Very interesting defense. It seems that it works because the attacking AJAX call is done with content dataType 'script'. I don't think it'll be too hard for the attacker to fix that.
Since you are already on Heroku, NewRelic in combination might be a good idea. Their free tier can monitor DB loads, uptime, exceptions, response times, slow methods and what not.
Reminds me of an older post about how Graphite + StatsD can be a powerful tool to measure everything. https://codeascraft.com/2011/02/15/measure-anything-measure-...
1581 AD 10 Mar 18:01 11 Jun 19:34 13 Sep 06:54 11 Dec 20:06 00:02 1582 AD 10 Mar 23:56 12 Jun 01:30 13 Sep 12:39 22 Dec 01:54 00:02 1583 AD 21 Mar 05:51 22 Jun 07:16 23 Sep 18:24 22 Dec 07:42 00:02 Looks the single most…
"Receivers of a GTFO frame MUST NOT open additional streams on the connection, although a new connection can be established for new streams." Shouldn't that be "a new connection can be established for existing streams"?…
If 90% of people stop ads from reaching them, then online advertising becomes almost useless. Its probably a bad thing because the companies spending billions (http://en.wikipedia.org/wiki/Online_advertising) to…
I've probably been living under a rock, so Bundler dying in two years comes as a real surprise. Does anyone have a link or two with more info?
Very interesting defense. It seems that it works because the attacking AJAX call is done with content dataType 'script'. I don't think it'll be too hard for the attacker to fix that.
Since you are already on Heroku, NewRelic in combination might be a good idea. Their free tier can monitor DB loads, uptime, exceptions, response times, slow methods and what not.
Reminds me of an older post about how Graphite + StatsD can be a powerful tool to measure everything. https://codeascraft.com/2011/02/15/measure-anything-measure-...
1581 AD 10 Mar 18:01 11 Jun 19:34 13 Sep 06:54 11 Dec 20:06 00:02 1582 AD 10 Mar 23:56 12 Jun 01:30 13 Sep 12:39 22 Dec 01:54 00:02 1583 AD 21 Mar 05:51 22 Jun 07:16 23 Sep 18:24 22 Dec 07:42 00:02 Looks the single most…
"Receivers of a GTFO frame MUST NOT open additional streams on the connection, although a new connection can be established for new streams." Shouldn't that be "a new connection can be established for existing streams"?…
If 90% of people stop ads from reaching them, then online advertising becomes almost useless. Its probably a bad thing because the companies spending billions (http://en.wikipedia.org/wiki/Online_advertising) to…
I've probably been living under a rock, so Bundler dying in two years comes as a real surprise. Does anyone have a link or two with more info?