Hacker News new | ask | show | jobs
by Bender 4 days ago
This may block schools and libraries

Oh, well that is ok for me I suppose. I add RTA/adult headers that hopefully they also look for and block using parental controls as adult content should not be viewed in a school or library. I could add a note suggesting to skip that step if one wishes schools and libraries that may be using a proxy to view.
2 comments
ferngodfather 4 days ago
That's fair enough.

I think it's a great article to be fair. We need more of this cheap and quick bot blocking. The fact the solution to unwanted traffic is often "use Cloudflare" is _not_ great for the internet, and nobody really actually likes deploying or managing ModSecurity. Its a nice middleground.

link
inigyou 4 days ago
Cheap and quick bot-blocking is provided by go-away, less cheap and quick by Anubis.
link
aorth 4 days ago
Sadly, go-away https://git.gammaspectra.live/git/go-away doesn't seem to be maintained anymore.
link
iririririr 1 day ago
both of these are easily bypassed by bots.

security theater at its finest. not to mention wasteful.

link
ferngodfather 1 hour ago
It's not "security theatre", it's blocking the absolute worst, most painfully obvious bots that. These bots also happen to account for a good 85% of bot traffic, so it makes sense to block them.

Yes, of course, if a real threat actor is doing things properly they'll be using residential proxies and legitimate user agents, but we're talking here about blocking "some of the bots" - mainly the script kiddies.

link
inigyou 4 days ago
At this point you may as well define who you want to allow instead of defining who you want to block.
link