Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.lang.javascript > #16371

Re: Thwarting DoS attacks

Show all headers | View raw

Denis said:

> Another technique:
>
> Ask them for an email addr. Email a unique link to each addr that is
> submitted. Something like:
>
> "Hi
>
> You (or someone pretending to be you) submitted a request for a download
> link for [name of software].
>
> To confirm that you want this link, click the following url:
>
> http://host/confirm1?x=some_hash_here
>
> Otherwise, please ignore this email.
>
> Best Wishes
>
> Mel Smith, blah blah blah"
>
> When they click on the confirm link, email a unique (using a different
> hash) download link to the email addy for that hash. In your download
> handler, check for valid second stage hashes.
>
> A bit more fiddly to program and use, but possibly less fiddly to the
> user than a captcha, and if / once the attacker catches up with the new
> system, you may over time be able to identify email providers that are
> being used in the attacks.

Denis:

    This is another good idea !

    I'll investigate it.

Thanks,

-Mel

Back to comp.lang.javascript | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 09:41 -0600
  Re: Thwarting DoS attacks Dr.Kral@nyc.rr.com - 2012-10-03 14:29 -0400
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 14:39 -0600
  Re: Thwarting DoS attacks Daniel Pitts <newsgroup.nospam@virtualinfinity.net> - 2012-10-03 14:49 -0700
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:15 -0600
      Re: Thwarting DoS attacks Gene Wirchenko <genew@ocis.net> - 2012-10-03 17:26 -0700
  Re: Thwarting DoS attacks Denis McMahon <denismfmcmahon@gmail.com> - 2012-10-03 22:13 +0000
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:20 -0600
  Re: Thwarting DoS attacks dann90038@gmail.com - 2012-10-03 15:45 -0700
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:24 -0600
  Re: Thwarting DoS attacks Stefan Weiss <krewecherl@gmail.com> - 2012-10-04 00:51 +0200
    Re: Thwarting DoS attacks "Mel Smith" <med_cutout_syntel@aol.com> - 2012-10-03 18:28 -0600

csiph-web