This post is by a banned member (Refunding) - Unhide
OP 17 August, 2022 - 08:35 PM
Reply
(17 August, 2022 - 08:27 PM)Caviar Wrote: Show More (17 August, 2022 - 07:37 PM)amboss Wrote: Show More (17 August, 2022 - 05:20 PM)Caviar Wrote: Show MoreUnfortunately @ Darkness I did all the work Fivio's other dev @ Allowy has asked me to do, add the JS functions for the Captcha, and Allowy will do the Golang part, i finished my part and Allowy wants time off so my job here is done.
Now fivio is putting the blame on me. And those are bot attacks making spam pastes.
I got in touch with the owner of Ghostbin and he said he runs his server on 8TB Storage and 32gb ram, understandable and has no protection other than Cloudflare Super Bot Fight Mode (which was activated on Fivio's site right after he got CF Premium)
The guy botting it is actually no longer using a public script, he made his own one with tons of bypass, and even managed to bypass my custom Firewall, so he is smart, and I'm sure he can bypass ReCaptcha V3 as-well as it is an easy bypass. He even is using Rotating Proxies as I checked there are millions of requests on CF from different different IPs so I can't block just one and call it a day.
Fivio is currently running it on a 40GB server
And guess what, remember before I migrated the site darkness? It ran perfectly fine on my 1TB 64GB server, ZERO downtime rather than when i was editing some code on it. Right after it was migrated to Fivio's server all issues started occuring
And I know it's unethical to keep 1TB storage for a site like that, understandable
But Fivio's servers are so weak that even if one person makes 10 pastes per second it will automatically crash, and I had to setup a CRON task to automatically start all services back again if it crashes. Not my fault.
And the rest of the work Fivio asked was NOT part of the initial deal. If Fivio wanted a ghostbin site similar I could've made it without effort with HTML/CSS/JS but I asked him if he wants the original source instead in which he said yes so I installed that one.
sorry for posting here, but there is something i want to add here:
tf do you mean by "custom firewall" you implemented lol?
there is nothing except the obvious cloudflare stuff on the site that could prevent a botting attack.
like literally nothing.
there would be no need to even use any proxies, no need to bypass any security, nothing.
anyone with more than 2 braincells and a 5 minute coding tutorial would probably be able to spam the site.
idk what you think you have implemented in security but there is nothing except the cloudflare wait a few seconds shit which doesn't do anything.
By custom firewall I meant I added rate limiters.
And exactly that's the point Fivio won't understand The site went down 4 time in the past hour, clearly whatever you claim was added dosen’t work
This post is by a banned member (Caviar) - Unhide
18 August, 2022 - 06:06 AM
Reply
(17 August, 2022 - 08:35 PM)Fivio Wrote: Show More (17 August, 2022 - 08:27 PM)Caviar Wrote: Show More (17 August, 2022 - 07:37 PM)amboss Wrote: Show Moresorry for posting here, but there is something i want to add here:
tf do you mean by "custom firewall" you implemented lol?
there is nothing except the obvious cloudflare stuff on the site that could prevent a botting attack.
like literally nothing.
there would be no need to even use any proxies, no need to bypass any security, nothing.
anyone with more than 2 braincells and a 5 minute coding tutorial would probably be able to spam the site.
idk what you think you have implemented in security but there is nothing except the cloudflare wait a few seconds shit which doesn't do anything.
By custom firewall I meant I added rate limiters.
And exactly that's the point Fivio won't understand The site went down 4 time in the past hour, clearly whatever you claim was added dosen’t work
Nothing will work not even your captcha cause the guy botting it is using rotating proxies and a lot of bypasses
This post is by a banned member (Refunding) - Unhide
OP 18 August, 2022 - 12:51 PM
Reply
(18 August, 2022 - 06:06 AM)Caviar Wrote: Show More (17 August, 2022 - 08:35 PM)Fivio Wrote: Show More (17 August, 2022 - 08:27 PM)Caviar Wrote: Show MoreBy custom firewall I meant I added rate limiters.
And exactly that's the point Fivio won't understand The site went down 4 time in the past hour, clearly whatever you claim was added dosen’t work
Nothing will work not even your captcha cause the guy botting it is using rotating proxies and a lot of bypasses
@ amboss said otherwise. @ Darkness please just ban him
This post is by a banned member (VAVE) - Unhide
2.581
Posts
1.187
Threads
5 Years of service
18 August, 2022 - 01:48 PM
Reply
(18 August, 2022 - 06:06 AM)Caviar Wrote: Show More (17 August, 2022 - 08:35 PM)Fivio Wrote: Show More (17 August, 2022 - 08:27 PM)Caviar Wrote: Show MoreBy custom firewall I meant I added rate limiters.
And exactly that's the point Fivio won't understand The site went down 4 time in the past hour, clearly whatever you claim was added dosen’t work
Nothing will work not even your captcha cause the guy botting it is using rotating proxies and a lot of bypasses
as I already said in my first post here.
there isn't any security someone would even need to bypass.
no rate limit.
no captcha.
nothing.
you are just straight up lying.
anyone with more than a single braincell would be able to spam the site.
the site is protected against spamming as good as a pile of money would be just laying on the site of the road with a sign saying please don't steal.
and a captcha would definetly help.
since even if using something like 2captcha it would cost money and would reduce the speed drastically.
