Needle

Ouch, here is a thread for you.

[blend27]

Tiny yet featureful HTTP client. With deflate & multipart POST support.

UA - Needle/0.4.8 (Node.js v0.8.22; darwin x64)

Headers:
Host: www.example.com
Accept: text/html,application/xhtml+xml,application/xml
Content-Length: 0
Connection: close

Single request from 108.180.197.18x.(TELUS CA). I am starting to see a few of these (JS Based)poking around .

[lucy24]

Telus? Oh, ###. That's an utterly legitimate human IP.

Saw the thread title and though Woo Hoo, Pfui's back. Oh well.

[dstiles]

I saw one a few days ago but was happy to see it blocked.

Ixquick returned only two real entries for the UA, both site logs (why do people allow that?!). Following an advert only returned a "this is popular, use it here" kind of page for cloud hosting.

I know telus is basically a humnan service but I have several bad groups and singles within their ranges.

[lucy24]

:: idly wondering if a generic UA block in the form
[^.\d]0\.
or possibly
[/\s](v\.)?0\.
("version zero point anything")
would lock out anyone you didn't mean to lock out ::

[keyplyr]

Not so bothered 'bout the needle, it's that impending haystack that's worrisome!

[blend27]

The point is that more and more AJAX based scarper scripts are out there being released into the wild. At this point HEADERS are very effective against that. Node.js is a serverside JS technology BTW.

[keyplyr]

Node.js is a serverside JS technology BTW.

Thanks for pointing that out. Sometimes I think all things js are browser-side.

[lucy24]

Ezra Pound.

2 down, 2 to go.

[dstiles]

Have to say you are becoming obscure, Lucy. :)

[lucy24]

See nearby post with similar timestamp :) This one was something about "generation of the thoroughly smug".

The snipped post gave a postcount of four, though I only ever saw two.

[dstiles]

Fair enough. :)