Conversation

Notices

1. Embed this notice
   Miah Johnson (miah@hachyderm.io)'s status on Sunday, 11-Aug-2024 00:59:04 JST Miah Johnson

   @cynicalsecurity Its also fun to respond with a 418 when somebody tries to pull wordpress stuff against your plain html server.

   Just.. don't do either if you use a CDN because they won't know what to do and will continue to pull that requested URL until it gets a 403/404, and possibly end up in your blocklist =)

   • Embed this notice
     silverwizard (silverwizard@convenient.email)'s status on Sunday, 11-Aug-2024 00:59:04 JST silverwizard

     in reply to
     @miah @cynicalsecurity I wonder how hard it would be to respond with a zip bomb...
   • Embed this notice
     silverwizard (silverwizard@convenient.email)'s status on Sunday, 11-Aug-2024 01:29:46 JST silverwizard

     in reply to
     @miah @cynicalsecurity well you can do a compressed body in most browsers, just need to make it on the fly
   • Embed this notice
     Miah Johnson (miah@hachyderm.io)'s status on Sunday, 11-Aug-2024 01:29:47 JST Miah Johnson

     in reply to

     • silverwizard

     @silverwizard @cynicalsecurity Not hard. =) The question would be... does the scanner process the zip bomb. Might be easier to respond with a redirect loop and let it hang forever.