Hacker News new | past | comments | ask | show | jobs | submit | rum3's comments login

The access will always be easy anyway. The only difference is that now people have access to high quality drugs which are much less damaging, not some shit that has changed hands ten times, with each duckhead cutting it with whatever they have nearby.


It saved lives by giving more people access to high quality drugs, as well as having a feedback and review system that made the vendors accountable for the shit they sold.

Harm reduction is a big thing on DNM markets and forums. You have information on how to safely use drugs and places to ask for advice. I bet it saved quite a few lives.


Google seems to be sort of like a sect of narcissists.


Keep on centralizing the internet with your stupid clouds and this is what happens.


Why did you install this in your house?


Obviously it will not take long until there is an app you can use to generate a fake driving license that has all the fancy anti-tampering animations. But will it be a money maker for the app creator, or will it be banned in the play store?


Of course such a modified app wouldn't be accepted into Google Play or any other official app store, it would have to be sideloaded.


It doesn't have to be a modified version of the original app. It can just be an app that generates very similar looking graphics and animations, the "Funny Finnish Driving License Generator" or something. You think this would still break the terms/rules?


Such an app might first get accepted into an app store (by accident), but it would surely break the rules and get taken down pretty quickly.


Since they introduced the square-selecting captchas I have always assumed that they use it for identifying the user. I bet that depending on how you solve the captchas they can identify who you are if their system already has a theory of who you might be.


they're there for denying access to automated scripts.


This is the reason they exist in the first place, but doesn't answer the question why they're implemented this particular way.


They're implemented this particular way to provide training data for image segmentation systems, they move the image around inside the frame which allows them to use a few people doing the challenge to create a boundary representation that can be used to train things like YOLO style ML systems


Cloudflare must be mentioned when talking about recaptcha and cancer. They are the ones locking people out from whole websites and forcing you to fill out these recaptchas. They are also the ones who have almost destroyed browsing the internet using TOR due to these recaptchas.


While I agree with you -- I'd also like to point out that >90% of malicious traffic to the websites I administer comes through the Tor network.

It shouldn't be the case, and I don't want to block people who have a legitimate reason to use Tor. Unfortunately there isn't a "block Tor traffic from assholes" option, so all I can really do to reduce the malicious traffic is block exit nodes.


This has nothing to do with Tor. Cloudflare frequently blacklists entire countries/counties worth of people (and rarely reverts those blacklists). There is a good chance, that you have missed a lot Indian/Vietnamese/Russian/Chinese visitors, because Cloudflare concluded, that forwarding their traffic to your site isn't financially viable for them.

> Unfortunately there isn't a "block Tor traffic from assholes" option

What exactly is "Tor traffic from assholes"? Bulk DDoS attacks? E-mail spam? SSH login attempts? Please share your valuable experience with everyone here, so that all of us could stay safe by learning from your example.


And for companies that don't do business with those countries - this is not a loss.

Most "asshole" traffic I see falls into one of two categories - attempts to exploit vulnerabilities (../../../etc/passwd stuff) and account takeover attacks.

The first I can forgive, I don't frankly care where that traffic comes from and the responsibility is entirely mine as website admin to prevent these types of attacks through good coding practices, WAF, etc.

The second I have less control over because customers / the general public sucks at security. They re-use passwords they've had for 10 years and won't opt-in to 2fa. And as a merchant, my company generally eats the cost of fraud that these attacks generally result in.

If no or little legitimate traffic is coming from Tor, and a significant percentage of malicious traffic is coming from Tor - at great cost to me / my company - why the hell would I allow it to continue?


One simple solution I can think of is to restrict POST requests from Tor exit nodes while still allowing GET requests. Cloudflare will give you a impossible-to-solve captcha even if you just try to visit site.com/index.html and I see no reason for this.


Is the issue Tor traffic, or that you know what traffic is Tor?

There are many types of "abuse" (not just trolling) - mass downloading/scanning. (Ex: several types of port scanning can't be done via Tor since it doesn't support UDP)


Usually if something is made in America it is a product of very high quality (except for food). This must be a deeper cultural thing and not just regulatory culture.


Nope. It's just regulation.


Nope. Definitely not just regulation. China has regulation in spades but the culture breaks it.

Culture plays a huge role. Source: first hand experience living in China (highly broken culture), Taiwan (pretty mature and functional culture, but with some problems like “the boss knows best even if he doesn’t”), India (seriously broken with the caste system but also a strong sense of propriety) and the US (mixed bag, comparable to Taiwan in a lot of ways).


Culture is shaped by enforcement of regulation. It's the same thing.


Saying they are the same thing is ludicrous.

But if you're saying they shape each other, that I can agree with.


Why did they even open the gate and allow all these new stupid tld's? Who asked for it? It brought nothing good.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: