Technology

69658 readers

3997 users here now

This is a most excellent place for technology news and articles.

Our Rules

Follow the lemmy.world rules.
Only tech related news or articles.
Be excellent to each other!
Mod approved content bots can post up to 10 articles per day.
Threads asking for personal tech support may be deleted.
Politics threads may be removed.
No memes allowed as posts, OK to post as comments.
Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
Check for duplicates before posting, duplicates may be removed
Accounts 7 days and younger will have their posts automatically removed.

Approved Bots

founded 2 years ago

MODERATORS

[email protected]

557

I use Zip Bombs to Protect my Server (idiallo.com)

submitted 3 days ago by [email protected] to c/[email protected]

101 comments fedilink hide all child comments

The one-liner:

dd if=/dev/zero bs=1G count=10 | gzip -c > 10GB.gz

This is brilliant.

(page 2) 50 comments

sorted by: hot top controversial new old

[–] [email protected] 11 points 3 days ago (1 children)

let me try..

[–] [email protected] 13 points 3 days ago (1 children)

Looks fine to me. Only 1 CPU core I think was 100%.

10+0 records in
10+0 records out
10737418240 bytes (11 GB, 10 GiB) copied, 28,0695 s, 383 MB/s

[–] [email protected] 11 points 3 days ago (1 children)

ow.. now the idea is to unzip it right?

nice idea:

if (ipIsBlackListed() || isMalicious()) {
    header("Content-Encoding: deflate, gzip");
    header("Content-Length: "+ filesize(ZIP_BOMB_FILE_10G)); // 10 MB
    readfile(ZIP_BOMB_FILE_10G);
    exit;
}

[–] [email protected] 8 points 3 days ago

Might need some

if (ob_get_level()) ob_end_clean();

before the readfile. 😉

[–] [email protected] 4 points 3 days ago

I want to know he they built that visualization

[–] [email protected] 6 points 3 days ago (1 children)

Interesting. I wonder how long it takes until most bots adapt to this type of "reverse DoS".

[–] [email protected] 6 points 3 days ago

Then we'll just be more clever as well. It's an arms race after all.

[–] [email protected] 5 points 3 days ago* (last edited 3 days ago)

How I read that code:

"If the dev folder's bullshit is equal to 1 gram..."

[–] [email protected] 1 points 3 days ago

This is why I use things like Docusaurus to generate static sites. Vulnerability injections are pretty hard when there's no code to inject into.

[–] [email protected] 1 points 3 days ago

❤️

load more comments