Skip to content

Comment on AURpocalypse now: a look at the recent AUR attacks

Comments

New user registration was stopped on June 11 and then re-enabled after the project added Anubis to try to foil the attacker's mass account registrations. That did not work

This confuses me - why would a proof-of-work anti-scraping system like Anubis prevent registrations?

Implementing a bot to do registration is not a "copy as curl " click away anymore, and creating millions of accounts maybe become computationally expensive.

This is not much, but it could deter some low effort adversaries.

I see that, but the adversary wasn’t a low effort one, and didn’t need millions of accounts.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.