• 2 Posts
  • 182 Comments
Joined 2 years ago
cake
Cake day: August 15th, 2023

help-circle

  • Good luck with that, I suppose. Botnets can have thousands, if not hundreds of thousands of infected hosts that will endlessly scan everything on the interwebs. Many of those infected hosts are behind NAT’s and your abuse form would be the equivalent of reporting an entire region for a single scan.

    But hey! Change the world, amirite?



  • I don’t want to go so far as to tell you how to think, but as long as we are talking about how to visualize IP addresses, you may want to check out subnets and subnet masking.

    The notation of IP addresses starts to make sense when you think about the early days of TCP/IP when all IP addresses were public and NAT’ing wasn’t really required yet. Basically, there needed to be ways for networks to filter traffic by IP blocks that were applicable. (It was [in part] a precursor to collision avoidance, but absolutely not the full story.) We still use addressing and masking today, but it’s more obvious when it’s local. (Like in data centers, where it’s super practical to mask off a block of addresses for a row or rack of servers.)

    To your point, yeah. IP addresses are probably more comparable to the Dewey Decimal System rather than actual numbers and thinking of them as strings is probably easier.










  • Effort vs Reward vs Ability vs Inital investment

    In most cases, think of this kind of thing like a legitimate business. Same concepts. I’ll grade a few scenarios based on what I have seen over the last 20 or so years. (The ratings are arbitrary and just trying to explain my point.)

    Do you have the means to rent a botnet and phish a few million people for lots of credit card numbers? Can you manage that kind of data, test all those numbers and maybe end up just selling that data? Low Risk/Moderate Reward (“Selling shovels” analogy is probably a better scheme than actually renting the botnet, IMHO)

    Could you setup a “call center” in India and run a scam ring like an 8-5 business? Are there enough people you can hire to do this work? That requires training, infrastructure and time. You also may need to “work with” law enforcement to ensure your scam isn’t busted by legitimate cops. Moderate Risk/Moderate Reward.

    Are you part of a small group with an insane amount of skill that has the time to pull off an extortion scheme against a Fortune 500 company for a few million bucks? High risk/High reward

    Those are all normal scenarios above and it’s based on profitability and initial investment. Risk/Reward is always a balance.

    (Sorry. I pulled a “wHellll aKshUallY” when you said it’s not worth the time for the small targets.)








  • Alumina (aluminum oxide) is what you are extracting from aluminum ore and it’s tough as fuck, which is why it’s easier to dissolve the rest of the stuff around it first.

    Oxygen is mainly that other “junk” you have to separate with electricity. While the smelters only run at 4.5 volts (per cell), they have to push about 300kA to get the stuff up to ~950°C which breaks its chemical bond.

    You probably have never even touched pure aluminum before. Aluminum and oxygen react so quick, all we typically ever see and touch is a alumina shell.