Join devRant
Do all the things like
++ or -- rants, post your own rants, comment on others' rants and build your customized dev avatar
Sign Up
Pipeless API
From the creators of devRant, Pipeless lets you power real-time personalized recommendations and activity feeds using a simple API
Learn More
-
@stix appending random suffix to account name is the hero here. Random account name = useless dictionaries for bruteforcing since it increases uniqueness of account name.
-
@zemaitis That doesn't happen as often as one would think. Most floods come from a set number of IPs. Only the most malicious use a botnet.
-
@stix Not sure what that means.
-
@stix How do you constantly change to new IPs without an insane amount of working proxies? Sounds like a bunch of broken routes and an angry ISP.
-
@zemaitis How many different IP addresses were the attacks coming from? It's not exactly easy to change your public IP on a whim, especially not "hundreds of thousands" of times. Were they hitting you with some kind of botnet?
Even with a botnet or some other distributed attack, they usually have hundreds or even thousands of attempts coming from each IP, so fail2ban remains a viable option. It's astronomically expensive to run the kind of infrastructure you'd need to launch hundreds of thousands of attacks from unique IP addresses. -
@hjk101 Dynamic IPs are rarely re-leased on every renew. DHCP servers generally associate a physical and IP address together with a TTL. while not renewing meant your keep the IP, renewing *after the TTL period* would indeed lease you a new IP.
Nobody is using that to get around brute force obstacles though. -
@EmberQuill This is not an uncommon way to deal with this. Russia is oftentimes blocked for this reason (sorry Russians).
when your code is a mess but everything work out in the end
When you keep getting +1s on a rant you posted a month ago.
Go big or go home.
Fucking bruteforce man. Was supposed to go sleep when got few messages from my gameserver players that their accounts have been hacked.
Checked their logs, all of their accounts have been accessed from Russia. Told them to change their passwords and they told me their previous passwords which were easy af to guess.
Digged deeper and found hundreds of thousands failed logins in the last few hours and all of them from different ips.
Since I cant modify gamefiles on client side, the solution for now was to disable in-game registration and force player registration through the website form with captcha and also where each players login name gets appended with a random suffix chosen by player from a random list..
Fuck you bruteforce scriptkiddies, good luck guessing accounts now. At least I can sleep now.
rant