a swing and a miss! maybe your new years resolutions should include knowing something about where you're posting
froztbyte
I'm aware of the construction of a CIDR prefix, I meant what are you using to categorise IPs from requests to look up mask size? whois? using published NIC/RIR data? what's in BGP/routedumps? other?
the threshold is proportional to 1.5^(32-subnet_mask)
what are you basing that prefix length decision off? whois/NIC allocation data?
is the decision loop running locally to any given f2b instance, or do you aggregate for processing then distribute blocklist?
either way, seems like an interesting approach for catching the type of shit that likes to snowshoe from random cloud providers while lying in agent signature
I'm not sure I understand your comment, mind elaborating on the details?
it’s the holidays, it’s okay: you don’t have to go near the c++ right now
I haven't really got enough information about that side of it, the details I have to go on are mostly about things particularly around the values CCC has tried to hold/build (and even there I am absolutely not intimately familiar, for reasons of distance and exposure and such)
yep, have made the same critique. the way people "overcommit" on this is a fascinating interplay of sunk cost fallacy combined with some other shit
why they even are there
(from observation over some years) congress orga more than occasionally fucks up on paradox of tolerance by letting shit like this through
it's been a thing I've noticed and have wanted to actually discuss with some folks, but never really gotten to yet on account of life stuff
there were also the much, much less grey-area instances a couple of years back where they were far too open to a number of abusers (this was around the time the appelbaum shit hit wide daylight), so there is a possibility that the issue runs deeper (in a structural sense, at best; personal sense, at worst) too but I possess insufficient information to know one way or the other what exactly may constitute the problem here
full service plagiarism! bet you we'll see whiteglove variant of it next
idle datapoint: the first “not a sketchy domain clearly trying to circumvent” site I’ve seen in quite a while that has an ad immediately visible despite my regular blocker config
revenue must be sparse!
(it takes specific pointed work to circumvent, so someone had to have reason to do it)
I was trying to remember at which point I unfollowed him, and I think it was exactly this nonsense
and many you can tell they're dogshit from the moment they're introduced