Matt
Running Free
Premium
join:2003-07-20
Jamestown, NC |  Good Writeup
Good info Justin. Can't wait for the 2nd article with technical specifics.
Also, did NAC really tell you to just "not piss people off"? Wow. |
|
justin
Australian
join:1999-05-28
Brooklyn, NY | No, they didn't tell me. Just an opinion they had on the best way to mitigate. I can see where they are coming from it sucks to have other customers knocked around. |
|
Calliope
Premium
join:2005-09-19
Madison, WI | Thank you for the article. Although I do not understand it in its entirety, it is certainly enlightening and answered a few questions for me. |
|
SND2005
Premium
join:2001-09-15
Im Over Here
 ·CWLab
| reply to justin
said by justin  :No, they didn't tell me. Just an opinion they had on the best way to mitigate. I can see where they are coming from it sucks to have other customers knocked around. Would it be possible to switch over to a "CAPTCHA" type mechanism to weed out real traffic during an attack? Possibly you could route requests from BOTs back to themselves, and route positive CAPTCHA replies to the real web or backup web address? Sorta a pseudo secret handshake?  |
|
justin
Australian
join:1999-05-28
Brooklyn, NY
Host:
IPv6
Business Connectiv..
Home/Office setup ..
Console/Handheld g..
Console Tech
| That would be even harder than serving them a normal page upon request.
Some newer web servers have introduced a way of giving preference and priority to existing users (on the site before it got full up), or users with an encrypted token that they pick up when they login. |
|
