Top all-time · #7488
spur.us
Company blog · spur.us/blog · on HN as wyattwestsecurity
spur.us is the company blog at spur.us, writing about security. Since 2020, 11 different Hacker News readers have linked it 15 times. No feed was found, so read it on the site itself.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers cite spur.us posts and product pages on residential proxy networks, IP address reputation, and bot detection, mostly as references in comments about blocking scrapers.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- /2 people · 2 mentions · first linked 2022-07-29
What Hacker News says?
further reading https://krebsonsecurity.com/?s=infatica https://krebsonsecurity.com/tag/residential-proxies/ https://spur.us/blog/ https://bright-sdk.com/ <- way bigger than infatica
Comment linking /blog/
on “The Web Is Broken – Botnet Part 2”Submitted Nearly Half of LG Smart TV Apps Contain Residential Proxy SDKs as a story · 5 points
HN discussionBotnet as a Service is an excellent way to describe many residential proxy networks. We wrote[0] about this exact premise a few years ago. [0] https://spur.us/2020/08/residential-proxies-the-legal-botnet...
Comment linking /2020/08/residential-proxies-the-legal-botnet-that-nobody-talks-about/
on “IPv4 Turf War”Submitted The Hidden Economy of Your Internet Connection as a story · 3 points
HN discussionThe only way you can block these "AI" scrapers is a combination of IP filtering ( https://spur.us/ ) and Fingerprinting ( https://abrahamjuliot.github.io/creepjs/ ). Things like browserbase are easy to block with this. It's a losing battle though, personally moved entirely to real environments for https://browser.cash/developers
Comment linking /
on “Stop crawling my HTML – use the API”Submitted Iranian Apt Utilizing Commercial VPN Services as a story · 2 points
HN discussion>large blocks of IP addresses This could be at least partially solved by starting legal and cybersec (bulk blocks, flagging SDKs as malware) action against botnets for rent[0], forcing their SDKs out of app stores[1]. 0 – https://spur.us/residential-proxies-the-legal-botnet-that-no... 1 – https://datadome.co/bot-management-protection/how-proxy-prov...
Comment linking /residential-proxies-the-legal-botnet-that-nobody-talks-about/
on “AI bots are destroying Open Access”Submitted Spur Anonymity Reports as a story · 1 points
HN discussionI saw some indication at the bottom of this page: https://spur.us/products/context-api
Comment linking /products/context-api
on “911 Proxy Service Implodes After Disclosing Breach”Hi! Here at Spur, this is our mission exactly. As another commenter correctly noted, proxy endpoint data - especially those of residential or "callback" proxies like 911 - is highly ephemeral. Our company provides near-real time tracking for many residential & datacenter proxy services, as well as VPNs. Check us out at https://spur.us
Comment linking /
on “911 Proxy Service Implodes After Disclosing Breach”How exactly do they obtain this data? Residential proxy providers don't publish their IP list (you connect to one of their servers which then tunnels your traffic to the residential exit point). Plus there are tons of such providers. In any case, residential proxies are a godsend. Because most of the everyday services like web shops, govt information portals, even personal blogs sometimes are blocking access usings…
Comment linking /platform/residential-proxy-detection
on “Show HN: Check if your IP has appeared in a residential proxy network”Spur's residential proxy data is not intended to be used as a blacklist. We recommend using it as enrichment alongside other signals, not blocking an IP just because it was associated with proxy activity. More on why here: https://spur.us/blog/i-dont-like-big-gateways-and-i-cannot-l...
Comment linking /blog/i-dont-like-big-gateways-and-i-cannot-lie
on “Show HN: Check if your IP has appeared in a residential proxy network”The IP address mentioned in the article is a VPN exit: https://spur.us/context/209.205.206.42
Comment linking /context/209.205.206.42
on “Choosing a New Comment Policy”I think it could be worth trying to block them with TLS fingerprinting, or since they think it's residential proxies they are being hammered by, https://spur.us could be worth a try.
Comment linking /
on “OpenStreetMap overwhelmed by bots scraping data”This is the core concept of how proxies are detected via services like https://layer3intel.com/tripwire or https://spur.us/monocle/ The difference in min TCP RTT and min RTT to respond to a websocket payload is a dead giveaway that there's a middlebox terminating TCP somewhere along the path. You can bypass this by sourcing your request within 30ms of wherever TCP is being terminated, anything under that threshold c…
Comment linking /monocle/
on “Show HN: Aroma: Every TCP Proxy Is Detectable with RTT Fingerprinting”