HTTP/2 Bomb Attack Disrupts Web Servers in Seconds

A home computer on a typical 100Mbps connection can cripple a vulnerable server in mere seconds using a new technique called the HTTP/2 Bomb, which cleverly combines two known weaknesses in HTTP/2 server configurations. This potent attack can be unleashed quickly, leaving servers inaccessible.

https://osintsights.com/http2-bomb-attack-disrupts-web-servers-in-seconds?utm_source=mastodon&utm_medium=social

#Http2Bomb #DenialOfService #Hpack #Slowloris #WebServers

HTTP/2 Bomb Vulnerability Targets Major Web Servers with Remote DoS Exploit

A newly discovered HTTP/2 Bomb vulnerability can be exploited to launch a remote Denial of Service (DoS) attack on major web servers, taking advantage of a weakness in the default HTTP/2 configuration. This flaw cleverly combines a compression bomb and a Slowloris-style hold to target HPACK, HTTP/2's header-compression…

https://osintsights.com/http2-bomb-vulnerability-targets-major-web-servers-with-remote-dos-exploit?utm_source=mastodon&utm_medium=social

#Http2Bomb #DenialOfService #RemoteExploit #Vulnerability #WebServers

Looking at the visits logs for my small server based in Connecticut that serves up Connecticut-focused content:

Stopping Web Server Abuse with Fail2Ban
"At 4am yesterday morning I was awake. Luckily so, as I checked my email and saw a warning that my VPS had been running at 199% CPU for two hours. I went into my office and checked the logs…"

#HowTo #WebServers #fail2ban #ComputerSecurity

How to Prevent AI from Scraping your Content ― off of your website and webserver.

An instruction manual from 2024.

First layer of defence against the EvilArts🤖 is a file on your web server, robots.txt

There's also a json method of updating the file, incl. an ai.robots.txt github repo.

Lots of helpful suggestions in here ― including, sebond layer.

https://lorenzodewaele.com/posts/how-to-prevent-ai-from-scraping-your-content/

#NoAI #NoBots #DataProtection #DataSecurity #PrivacyMatters #WebServers #WebsiteHosting