let me try..
this post was submitted on 29 Apr 2025
447 points (97.5% liked)
Technology
69491 readers
4061 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
Looks fine to me. Only 1 CPU core I think was 100%.
10+0 records in
10+0 records out
10737418240 bytes (11 GB, 10 GiB) copied, 28,0695 s, 383 MB/s
ow.. now the idea is to unzip it right?
nice idea:
if (ipIsBlackListed() || isMalicious()) {
header("Content-Encoding: deflate, gzip");
header("Content-Length: "+ filesize(ZIP_BOMB_FILE_10G)); // 10 MB
readfile(ZIP_BOMB_FILE_10G);
exit;
}
Might need some
if (ob_get_level()) ob_end_clean();
before the readfile
. 😉
Interesting. I wonder how long it takes until most bots adapt to this type of "reverse DoS".
Then we'll just be more clever as well. It's an arms race after all.
How I read that code:
"If the dev folder's bullshit is equal to 1 gram..."
This is why I use things like Docusaurus to generate static sites. Vulnerability injections are pretty hard when there's no code to inject into.
❤️