bradleyjkemp
Joined 9 years ago
Karma
279
Submissions
45
Member since
Dec 21
Recent submissions
Comment · 9 months ago
I'd like to see some examples of before/after code samples which have the same hash.
I can see this will be tolerant of simple renames, but seems unlikely this hash will survive any real refactor of code
Comment · 1 year ago
I believe this is another case of abusing GitHub for visibility, not actually doing anything meaningful open source
The code in the repo just seems to be connection code ("provides a way for anybody to test our Redis synchronization service on demand") rather than the sync service itself
Comment · 1 year ago
Oh some of them definitely use a real reCAPTCHA, hCAPTCHA, or Turnstile widget. It actually useful sometimes to track the same API key being used across multiple different domains
But yeah, I wouldn't even know where to report those API keys for abuse
Comment · 1 year ago
It's really common now for phishing kits to use interstitial pages that require solving a captcha before the actual phishing content is shown
Victims just click through the captcha without thinking, but it makes automatic verdicting by security scanners a pain because they just see a captcha page: can't tell the brand being impersonated, or even if it's a phishing site
I wrote a post about a number of these which actually pretend to be Cloudflare! https://phish.report/blog/fake-cloudflare-interstitials
Comment · 1 year ago
A typo I think, should be BM25F. From Wikipedia:
> BM25F (or the BM25 model with Extension to Multiple Weighted Fields) is a modification of BM25 in which the document is considered to be composed from several fields (such as headlines, main text, anchor text) https://en.wikipedia.org/wiki/Okapi_BM25
Some papers are linked in the references
Comment · 2 years ago
Cool! Have you run this against a corpus of known ransomware samples to see how well it performs?
Comment · 2 years ago
Appears the blogpost text is from a LinkedIn post (where the hashtags are clickable): https://www.linkedin.com/posts/zayarni_qdrant-summer-of-code...
Nothing more interesting than copy-paste I'm afraid
Comment · 3 years ago
If you've got a load balancer (like Caddy) in front of your pods you can configure it to hold requests while the new pod comes up: https://twitter.com/bradleyjkemp/status/1486756361845329927
It's not perfect but it means rather than getting connection errors, browsers will just spin for a couple seconds.
The same technique is used by https://mrsk.dev/
[ my public key: https://keybase.io/bradleyjkemp; my proof: https://keybase.io/bradleyjkemp/sigs/KwwyqILJIyQV_L29WmWq8humB4VZlXA8abkWbzBNNm0 ]