News Feed
  • DrugHub has agreed to fully refund all users who lost money in the SuperMarket exit scam.  
  • Retro Market has gone offline. Circumstances of the closure unknown.  
  • SuperMarket has closed following an exit scam by one of the admins.  
  • The admin of Incognito Market, Pharoah, has been arrested by the FBI several months after exit scamming.  
  • Silk RoadTorhoo mini logo
  • darknet markets list
  • Popular P2P exchange LocalMonero has announced it is closing.  

Optional feature proposal: make EndGame transparent by default, enable queue + captcha under specific conditions. : EndGame | Torhoo darknet markets

Correct me if I'm wrong:

- EndGame 2 tools in 1, it is infinitely more than a captcha. The captcha and queue are only the visible part (from the user's point of view).

- You can use EndGame without load balancing, have only one front-end, and give the front-end URL directly to users.

- The queue and captcha are only useful in case of request spam (DoS attempt) to distribute the load on the fronts without it reaching the backend.

- The captcha does not make it impossible to use a bot if a cookie has been previously generated by hand.

- The absence of a captcha (and a queue) does not prevent a cookie from being blacklisted.

- Some sites are frequently (or constantly) DDoS, others are occasionally (or never).

For those other sites that don't have a DDOS problem, why not offer an option (which can be activated during setup via the config file, or any other way) to disable the queue and captcha and leave EVERYTHING else: rate limiter (per cookie and circuit), Fail2ban, Rkhunter, Chkrootkit and NAXSI.

There could be 3 modes configurable during setup:
- EndGame Full: Queue, Captcha + everything else (default)
- EndGame Adaptive: Queue and Captcha with automatic on/off under conditions (CPU load/requests spamming) + everything else
- EndGame Minimal: Queue and Captcha disabled (manual activation possible) + everything else.
/u/Paris A
1 points
1 year ago
It is easy enough to disable the captcha system and checks. You just comment a single line from the site.conf

access_by_lua_file lua/cap.lua;
to
#access_by_lua_file lua/cap.lua;


That will disable the captcha and queue but keep the rate limits, naxsi, proxy, and all other things. I don't recommend that, specifically if you are proxying requests, but it's simple enough to do.
/u/RevolutionGuys
1 points
1 year ago
@d5nsgdipvx great idea and thank /u/Paris now we know how to disabled captcha and queue - i think an Auto mod should exist no attack its work without captcha when an attack is detected is put the captcha and queue for the day
/u/RevolutionGuys
1 points
1 year ago
how we change the wait time before to see the captcha ?
/u/escrowfrance
1 points
5 months ago
Auto-mod based on CPU load ?