SShortSingh.
TopTechnologyAI & MLStartupsProgrammingScienceBusinessFinanceCrypto & Web3World
Back to feed
Programming

Python Asyncio Tarpit Traps 50,000 Malicious Connections Using Under 50MB RAM

0
·1 views

A systems architect developed an asynchronous TCP tarpit in Python designed to exhaust attackers' resources rather than simply blocking them. The tool uses Python's asyncio library to accept malicious connections and respond with deliberate, phased delays — sending little to no data over extended periods — without consuming significant server resources. In benchmark tests simulating 50,000 concurrent malicious connections, the tarpit handled all of them in under 30 seconds while using approximately 45MB of RAM. The approach aims to paralyze automated scanning tools by keeping their sockets open and waiting indefinitely, raising the cost of an attack. The developer describes this tarpit as one component of a broader enterprise cybersecurity platform, codenamed TITAN, that is currently in development.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

Log in to join the discussion and vote.

Log in

Related stories

0
ProgrammingDEV Community ·

Google Gemini Can Summarize Otter AI Meeting Calls, But Key Details Remain Unclear

Google has showcased a workflow in which Gemini uses Otter AI to summarize meeting transcripts through natural-language prompts. The demonstration features a wedding-planning scenario where Gemini consolidates client vision and vendor discussion calls into a single, decision-ready summary. While the workflow reduces the manual effort of reviewing multiple call transcripts, Google has not disclosed the underlying technical integration or data access mechanisms. Critical details such as supported account types, user permissions, eligible pricing plans, and regional availability have not been specified. Organizations handling sensitive meeting content are advised to assess data governance and authorization requirements before deploying the workflow in production environments.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Self-Taught Developer Builds Indian Street Food Website Entirely on Android Phone

A self-taught developer from Maharashtra has submitted a frontend project called 'Chai & Chill' to DEV Community's Frontend Challenge. The landing page showcases Indian street food items including Cutting Chai, Vada Pav, Samosa, and Poha, and features a working cart with item counter and toast notifications. The site was built using React, TypeScript, Tailwind CSS, and Lovable, an AI-assisted development platform. Notably, the entire project was developed on an Android phone without access to a laptop. The mobile-responsive site features a warm orange and brown color theme inspired by Mumbai street food culture.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

No Evidence Confirms Google Gemini Integration With Brazil's Localiza Car Rentals

A prompt circulating online claims users can ask Google Gemini to find Localiza car rentals in Rio de Janeiro, Brazil, suggesting a travel-commerce use case for the AI assistant. However, no official documentation from Google, Gemini, or Localiza confirms any partnership, booking workflow, or Brazil-specific rental search capability. Google's public Gemini materials focus on general in-car assistant features, while Localiza's public information describes its rental network without any mention of a Gemini connection. Experts note that a natural-language prompt is far simpler than the actual car-rental process, which involves inventory, pricing, payment, and booking confirmation. Until a formal integration is announced and documented, travelers should not assume that such a prompt can complete or guarantee a reservation with Localiza.

0 comments Read more at DEV Community
0
ProgrammingDEV Community ·

Developer releases open-source tool to strip AI watermarks within a day of Anthropic announcement

Anthropic recently confirmed that text generated by its new Claude models will carry invisible watermarks to identify AI-produced content. Within a single day of that announcement, developer Guillaume Meyer published an open-source project called 'watermarks-remover' on GitHub. The tool is designed to strip invisible signals embedded by large language models, including Claude, Gemini, and OpenAI systems. It targets invisible Unicode characters, C2PA metadata, and other watermarking techniques used across multiple AI platforms. The rapid release highlights the challenges AI companies face in enforcing content identification measures.

0 comments Read more at DEV Community
Python Asyncio Tarpit Traps 50,000 Malicious Connections Using Under 50MB RAM · ShortSingh