Attackers explain how an anti-spam defense became an AI weapon.

Attackers explain how an anti-spam defense became an AI weapon.

  • drkt@scribe.disroot.orgEnglish
    7·
    11 months ago

    I use Apache2 and PHP, here’s what I did:

    in .htaccess you can set ErrorDocument 404 /error-hole.php https://httpd.apache.org/docs/2.4/custom-error.html

    in error-hole.php,

    <?php
http_response_code(200);
?>
<p>*paste a string that is 13 megabytes long*</p>

    For the string, I used dd to generate 13 MBs of noise from /dev/urandom and then I converted that to base64 so it would paste into error-hole.php

    You should probably hide some invisible dead links around your website as honeypots for the bots that normal users can’t see.

    • WolfLink@sh.itjust.worksEnglish
      1·
      11 months ago

      For the string, I used dd to generate 13 MBs of noise from /dev/urandom and then I converted that to base64 so it would paste into error-hole.php

      That string is going to end up being 17MB assuming it’s a utf8 encoded .php file