new blog post!

[lina@ohai.social]

new blog post! https://lina.sh/blog/ddos-honeypot

i stumbled across a secret fake DDoS-as-a-Service website ran by the dutch police, and when i started digging into it, they panicked and shut it down
really funny story, if anyone is interested how such a fake website looks like, take a read ^^

[devil@mastodon.uno]

@lina So cool ahah

[nube@verse.averagedood.xyz]

@lina@ohai.social Great post :3, can I ask if the code for the comment system on your blog is public? Or how did you do it? It really caught my eye, especially the login with Mastodon, looks cool

[lina@ohai.social]

@nube thank you! it's a bit complex though because my entire website works without any javascript haha, and the front end does some silly shenanigans

GitHub - lina-x64/lina.sh: The code for my website, not a single line of JavaScript!

The code for my website, not a single line of JavaScript! - lina-x64/lina.sh

GitHub (github.com)

`comment_auth.py`
this is the code that handles authentication (like logging in with mastodon)

`blog.py`
this is the code that handles everything with blog posts, including adding, editing and deleting comments

and each blog page (`/pages/blog_post.html`) loads this comment template: `/pages/partials/comments.html`

[io@blahaj.zone]

@lina@ohai.social that's too funny.
Who would use a service like this with their real IP Address?

[lina@ohai.social]

@IO I have absolutely no clue who would even fall for this to begin with

[kirakira@furry.engineer]

@lina im losing it at these screenshots. this is giving "guy with a high and tight asking protesters if they want to break some windows" energy

[luc@chaos.social]

@lina why so cynical? You don't think they're legit trying to reduce these attacks?

[me@mastodon.cysioland.pl]

@lina checks out, the mainstream fed-adjacent "infosec" circles sniffing their own farts so hard that they lose touch with the grass

[kouett@soc.kouett.net.eu.org]

@lina bruh they really are incompetent

[stux@mstdn.social]

@lina fun stuff!

[maypop@bark.wolp.chat]

@lina@ohai.social

omg atkinson hyperlegible hii !!

[lina@ohai.social]

@zm It really does! Although interestingly enough, a lot has been re-written then. A friend pointed out that on the homepage they misspelled "address" as "adress". And if you consider that the feds seem to have been Dutch in that case, that typo makes a lot of sense, as the Dutch word for it is "adres"

So the homepage isn't at least just purely AI generated.

[drewtowler@mas.to]

@lina
From the post:
"The Dutch police appear to run the actual infrastructure for these operations. They have been active for quite some time now, and over the years, they have managed to seize a maybe around one hundred domains and make a few arrests here and there."
So, basically completely ineffectual. Which is what I would expect.

[agowa338@chaos.social]

@lina Ngl, I kinda expected them to also collect the payment details too...

[voidplush@dorm.social]

@lina@ohai.social seeing the ai generated vid made me giggle

[peritia@alovely.space]

@lina

This is hilarious XD