Attackers explain how an anti-spam defense became an AI weapon.

  • Snowcano@startrek.website
    link
    fedilink
    English
    arrow-up
    7
    ·
    2 months ago

    Just make a custom 404 page that returns 13 MBs of junk along with status code 200

    How would you go about doing this part? Asking for a friend who’s an idiot, totally not for me.

    • drkt@scribe.disroot.org
      link
      fedilink
      English
      arrow-up
      7
      ·
      edit-2
      2 months ago

      I use Apache2 and PHP, here’s what I did:

      in .htaccess you can set ErrorDocument 404 /error-hole.php https://httpd.apache.org/docs/2.4/custom-error.html

      in error-hole.php,

      <?php
      http_response_code(200);
      ?>
      <p>*paste a string that is 13 megabytes long*</p>
      

      For the string, I used dd to generate 13 MBs of noise from /dev/urandom and then I converted that to base64 so it would paste into error-hole.php

      You should probably hide some invisible dead links around your website as honeypots for the bots that normal users can’t see.

      • WolfLink@sh.itjust.works
        link
        fedilink
        English
        arrow-up
        1
        ·
        2 months ago

        For the string, I used dd to generate 13 MBs of noise from /dev/urandom and then I converted that to base64 so it would paste into error-hole.php

        That string is going to end up being 17MB assuming it’s a utf8 encoded .php file