I /think/ I've worked out a way to use #BunnyCDN to serve a large file, very, very slowly to any bot requesting .php paths (or similar) from my static site server, and thus tie up the abusers' infra in some small way. Now to figure out if I want to spend the per-byte ยฃโฌ$ on doing so ... #CDN #BunnyNet
#BunnyNet
A quick update to my note about redirecting a domain from HTTP to HTTPS using a #BunnyCDN "Edge Rule": #BunnyDotNet support tell me that the rule needs to contain an exclusion for well-known ACME paths, as pictured. #BunnyNet #CDN
Some brief notes after wrangling a few domains over to a #BunnyCDN Pull Zone today:
- Their "Force SSL" marker does not enable HSTS for a domain, thankfully. It just enables an automatic http->https redirect.
- Sadly, "Force SSL" doesn't also offer an option to disable path persistence across such a redirect (which is a good idea to render the redirect useful to a human, but useless to a machine and thus prevent accidental use of a http://... URL in code)
- Fortunately there's an easy way to cope with this: 1) Add an early Edge Rule, as pictured in this screenshot; 2) disable "Force SSL" for all the Zone's hostnames!
#BunnyNet #BunnyDotNet #CDN
- Their "Force SSL" marker does not enable HSTS for a domain, thankfully. It just enables an automatic http->https redirect.
- Sadly, "Force SSL" doesn't also offer an option to disable path persistence across such a redirect (which is a good idea to render the redirect useful to a human, but useless to a machine and thus prevent accidental use of a http://... URL in code)
- Fortunately there's an easy way to cope with this: 1) Add an early Edge Rule, as pictured in this screenshot; 2) disable "Force SSL" for all the Zone's hostnames!
#BunnyNet #BunnyDotNet #CDN
I played around with #BunnyShield by #BunnyNet and collected three things I'd love to see getting enhanced:
@matdevdug Interesting! What kind of CDN did you choose? #leaseweb, #bunnynet, #keycdn or something else?
Cloudflare sucks they don't have bunny girl D: https://bunny.net is better :3 #bunny #bunnygirl #bunnynet #bunnydotnet
@stevenrosenthal @KamalaHarrisWin
Old Man yells at #BunnyNet โ๏ธ.
#GammaGroup #FinFisher #FinSpy #SystemApp callback caught #CALEA #malware #GreyMarket #investigations
๐ป๐คโฃ๏ธ๐ค๐คณ ๐ฃ๐๐ง
on #BunnyNet's CDN from #DataPacket
Interesting vectors... Quite the pointers this scan. Was scanned last 1yr ago. Showed up as malicious. Scans clean now except for the #malware found as a #GammaGroup shim caught nao. ๐ฃ
Caught a bit o' Meta also in the callback graph. Huh.
#VirusTotal
https://www.virustotal.com/graph/embed/g7ee0dd48fe8e4dbbaf440955ee7bfbf57af12ca1c14543e08671f514fafb75be
New #BunnyNet #GammaGroup #FinFisher #FinSpy #Finsky shim for #SystemApp found. #StateSponsoredMalwareโขโ
This host hasn't been scanned in over 1yr until today.
Initially scanned and found nothing. Dug in a bit further and found some interesting vectors for wot compromised #DataPacket's #BunnyCDN #BunnyNet though #blueteam at #DataPacket โ ๏ธ๐โฃ๏ธ
#VirusTotal
https://www.virustotal.com/graph/embed/gdb48e1efd4a845b9951dcef691fdf3a2f8c56309a9ef445b8f0b7767a351a0e4
Huh. _TWO_ badbunny hosts with the #SystemApp #GammaGroup #FinFisher #FinSpy #Finsky callback to client but ... This time the scanned host comes up with interesting results after being caught. Both back to back attack attempts.
One host was scanned about a year ago and the other, another attack node quite frequently used, was scanned less than a month ago.
#Datapacket.Com #BunnyNet #InfosecExchange #infosec #fediverse #fediadmin
Typical attack pattern. After detection an attempt of using the #QuicksandModule was sent to client, tried crashing client. SystemUI crash attempt, etc.
๐โฃ๏ธ The amount of exploited #BunnyNet hosts on #DataPacket has increased which hosts a lot of the #fediverse. #Germany โฃ๏ธ๐
#GammaGroup #FinFisher #fediverse #FinSpy #Finsky #CALEA #GreyMarket #investigations #infosec
Damn, #BunnyNet, hopping AND a blocking someone! ๐๐๐๐ฅ๐ #infosec #FinFisher #FinSpy #SSMโข #GreyMarket #investigations #Germany #DataPacket๐ฌ๐
Lots to unpack collections wise here
๐ฌ๐
โฃ๏ธ
๐
Dear friends of #BSDCafe, to improve the performance of the Wiki (https://wiki.bsd.cafe, currently not very active) and Element (https://element.bsd.cafe), I've activated a CDN to better distribute the content.
Everything seems more responsive now, especially since Element is static, and the Wiki, for now, can almost be considered static.
#BSDCafe #BSDCafeUpdates #BSDCafeAnnouncements #Performance #CDN #BunnyNet #BunnyCDN #Matrix
Client Info
Server: https://mastodon.social
Version: 2025.04
Repository: https://github.com/cyevgeniy/lmst