MacOSX: clear URL to download GPSBabelFE

classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

MacOSX: clear URL to download GPSBabelFE

Marcin Gryszko
I'm trying to write a formula for GPSBabelFE installation via Homebrew Cask (MacOSX package manager, [1]). However, I'm struggling with automating the download. It's handled by a PHP handler. The web page sends a multipart encoded form. This is tricky to automate with curl.

Can GPSBabel devs provide me (and Homebrew community) with a URL where I could grab the latest version?

Cheers,

Marcin Gryszko


------------------------------------------------------------------------------

_______________________________________________
Gpsbabel-misc mailing list http://www.gpsbabel.org
[hidden email]
To unsubscribe, change list options, or see archives, visit:
https://lists.sourceforge.net/lists/listinfo/gpsbabel-misc
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: MacOSX: clear URL to download GPSBabelFE

Robert Lipe-4
Hi, Marcin.

You are correct that we use code on the server to prevent abuse.  At one point, over 90% of our traffic was DDOS-style "download" attempts and we were getting requests for hundreds of copies of GPSBabel from the same computers per second.

If you want to make your own distribution (though we provide Mac images...) you can host it on your own site or use Git to pull the source and do the build. That's automatable.

RJL

On Tue, Dec 22, 2015 at 2:24 AM, Marcin Gryszko <[hidden email]> wrote:
I'm trying to write a formula for GPSBabelFE installation via Homebrew Cask (MacOSX package manager, [1]). However, I'm struggling with automating the download. It's handled by a PHP handler. The web page sends a multipart encoded form. This is tricky to automate with curl.

Can GPSBabel devs provide me (and Homebrew community) with a URL where I could grab the latest version?

Cheers,

Marcin Gryszko


------------------------------------------------------------------------------

_______________________________________________
Gpsbabel-misc mailing list http://www.gpsbabel.org
[hidden email]
To unsubscribe, change list options, or see archives, visit:
https://lists.sourceforge.net/lists/listinfo/gpsbabel-misc



------------------------------------------------------------------------------

_______________________________________________
Gpsbabel-misc mailing list http://www.gpsbabel.org
[hidden email]
To unsubscribe, change list options, or see archives, visit:
https://lists.sourceforge.net/lists/listinfo/gpsbabel-misc
Reply | Threaded
Open this post in threaded view
|  
Report Content as Inappropriate

Re: MacOSX: clear URL to download GPSBabelFE

Robert Lipe-4
I just looked in our server logs to see if the internet had become a more respectable place. I don't know what I expected...

Of the last four days (that includes Christmas Eve and Day) 98.29% of the requests to our download page are clear DDOS/hack attempts.  One IP address alone from Venezuela requested 81,974 copies in a six hour period on Christmas Day.  It's not like that's a torrent exit node or a continental proxy or a major stampede of users from one organization.  We've never seen a single request from this address before. It opens the page (never downloading the css or logo or favicons or such and we hand it a couple copies of the payload successfully.  We start noticing that they're queueing up 3-5 requests a second and throttle them.  It retries, failing in exactly the same way, and recovering in the way I designed, for tens of thousands of cycles and then suddenly stops.  On any given day, it's a few different hosts, but the pattern from the access logs is crystal clear.

We've seen this every day for many years.  In 2008, it used to bring our site down a few times a week before I implemented the current scheme.  I see hack attempts for Joomla and WordPress and IIS and PHPBB and lots of other things GPSBabel does not use and has never used, but some script kiddie has "for i in $theWholeInternet; try l33t hax0r script" running.


It really is one of the more demoralizing aspects of trying to keep GPSBabel available.  It's not like we're PayPal or Bank of America or some high-value hack target and it's still this hard to keep a site up and running from the endless barrage of script attacks.  

It also makes me sad that Google has 9200 results for "keygen serial GPSBabel". (In case I have to say it, please do NOT download anything you find on those searches...)  OK, not every one of those is actually a 'hit', but it's pathetic that people are so willing to install bootleg versions of FREE software that this is even actually a thing.

I totally get you're not part of this problem, Marcin.  I'm just explaining why you're being victimized by it.  

"This is why we can't have nice things."


On Tue, Dec 22, 2015 at 6:24 PM, Robert Lipe <[hidden email]> wrote:
Hi, Marcin.

You are correct that we use code on the server to prevent abuse.  At one point, over 90% of our traffic was DDOS-style "download" attempts and we were getting requests for hundreds of copies of GPSBabel from the same computers per second.

If you want to make your own distribution (though we provide Mac images...) you can host it on your own site or use Git to pull the source and do the build. That's automatable.

RJL

On Tue, Dec 22, 2015 at 2:24 AM, Marcin Gryszko <[hidden email]> wrote:
I'm trying to write a formula for GPSBabelFE installation via Homebrew Cask (MacOSX package manager, [1]). However, I'm struggling with automating the download. It's handled by a PHP handler. The web page sends a multipart encoded form. This is tricky to automate with curl.

Can GPSBabel devs provide me (and Homebrew community) with a URL where I could grab the latest version?

Cheers,

Marcin Gryszko


------------------------------------------------------------------------------

_______________________________________________
Gpsbabel-misc mailing list http://www.gpsbabel.org
[hidden email]
To unsubscribe, change list options, or see archives, visit:
https://lists.sourceforge.net/lists/listinfo/gpsbabel-misc




------------------------------------------------------------------------------

_______________________________________________
Gpsbabel-misc mailing list http://www.gpsbabel.org
[hidden email]
To unsubscribe, change list options, or see archives, visit:
https://lists.sourceforge.net/lists/listinfo/gpsbabel-misc
Loading...