Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I've soft launched the commercial offering and I'm working on expanding the commercial features before I announce it more publicly. If you pay $50 a month on GitHub sponsors, you get access to BotStopper complete with custom CSS support. You'll also get access to the reputation database I'm working on named hivemind.


> You'll also get access to the reputation database I'm working on named hivemind.

That feels uncomfortably close to returning to the privacy-and-CGNAT-hating embrace of cloudflare et al.


[flagged]


> My goal is to not have it outright block, but use the reputation database as a signal of when to throw a challenge.

Oh, if it's just to make things potentially easier while leaving the baseline where it is then that's fine.

> However, you are allowed to believe what you want and I can't stop you from being wrong.

For instance, you appear to believe that I'm attacking you?


>> However, you are allowed to believe what you want and I can't stop you from being wrong.

>For instance, you appear to believe that I'm attacking you?

FWIW, that's not what I read. You made an assumption about implementation and the effects based on very little information. Xe simply said you can believe (i.e., make assumptions about) whatever you want. You then assumed (another one) that your comment was interpreted as an attack.

Maybe it was, maybe it wasn't. There's not enough context in here to know either way.


> reputation database I'm working on named hivemind.

Anywhere I can read more about this? Sounds super interesting, and a cursory search didn’t show anything for it on your site.

Otherwise I’m sure I’ll hear about it soon anyway, at the rate Anubis is going!


I'd be happy to talk about it if it existed, I'm still working out the details. But the basic idea is to take advantage of the fact that Anubis is a very popular project from what I've seen with logs that server admin have submitted the same IP blocks and the like hit instances of Anubis so some kind of IP reputation thing would work for this.

I am also working on some noJS checks, but I want to test them with paid customers in order to let a thousand flowers bloom.


That sounds a bit like what crowdsec does for SSH.

https://github.com/crowdsecurity/crowdsec


Cool. Good luck on both that and Anubis generally — seems like you’ve found something that’s both a meaningful benefit to the common good AND could maybe make a buncha money, or at least enough to pay for development, which is awesome.


Thanks! There's a lot of really hard problems to solve and most of them hinge around trust. I usually default into solving trust by making things open, but security software needs a bit of cloak and dagger by necessity. I'll find a balance I'm sure, but it's an annoying thing to balance.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: