Hacker News new | ask | show | jobs
by nnopepe 1335 days ago
serve a modified version to rate limited IP's that only contains popular indian sites and I'm sure it'll be resolved in a day or two
3 comments

Or reverse slow loris them, send a byte sleep for a few seconds, send another byte, etc
Limit this to the specific headers of these Webbrowsers though, please.
They already have that part figured out. From the article:

> When we encountered a similar problem last year, we found a simple solution: block the undesired traffic from these apps. Even so, we continue to serve about 100TB of “Access Denied” pages monthly!

The difference is that serving Access Denied Leads to the users of these malicious browsers just getting more ads over time, as the filter lists can’t be updated anymore. Serving a special list containing popular sites would result in the users almost instantly not being able anymore to access these popular sites, resulting in requests to the developers to fix their shitty browser or switching altogether.
100TB of Access Denied is only 38 MB/s, so not even a minor DDOS these days.
Blocking the browsers isn’t a solution because they likely fall back to being open, so the user doesn’t notice.

Instead, you need to break the user experience so they complain to the developer of the app, thus impacting reputation.

It’s unfortunate that the browsers developers are unresponsive and this circumstance limits the available options to easy list.

This is an excellent solution.