security to prevent reoccurrence of this issue. The implementation of these enhancements temporarily interrupted our Sky ECC service which has now been re-established.

We continue to stand by our position and our product. We strongly support that people have the fundamental right to privacy. With the extensive and broadly documented rise worldwide of corporate espionage, cybercrime and malicious data breaches, systems like SKY ECC are the foundation of the effective functioning for many industries including legal professionals, public health providers and vaccine supply chains, celebrities, manufacturers and many more.

We believe that the individual right to privacy is paramount for those who are acting within the law and we do not condone the use of our product for criminal activity. We also have our Terms of Service that every user must adhere to and, provided that they do, our company will work feverishly to protect their rights with the world's most secure platform.

------------

Thoughts?

usernamebiason Virgin Orbit launches 10 satellites to orbit in landmark test flight

Man... we're about to have a metric sh*t ton of stuff in orbit ready to become debris at any time.

usernamebiason A new population of blue whales was discovered hiding in the Indian Ocean

Great. Now leave them alone.

usernamebiason Sony acquires anime streaming service Crunchyroll

20 years from now. Sony acquires Kissanime.

usernamebiason A Node.js API to access public Instagram posts and profile, unofficially

Hey folks,

We've got a treat for you. We built this package to scrape public instagram information. We use it constantly to build all kinds of services and websites from Instagram content. We've open sourced it.

We're looking for adopters and pull requests. Enjoy.

usernamebiason DigitalOcean offering $100 in credits for 60 days, new accounts only

Normally it's $30 in credits for 30 days.

Get it while you can.

Disclaimer: That link is a referral link. My apologies, You cannot make use of the promotion without a referral. Otherwise I would have posted it.

usernamebiason Ask HN: How many domains do you have just sitting in your registar

Our answer 43

For Sale:

- unlck.me

- toggle.sh

- paytree.org

- argonproject.com