This post is by a banned member (Caviar) - Unhide
18 August, 2022 - 02:59 PM
Reply
(18 August, 2022 - 01:48 PM)amboss Wrote: Show More (18 August, 2022 - 06:06 AM)Caviar Wrote: Show More (17 August, 2022 - 08:35 PM)Fivio Wrote: Show MoreThe site went down 4 time in the past hour, clearly whatever you claim was added dosen’t work
Nothing will work not even your captcha cause the guy botting it is using rotating proxies and a lot of bypasses
as I already said in my first post here.
there isn't any security someone would even need to bypass.
no rate limit.
no captcha.
nothing.
you are just straight up lying.
anyone with more than a single braincell would be able to spam the site.
the site is protected against spamming as good as a pile of money would be just laying on the site of the road with a sign saying please don't steal.
and a captcha would definetly help.
since even if using something like 2captcha it would cost money and would reduce the speed drastically.
Yeah sure,
Give me a bit im showing proof of everything
This post is by a banned member (VAVE) - Unhide
2.581
Posts
1.187
Threads
5 Years of service
18 August, 2022 - 03:03 PM
(This post was last modified: 18 August, 2022 - 03:25 PM by VAVE. Edited 2 times in total.)
Reply
(18 August, 2022 - 02:59 PM)Caviar Wrote: Show More (18 August, 2022 - 01:48 PM)amboss Wrote: Show More (18 August, 2022 - 06:06 AM)Caviar Wrote: Show MoreNothing will work not even your captcha cause the guy botting it is using rotating proxies and a lot of bypasses
as I already said in my first post here.
there isn't any security someone would even need to bypass.
no rate limit.
no captcha.
nothing.
you are just straight up lying.
anyone with more than a single braincell would be able to spam the site.
the site is protected against spamming as good as a pile of money would be just laying on the site of the road with a sign saying please don't steal.
and a captcha would definetly help.
since even if using something like 2captcha it would cost money and would reduce the speed drastically.
Yeah sure,
Give me a bit im showing proof of everything
yes please show, that:
1. there is a rate limit (spoiler: there isn't)
2. there is something that requires the use of proxies (spoiler: it's not)
3. there is something to prevent spamming at all lol (spoiler: also isn't there)
edit: you finally found the cloudflare option for rate limiting lol
edit 2: way too sensitive though. triggered the 15 minute rate limit ip ban by making like 5 pastes manually.
This post is by a banned member (N1ghth2wk) - Unhide
18 August, 2022 - 03:04 PM
Reply
This post is by a banned member (Caviar) - Unhide
18 August, 2022 - 08:59 PM
(This post was last modified: 18 August, 2022 - 09:08 PM by Caviar.)
Reply
(18 August, 2022 - 03:03 PM)amboss Wrote: Show More (18 August, 2022 - 02:59 PM)Caviar Wrote: Show More (18 August, 2022 - 01:48 PM)amboss Wrote: Show Moreas I already said in my first post here.
there isn't any security someone would even need to bypass.
no rate limit.
no captcha.
nothing.
you are just straight up lying.
anyone with more than a single braincell would be able to spam the site.
the site is protected against spamming as good as a pile of money would be just laying on the site of the road with a sign saying please don't steal.
and a captcha would definetly help.
since even if using something like 2captcha it would cost money and would reduce the speed drastically.
Yeah sure,
Give me a bit im showing proof of everything
yes please show, that:
1. there is a rate limit (spoiler: there isn't)
2. there is something that requires the use of proxies (spoiler: it's not)
3. there is something to prevent spamming at all lol (spoiler: also isn't there)
edit: you finally found the cloudflare option for rate limiting lol
edit 2: way too sensitive though. triggered the 15 minute rate limit ip ban by making like 5 pastes manually.
https://imgur.com/a/2dxFdfK
(18 August, 2022 - 03:04 PM)N1ghth2wk Wrote: Show More
Thanks for your opinion,
But i don't usually take one week for a source code installation, just 2 days and Fivio is not my first client, I've done installation servers for $10.
Since Fivio paid me $60 I was going to make him a site from scratch, but after 2 days of working on it, it seemed I was on a short schedule so I decided to ask him if he just wants the original source code, which in turn he said yes. (Cause when he ordered I didn't have my web services up and running yet on cracked.io cause I had 40 pending orders on Fiverr)
I did everything he asked for, but he would ask me to add new things every single day, got it added them, then the main issue is that his site is being botted by someone and since his server has shared bandwidth it would trip the server's CPU and everything would crash, then I decided to set up a CRON task that will automatically check if the ghostbin services are running or not and if not it will automatically run. I used Python to do this FYI.
And because of this I decided to add firewall rules on CF and rate limiters, no luck, made my own firewall and integrated it with Cloudflare Cloudflare workers. Didn't work, stepped it up from Lv 5 protection to Lv 15, seems to have fixed it now (i did that just a few hours ago as of writing)
And before I took Fivio's job I clearly stated to everyone that my current situation is shit and I am mere homeless and have 3 jobs so delays are to be expected on anything you ask me to do, but now I'm doing great alhamdulillah as my orders have been consistent now.
Please read the whole report before accusing.
|