Does anybody know how I can create my own DNS name servers that inject JS code if you visit a specific webpage on the device that has their Custom Name Servers changed? I am new to this whole topic, so I would love some guidance :)
Help would be much much appreciated!!
I didn't try anything, as I am new to this topic.
Related
I'm currently working on a bachelors project using the MERN stack.
As of now I have a dbconfig file which stores the mongodb passcode.
My question is how should I go about this when delivering the project to the business? Should it be stated that they must create this file themselves and enter their passcode there?
Is it my responsibility to help them set this up, even though this could compromise security if lets say I had malicious intentions?
Or should I implement a system with for example a prompt letting them input this on runtime?
I'm not looking for exact answers, but any pointers from someone with experience delivering products or alike would be greatly appriciated.
I am working on a startup which basically serves website. Sorry, I can't reveal much details about the startup.
I need some ideas on how spammers and cralwer devs think on attacking some website. And if possible, then a way to prevent such attacks too.
We have come up with some basic ideas like:
1. Include a small JS file in the sites that would send an ACK on our servers ones all the assets are loaded. Like some crawlers/bots only come to websites and download specific stuff like images or articles. In such cases, our JS won't be triggered. And when we study our logs, which will have a record of resources requested by the particular IP and if out JS was triggered or not. We can then whitelist or blacklist IP's based on the study.
2. Like email services do, we will load a 1x1 px image on the client side via an API call. In simple words, we won't add the "img" tag directly in out HTML, but rather a JS that calls an API on our server that returns the image to the client.
3. We also have a method to detect Good bots like that of google which indexes our pages. So we can differentiate between good bots and bad bots that just waste our resources.
We are at a very basic level. Infact, all our code does right now is logs the IP's and assets requested by that IP in elasticsearch.
And so we need ideas on how people spam/crawl websites via cralwers/bots/etc. So we can come up with some solution. And if possible, please also mention the pros and cons and ways to defend against your ideas too.
Thanks in advance. If you share your ideas, you'll be helping a startup which will be doing a lot of good stuff.
I'm currently trying to get the ASN number and name/description from an IP via Node.js, but I can't find any library that works/supports it. All I can find is geo-location which do not help me. Is there any way to do this that I am not aware of?
Edit: I'd like to mention I cannot use any 3rd party APIs.
Cheers
I want to build an extension on Google Chrome which functions will be forwarding address illicit websites that email to parents, which prohibited it site address using DNS Nawala or something similar, with the extension prevents the expected negative impact of the use of the internet.
What are the steps that I did in building this extension ?
Thank you.
This is a very broad "how do I create my entire project" question, but I'll try to give you some broad advice:
An extension alone will not be enough for this. You're going to need a web service as well. You'll likely need to divide the project into two parts:
A Chrome extension that monitors the websites a person visits. You can do this by using the Tab API. Simply look at each site the user has visited and if they visit any of the illicit sites on a blacklist, take an action, probably by making an API call to the web service mentioned below.
You're almost certainly going to need to use a web service developed with a scripting language like PHP or Java, or something similar. This web service would take care of sending the emails to parents. If we're just talking about sending an email to one parent than this service could be quite simple. The extension would tell the web service to send an email when an illicit site is visited, and that's about it. If you're talking about a commercial project then this service would probably need to be a full fledged website that allows parents to sign up for these emails.
Again, this is a very broad question, and generally speaking Stackoverflow is more for asking specific programming questions. But hopefully this will get you moving in the right direction at least, so you can come back and ask more specific questions. :-)
Im hoping you geniuses here at stackoverflow can help me with this.
Recently i had to point my domain name to a network on Ning.com to map and merge the site with the domain, so i had to add an A and CNAME record. This disconnected the link between my domain and my web host and because of this my friends cant access their email anymore. Ning doesnt offer webmail either. And im not sure if i want to use Google Apps.
Is there a way i can retain the new domain pointer to the network on Ning.com and a pointer to my web host for the webmail? Or is there any other options i can take?
Thanks you so much :)
Is it an option for you to create a new A record to a subdomain like webmail.mydomain.com?
Not sure if this qualifies as a comment or answer, depends on your situation.
This is really more of a serverfault question also, if you want to try there.
Try Google Apps. You said you weren't sure if you wanted to use GA, but there's no better way to find out than to try it. It's easy to set up and if you don't like it, you can always disable it. I have personally had a good experience using GA for webmail on a custom domain.