full-disclosure - [SECURITY] NiX Anti-proxy/fraud API

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 13 Jan 2011 20:40:01 +0200
From: nix@...roxylists.com
To: full-disclosure@...ts.grok.org.uk
Subject: [SECURITY] NiX Anti-proxy/fraud API

The service is free of charge if you place a backlink.

The idea of this API is similar to spamcop´s but it´s against open proxies
that are also being used to send mass spam emails in case those proxies
allow SMTP port 25.

Sort version of it´s advantages:

Around 75% of all open proxies (anonymous or transparent) will get
defeated by the NiX API that are being used to abuse your sites/services.

For example my internal investigation proved that nearly all of the open
proxies are being used to abuse CPM or other ADS releated services to make
the clicks through the proxies and so on ...the list is very long ;)

Question:

How the proxies are being tested and based on what decision it will be
blocked?

Answer:

Proxies are being crawled and tested fully automatically using private
tools such NiX Proxy Checker PRO 1.5.3 for Linux and NiX Forum Proxy
Leecher 1.0.1 for Linux (it can crawl 100 000+ listed proxies from the
forums and other sitse in less than five minutes) and the crawled list is
constantly being updated.

Just a small example: |NiX| Checked 42724 proxies in 2 hours 46 minutes 25
seconds. Threads used: 100 Working proxies: 1427.

That speed is from P4 3GHz machine using only one instance of NiX.

Proxies are tested against real web site to determine they're fully
working and are open. This check covers all common proxy types, http, ssl,
socks 4 and 5

Learn more: https://myproxylists.com/anti-proxy-anti-fraud-anti-spam-api

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/