|
So I setup a new website out there and it does not contain any user specific information but it is in finance space. Anyone can use it without registering or providing any private information. I can see in IIS log that there are lot of 404 calls as if someone is trying to access site's back-end via various urls which does not exists. https://s11.postimg.org/hiq7mfqg3/IIS_LOG.png[^] One thing is sure that they are not going to get anything because I don't have any user specific information but I am thinking of adding some new features which will be user specific later. Should I be worried ? Any suggestions ?
Zen and the art of software maintenance : rm -rf *
Maths is like love : a simple idea but it can get complicated.
|
|
|
|
|
Set up a honeypot for them to find and let them waste their time attacking that? 
Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...
|
|
|
|
|
Why is it a honeypot, no one really likes homey that much. Now a gin bottle ...
veni bibi saltavi
|
|
|
|
|
Flies like honey. Hackerz are like Fliez...
#SupportHeForShe
Government can give you nothing but what it takes from somebody else. A government big enough to give you everything you want is big enough to take everything you've got, including your freedom.-Ezra Taft Benson
You must accept 1 of 2 basic premises: Either we are alone in the universe or we are not alone. Either way, the implications are staggering!-Wernher von Braun
|
|
|
|
|
Create a Custom 404 page that taunts them into further hacking attempts. In fact, you can keep track of the number of attempts and make the 404 page more abusive as they go. Even more interesting would be redirecting them to gay porn sites and such. Maybe they'll get distracted and forget about your site.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Interesting. However, doesn't googlies heuristic search bot start tagging sites as adult if they link to known prawn sites?
veni bibi saltavi
|
|
|
|
|
Hell, I don't know. If you're worried about it, just redirect them to Hillary Clinton's campaign site.
".45 ACP - because shooting twice is just silly" - JSOP, 2010
-
You can never have too much ammo - unless you're swimming, or on fire. - JSOP, 2010
-
When you pry the gun from my cold dead hands, be careful - the barrel will be very hot. - JSOP, 2013
|
|
|
|
|
Wouldn't that count as cruel and unusual?
|
|
|
|
|
Probably automatic site scanners.
Don't be worried: just be sure your code is good.
cheers
Chris Maunder
|
|
|
|
|
At the moment nothing user specific there so I am not bothered much. I setup custom darth vader 404 page for those scanners to enjoy and feel the force.
Zen and the art of software maintenance : rm -rf *
Maths is like love : a simple idea but it can get complicated.
|
|
|
|
|
Do your best to make the response to calls for resources that aren't found look the same as unauthenticated calls to existing resources. That's the key to actually messing those guys up.
"There are three kinds of lies: lies, damned lies and statistics."
- Benjamin Disraeli
|
|
|
|
|
This one! 
|
|
|
|
|
|
I had a problem not long ago with a merchant not delivering what was ordered. Paypal sorted out the problem and got me a refund. The process was not quick, as there is a lot of right to challenge built in, but ultimately once one side is shown at fault it is closed.
In my case, I ordered a battery and was told at checkout that it would take 3-5 days.
Two days later I'm told it would be up to 2 weeks. I told the merchant that two weeks would take us up to the day I moved and it absolutely had to be there by then or forget it.
It never arrived on time. They claimed it arrived the next day, but it was too late as they had previously been informed. Settled in my flavour.
veni bibi saltavi
|
|
|
|
|
FWIW, I've never had a problem with PayPal.
Beware the anecdote. The first instance is because the company violated their terms of agreement and are feigning surprise and indignation. Nothing to do with reliability.
The second doesn't understand that PayPal is not, nor does it pretend to be, a bank. It's a payment processing service similar to that credit card companies use (i.e. Square.) They will freeze accounts under certain circumstances, especially if your return rate gets to high. I'm equally sure that we are hearing only half the story.
(Note that PayPal offers a near instantaneous transfer of funds which makes it especially attractive to fraud.)
The third don't establish whether PayPal any more or less reliable than any other form of financial transaction?
PayPal has it's issues, but in most of these stories, those complaining didn't read the fine print and/or were genuinely abusing the service.
|
|
|
|
|
The one thing I dislike about PayPal is that if you buy something in another currency, PayPal will take the freedom to very royally elephant you over with the exchange rate.
