mersenneforum.org

mersenneforum.org (https://www.mersenneforum.org/index.php)
-   FactorDB (https://www.mersenneforum.org/forumdisplay.php?f=94)
-   -   strange thing happening in factordb (https://www.mersenneforum.org/showthread.php?t=16359)

wblipp 2011-12-20 19:16

If you look at the status page, you will see there are zero workers connected. It's probably related to the database having been down for a while - the workers haven't been restarted yet.

I'm more surprised by the PRPs from 300 to 800 digits. These seem to have a wide range of forms, but all have a creation date of today.

Stargate38 2011-12-20 21:35

There are 7 workers connected now and all the PRP's <300 digits are now proven. :)

firejuggler 2011-12-20 22:26

and here he goes again, this time with 35 digits composite....

wblipp 2011-12-20 23:23

[QUOTE=firejuggler;282969]and here he goes again, this time with 35 digits composite....[/QUOTE]
False start. He has settled in at 61 digits now.

Batalov 2011-12-21 00:34

It is apparent to any reasonable person that factoring all (say) 41-digit numbers will saturate and shut down the database (or a database of any size). It amounts to a DoS attack and such user should be banned from factorDB for a significant [URL="http://en.wikipedia.org/wiki/Denial-of-service_attack#Legality"]period of time[/URL].

RichD 2011-12-21 02:18

[QUOTE=Batalov;282983]It amounts to a DoS attack ....[/QUOTE]

Hmm, and kar_bon appears to have found some useful documentation.

Syd 2011-12-21 14:44

So much disk space and bandwidth wasted - what a pity.

I tried to stop this several times and blocked quite a lot ip´s, most of them seemed to be proxy or tor exit node ip´s.

I dont know what to do about this at the moment!

xilman 2011-12-21 15:00

[QUOTE=Syd;283041]So much disk space and bandwidth wasted - what a pity.

I tried to stop this several times and blocked quite a lot ip´s, most of them seemed to be proxy or tor exit node ip´s.

I dont know what to do about this at the moment![/QUOTE]Put a Captcha on anything that tries to write to the database?

bsquared 2011-12-21 15:08

[QUOTE=Syd;283041]So much disk space and bandwidth wasted - what a pity.

I tried to stop this several times and blocked quite a lot ip´s, most of them seemed to be proxy or tor exit node ip´s.

I dont know what to do about this at the moment![/QUOTE]

Require a login to write to the database? Then bad behavior can be stopped by deleting the user's account.

Re: Xilman
Put the captcha in the user creation process... then at least you only have to do it once and folks with automated (but legitimate) hooks into the database (bchaffin's workers?) won't be affected.

chalsall 2011-12-21 15:10

[QUOTE=Syd;283041]I dont know what to do about this at the moment![/QUOTE]

If I may make some suggestions:

- Make each user submit an e-mail address to which a confirmation e-mail is sent. Only once the user confirms the secret (I use a MD5 string of (truly) random data) are they given access. (Warning: this can be used to create annoying e-mails to third parties; limit one sign-up attempt per IP.)

- Use "CAPTCHAs" on both the sign-up page and the confirmation page.

- Establish a "trust" level for each user. Only after a user has proven they are legitimate (by submiting valid and valuable data) are they able to submit large amounts of data.

Unfortunately, this kind of behaviour is common on the "Wild Wobbly Web".... :sad:

firejuggler 2011-12-21 15:13

force a log-in to write anything in the DB, and put a low limit to how many you can 'write' in the DB, something like 200 id per day.

edit : oh well, i'm late, follow bsquared and chalsall suggestion!


All times are UTC. The time now is 12:07.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2021, Jelsoft Enterprises Ltd.