Sociopath Community

puppygirl said: 

 ive had my fun here, and will not put more effort into this place. this is my last post. you need not worry about my ddos attacks anymore

 thats too bad. cloudflare was the quick way out for Good. although effectve. i know that old SC had its own ddos protection design from the ground up. i was very impressed with this development effort. both sides put forth impressive efforts imho. i wish i could get people to work as hard.

Is it true, when cloudflare is turned off, the site goes down due to denial of service? i have experienced sever lag.

maybe Good will consider a challenge penetration test conducted in the future with no cloudflare (cloudflare turned off).

Billy said: 

puppygirl said: 

 ive had my fun here, and will not put more effort into this place. this is my last post. you need not worry about my ddos attacks anymore

 thats too bad. cloudflare was the quick way out for Good. although effectve. i know that old SC had its own ddos protection design from the ground up. i was very impressed with this development effort. both sides put forth impressive efforts imho. i wish i could get people to work as hard.

Is it true, when cloudflare is turned off, the site goes down due to denial of service? i have experienced sever lag.

maybe Good will consider a challenge penetration test conducted in the future with no cloudflare (cloudflare turned off).

The only true defense against DDoS requires multiple server machines. You can mitigate some weaker attacks at various levels, but a true attack is simply impossible to stop without processing a request at some point in the chain, even if it is to block the request, you need to process it. And DDoS is sending millions of such requests all at once from multiple machines(or just one, but it wont be effective).

Cloudflare has many such machines all over the world and their power is how they use them and spread the requests among them all.
Luna never had the firepower required to topple them, pretty sure it would be an expensive and possibly illegal endeavor to truly even try(if we ignore the fact that a DDoS is illegal by default).

And no, you can't 1v1 me with no healing pots or without spells.

In addition they provide various services to speed up the site and other security features.

puppygirl said: 

here you are

https://megaupload.nz/66kbhau7na/hello-world-v1.5_zip

 i will look and make some comments

const generateRandomIp = () => {
return [
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254)
].join('.')
}

i looked through puppygirl's code. very nice. i like the above code.

im not a js expert but i can read through the code and figure out a few things.

it looks like she is generating random integers and then creating the random ip addresses joining with a "."

This thread is great. Top 10 all time flexes

Billy said: 

const generateRandomIp = () => {
return [
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254)
].join('.')
}

 

i looked through puppygirl's code. very nice. i like the above code.

im not a js expert but i can read through the code and figure out a few things.

it looks like she is generating random integers and then creating the random ip addresses joining with a "."

She randomizes IPs and sets the "X-Forwarded-For" header with them. That header is meant to be used to supply the original IP when routing through a proxy but she used it to 'spoof' her IP instead (it's not really an actual spoof since her IP is still sent along with the fake IP).

Inquirer said: 

Billy said: 

const generateRandomIp = () => {
return [
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254),
getRandomInt(1, 254)
].join('.')
}

 

i looked through puppygirl's code. very nice. i like the above code.

im not a js expert but i can read through the code and figure out a few things.

it looks like she is generating random integers and then creating the random ip addresses joining with a "."

She randomizes IPs and sets the "X-Forwarded-For" header with them. That header is meant to be used to supply the original IP when routing through a proxy but she used it to 'spoof' her IP instead (it's not really an actual spoof since her IP is still sent along with the fake IP).

 lol

" (it's not really an actual spoof since her IP is still sent along with the fake IP)."

well, i guess its the thought that counts :)