There's a setting deep deep down in some hidden menu where you can change the exchange rate behavior, but the default setting is to elephant you over.
Wout
|
|
|
|
|
"If your transaction requires a currency conversion, we will use a retail exchange rate (the wholesale cost of foreign currency as denominated by an outside financial institution) plus a conversion service charge of 4.5%."
|
|
|
|
|
|
|
An amazing lady. ![Rose | [Rose]](https://www.codeproject.com/script/Forums/Images/rose.gif)
/ravi
|
|
|
|
|
I was just trying to start watching the tv series 'World Without End' from the novel by Ken Follet, which I enjoyed greatly (the entire series of novels). But the NetFlix web-site either was down, or went down when I tried to view listed content.
Remembering my old (late) dad's advice: "it's always your fault;" I tried switching around to different servers my VPN offers (Nord); no dice. Cleared the browser cache and junk (CCleaner), rebooted the adsl modem, rebooted the machine, re-logged-in to the VPN server, reopened the browser. Nada, zilch.
I was pretty much convinced that my ISP account here in the Land of Smiles (a budget account) was having problems, but, finally, it occurred to me to check and see if NetFlix was having problems: [^]. Yep, it's NetFlix, and it's down in many countries.
I was fascinated by the messages people were posting:
NETFLIX IS DOWN! OH MY GOD MY LIFE IS OVER THE WORLD IS OVER IM GONNA VOTE TRUMP NOW OH THE HUMANITY!
What am I supposed to do with my weekend now?
error heating pizza in the microwave
M GONNA OVERDOSE ON MY ANTI-DEPRESSANTS
IM SINGLE AND LONELY! GIVE ME MY NETFLIX!
Netflix adds Trump's sex tape
it worked, i went to the search bar, found my show, then it went down again. thanks obama. NC btw
Didn't you read that today the USA gave over the Internet to some global entity. I guess they don't like Netflix.
«There is a spectrum, from "clearly desirable behaviour," to "possibly dodgy behavior that still makes some sense," to "clearly undesirable behavior." We try to make the latter into warnings or, better, errors. But stuff that is in the middle category you don’t want to restrict unless there is a clear way to work around it.» Eric Lippert, May 14, 2008
|
|
|
|
|
Does it surprise you that you are not the only one with a dark sense of humour?
... such stuff as dreams are made on
|
|
|
|
|
when you go public with your history of strangling kittens, I'll answer that 
«There is a spectrum, from "clearly desirable behaviour," to "possibly dodgy behavior that still makes some sense," to "clearly undesirable behavior." We try to make the latter into warnings or, better, errors. But stuff that is in the middle category you don’t want to restrict unless there is a clear way to work around it.» Eric Lippert, May 14, 2008
|
|
|
|
|
BillWoodruff wrote: strangling kittens
Thanks Bill, for not mentioning my even darker secrets!
... such stuff as dreams are made on
|
|
|
|
|
Okay, considering all my previous hardware- and software- install hells, I had no problems upgrading to Win 10 Pro over 8.1 Pro ... wonder if I got a pass on the visit by the Furies because I'm in the way under 1% of users in this country who installed over a genuine, purchased, Win 8/8.1 ?
Reading lately about the claims that Edge is the only one of the current major browsers that can actually handle streaming 1080p from NetFlix [^]. I wanted to sample Edge.
What I thought would be a simple install via turn-on-win-features, or download-install, turns out to be impossible because I the one user account on this computer has (by choice) admin rights (I am the only one who uses this computer).
So, a visit to the latest bumper-crop of Winbois sites, and one registry modification experiment later, and still cannot get Edge installed. It's there, in
C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe
But, trying to run it does nothing, and the .exe file's permissions can't be changed.
What to do ? Well, I'm going to write Sergey at WinAero. and ask him to focus his lasers on this (perhaps he'll remember I made a donation to his excellent site).
May your problems and hassles be as insignificantly small in the larger scheme of things ... as this one.
cheers, Bill
«There is a spectrum, from "clearly desirable behaviour," to "possibly dodgy behavior that still makes some sense," to "clearly undesirable behavior." We try to make the latter into warnings or, better, errors. But stuff that is in the middle category you don’t want to restrict unless there is a clear way to work around it.» Eric Lippert, May 14, 2008
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
