Firefishy
Joined 13 years ago
Joined 13 years ago
I should really do a write-up sometime.
Technically we able to block and restrict the scrapers after the initial request from an IP. We've seen 400,000 IPs in the last 24 hours. Each IP only does a few requests. Most are not very good at faking browsers, but they are getting better. (HTTP/1.1 vs HTTP/2, obviously faked headers etc)
The problem has been going on for over a year now. It isn't going away. We need journalists and others to help us push back.
The scrapers try hard to make themselves look like valid browsers, sending requests via residential IP addresses (400,000+ IPs at last count).
I reached out to journalists because despite strong technical measures, the abuse will not go away on its own.
Without OSUOSL OpenStreetMap would be more difficult to host and significantly slower to access from North America.
I hope OSUOSL can get the financial support they rightfully deserve.
There are still issues to fix as it is still only a technical preview.
The raster tiles are primarily for our OSM mappers to see their map changes rendered quickly to improve the feedback loop.
OpenStreetMap data is free to download. We published minutely on https://planet.openstreetmap.org/ and the data available via AWS S3 + torrent.
If you just starting out, best to start with a smaller regional extract: https://wiki.openstreetmap.org/wiki/Planet.osm
Our S3 bucket is thankfully supported by the AWS Open Data Sponsorship Program.
rasdaemon also attempts to report which physical DIMM / slot triggered the ECC error.
A scanner that would have caught the vulnerability: https://tech.ovoenergy.com/how-we-prevented-subdomain-takeov...
Or a grey hat scanner for finding sub-domains vulnerable to takeover: https://github.com/m4ll0k/takeover