Return Styles: Pseud0ch, Terminal, Valhalla, NES, Geocities, Blue Moon.

Pages: 1-

robots.txt

Name: Anonymous 2018-08-29 20:54

robots.txt is a way to supposedly get search engines to leave your site's private resources alone, like a private API or something. But at the same time, you are making valuable resources easily known to attackers. It takes out the time and effort required for directory enumeration with DirBuster.

How can we come up with a better solution to robots.txt that doesn't paint obvious targets?

Name: Anonymous 2018-08-29 21:03

what programming language is this?

Name: Anonymous 2018-08-29 21:15

>>1
How can we come up with a better solution to robots.txt that doesn't paint obvious targets?
Restrict access to pages you want private and recognize that anything public is going to get scraped.

Name: Anonymous 2018-08-29 21:26

>>3
Gross oversimplification. Even a 403 error admits that a resource exists.

Name: Anonymous 2018-08-29 21:27

also some logins need to be public so that people can attempt to log in (how else would you get authenticated from a non-authenticated position?)

Name: Anonymous 2018-08-29 21:31

>>5

Check referer and only serve logon page if referer is ok.

Name: Anonymous 2018-08-29 22:10

>>6
and what, use browser add-ons like refcontrol?

Name: Anonymous 2018-08-29 23:28

Return 404s unless the request is coming from a whitelisted IP (your VPN)

Name: Anonymous 2018-08-29 23:32

>>8
but then all someone has to do is use the same VPN as you (unless you mean a private/DIY one)

anyone here set up OpenVPN before? I was thinking about maybe doing my own VPN in AWS or some shit

Name: Anonymous 2018-08-30 0:28

This is bullshit

>>5
SSH is a thing, and it is quite safe.

Name: Anonymous 2018-08-30 0:56

>>10
yeah buddy, totally the same thing

gonna SSH into my blog and manually edit the HTML instead of using Wordpress

who uses slack or twitter, let's all go back to email and IRC

neanderthal

Name: Anonymous 2018-08-30 2:32

>>9
if you're paranoid enough to protect your routes this way, then a self-hosted VPN would be a given.

Name: Anonymous 2018-08-30 6:50

Make robots.txt contain SHA512 hashes of the secret paths instead of the paths verbatim. Use domain as salt to prevent rainbow table lookup.

Name: Anonymous 2018-08-30 9:23

wordpress blogs are not worth reading

Name: Anonymous 2018-08-30 9:33

>>11
gonna SSH into my blog and manually edit the HTML instead of using Wordpress
You don't have to do that, OpenSSH can open a local SOCKS-5 connection for your browser to use as a proxy. All you need to do on the server part is to block the admin interfaces for any IPs but localhost.

neanderthal
Thanks, neanderthals were smarter than homo sapiens and they are the reason for our intelligence. Take a look at niggers for example, they have less neanderthals blood in them, which is why they are mentally challenged.

Name: Anonymous 2018-08-30 9:34

>>13
Please use SHAKE256 or BLAKE instead, thanks.

Name: Anonymous 2018-08-30 10:47

Name: Anonymous 2018-08-30 11:29

>>17
PBKDF2 and scrypt depend on a regular hash algo. Also this whole thing is retarded - just use strong passwords.

Name: Anonymous 2018-08-30 11:35

>>18
It's not about passwords, it's about URI's. Good luck convincing your webadmin to change /users/details to /correcthorsebatterystaple/fuckingxkcd.

Name: Anonymous 2018-08-30 11:45

>>19
They might as well brute-force your URLs then.

Name: Anonymous 2018-08-30 12:43

>>20
Not if you make them something that humans will recognize as relevant to the content, but that doesn't use common phraseology. Human brains are very good at filling in patterns.

Name: Anonymous 2018-08-30 14:38

Name: Anonymous 2018-08-30 15:20

>>11
Edit locally and secure upload to your site, ya silly twat.

Name: Anonymous 2018-08-30 16:21

>>23
yeah why use photoshop when you can use ms paint?
totally the same thing, guys!

convenience is a big part of why people use software, and if something is inconvenient (or it takes longer to do stuff in it), then people won't do it

the boomers on this site are so delusional

Name: Anonymous 2018-08-30 19:46

>>24
I don't open photoshop when I just need to crop/edit an image

Name: Anonymous 2018-08-30 21:52

>>25
the analogy doesn't work very well but the point is that modern tools are more convenient than older tools, even though the older tools can technically do the same thing -- but they take a lot longer to do it

people use Wordpress over SSH and manual editing because it's convenient

Name: Anonymous 2018-08-31 11:28

I’ll just boom it through ssh. No need for fancy tools. Just my boom-term is all I need to do anything.

Name: Anonymous 2018-08-31 13:55

>>27
boom-term
What would that be?

Name: Anonymous 2018-08-31 14:25

>>28
urxvt?

Name: Anonymous 2018-08-31 15:46

>>28
The command line. Zoomer-troll associates anything for highly-technical power-users is for boomers only.

Name: Anonymous 2018-08-31 16:01

>>30
boomer: bash in urxvt
zoomer: oh-my-zsh and iTerm2

Name: Anonymous 2018-08-31 16:25

Basically some tard thinks "Boomers use more complex/manual/older software"(he should be forced to do some boomer tech support, where he will need to teach them TO FUCKING DOUBLE-CLICK properly).

Name: Anonymous 2018-08-31 16:29

>>32
Yesh, *sips* real men just use a keyboard. A real IBM Model M from the army surplus store. They don't make them like they used to.

Name: Anonymous 2018-08-31 17:10

>>32
yeah buddy, old shit with less features is more complicated

hmmm

Name: Anonymous 2018-08-31 17:14

me: maybe you should learn modern tech
/prog/ boomers: NO! OLD TECH IS BETTER BECAUSE IT'S WHAT I GREW UP WITH AND I'M TOO LAZY TO LEARN NEW THINGS
me: or you could just stop pretending that you're better and actually adapt to modern industry standards
/prog/ boomers: FUCK YOU MY GENERATION WAS THE BEST AND I REFUSE TO CHANGE

Don't change these.
Name: Email:
Entire Thread Thread List