Follow #fuckai from Mastodon or any other Fediverse app and its public posts arrive in your timeline. No vutuv account needed.
@fuckai@tags.vutuv.de
3 posts
So, it is terrorism to sit on on the floor and show a cardboard sign… but no one is punished when corporate “AIs” hack government systems?
Truly amazing.
We tweaked our firewalls and our Anubis rules. The attack persisted, but it was contained.
We also scaled our systems to avoid more accidental downtimes caused by these scrapping operations… Then the attackers scaled up their scrapping campaign, and found new ways to bypass our #Anubis config.
This past night I managed to come up with a stricter configuration that blocks virtually all of them (I don’t know for how long this will last, though).
As of now, our Anubis instance is stopping around 40 requests per second.
I know that this is “nothing” for anyone working in very big systems, but bear in mind that this is after I already blocked around 3.5% of all the IPv4 addresses existing, and it accounts for 95% of our traffic. For every legitimate request we have, we have 19 that come from bots.
P.S.: In an ideal world, I would openly share the rules I found to work well… Unfortunately I don’t think that would be a good idea. I don’t want to make the scrappers’ job any easier.
So… I was working on preparing forge.cloudsling.dev to open to the public, to start hosting #FLOSS projects for free, away from Github and other tech overlords…
Well, it will take some more time than I wanted. Our services have been down for around 1h because of a bots avalanche that have been scrapping all they could.
Now, the “attack” continues:
CPU usage above 80% of total capacity.
Outbound traffic at 3MiBps… when we only have 15 registered users, and only me is looser enough to be touching that on a weekend.
Shutting down the servers for the rest of this weekend… 💔