In Li Mu's eyes, a mature website is not about how awesome the front-end functions are, but how powerful the back-end defense is.
Websites in the mature stage of the Internet are almost everywhere fortified, and technical staff have racked their brains to consider most of the vulnerabilities that may be exploited. However, even so, no website dares to say that its defenses are watertight.
Some websites are as solid as iron barrels in terms of defense measures, but often just a small loophole can make all defense measures fall short.
Li Mu is not a hacker and is not very proficient in technical methods of attacking a website. What he is looking for is an opportunity to use the crowd tactics to explode the bar again. However, Q Bar does not hesitate to sacrifice user experience for technical defense, which makes Li Mu feel a little bit He had no idea where to start until he noticed Q Bar’s in-site messaging function.
The on-site message function was actually first used by Makino Technology’s Tieba. It is equivalent to a simple instant messaging function developed based on Tieba, allowing Tieba friends to communicate simply in private. This function is very simple, but it is also very practical, because Users' information interaction in Tieba is public and one-to-many. When they choose to post in a Tieba, it is equivalent to opening the content of the post to the users of this Tieba, or even all Internet users. If they meet like-minded people, Friends, if they want to communicate privately with a certain bar friend, they need a public-to-private process. In-site messaging solves this problem extremely well.
When Q Bar was doing the technical architecture, they also planned the on-site messaging function. They placed restrictions on user postings, but they did not impose any restrictions on the on-site messaging function.
Li Mu opened the on-site message function and found that the pop-up page only had two fields: recipient and content. Other than that, there was only one sending option and nothing else.
In other words, whether it is a verification code or you can only post once in an hour, they are all for the front-end public posts and replies. However, there is no restriction on users' private message exchanges at the user back-end level.
Li Mu knew in his heart that although there was a big difference in form between sending a message on the site and posting a message, there was basically no difference in terms of the system backend and the server hosting.
Posting and sending in-site messages both test the server's ability to handle data write requests, but in-site messages even have one more logic than posting, and that is delivery logic.
A piece of data is sent from user A, uploaded and written to the server. While the server records and writes, it also delivers the content to the user backend of user B. When user B receives the in-site message data, it will first trigger a prompt function in the user backend. , and then send the receipt that user B has received the in-site letter to the server for record.
In short, this thing seems simple, but the uploading and distributing of data is not as cumbersome as usual.
Li Mu registered a new Q Bar account, and then used his old account to send an in-site message to the new account. If he copied the ID name of the new account, he pasted the new user's ID in the recipient column when sending, and then In the content column, quickly paste a few times as spam, then quickly click send, and then quickly proceed to the next round.
Li Mu calculated the time himself and found that he could send an intra-site message within three to five seconds. If the speed was faster, he could control the time within three seconds.
One message in three seconds, twenty messages in one minute. If hundreds of thousands of people are doing this at the same time, I don’t know how long the Q Bar server can last.
The more Li Mu thought about it, the more he felt that there was much to be done. He immediately contacted Zhao Kang and told him the specific operation methods, so that he could start preparing for the second bar busting show tonight.
Zhao Kang received the instruction and mobilized the trolls he could mobilize now, and asked them to post on Tieba and Qba. The core content of the post was to protest against the official explanation given by Qba, which was completely shirking responsibility, and to demand Qba I apologize to all my friends for what I have done.
While posting, these trolls also listed various carefully compiled evidences. For example: when Q Bar employees copy content, it is impossible for one user to copy a piece of content and then another user to copy it. Another article, so they all copy a large amount of content with one user account, then change another account, and then copy a lot more.
This kind of operation left a lot of evidence and clues, especially Zhao Kang's men who had kept all kinds of picture evidence very completely. The sifted out evidence can clearly see how they suddenly mobilized dozens or hundreds of people. User IDs, and the pattern of massively copying content during the same time period. Anyone with a discerning eye will know that this cannot be the so-called spontaneous behavior of users. At first glance, it is an organized and planned infringement.
This set of things is absolutely reasonable and convincing to the forum friends.
Troopers posted the post on Tieba and Q Bar. After posting on Tieba, other trolls immediately helped to upvote the post, which immediately attracted the attention of Tieba users who are currently online. The first thing after posting on Q Bar was Just take screenshots to preserve evidence, because Li Mu expected that Q Bar would definitely delete the post, so he prepared in advance to leave evidence of Q Bar deleting the post.
Sure enough, the Q Bar managers on duty in the middle of the night discovered the protest posts posted by Tie Bar users. Since the content was really unfavorable to them, they made the decision without hesitation: delete them without mercy, delete as many as they come and treat the users who posted them Do account closure processing.
Now Zhao Kang's trolls have easily retained a complete chain of evidence showing that they posted posts in Q Bars, but were deleted or even banned by Q Bars. If supplemented by artificial exaggeration, this series of practices in Q Bars will definitely happen again. Arouse the anger of bar friends.
This loophole in the site letter has not yet been leaked to the outside world by the navy. Li Mu wants to launch another fast and accurate blitzkrieg for Q Bar, which thinks it is impregnable. Even if all the people online are mobilized, it will not be enough to support his plan.
This evening, Tieba and Q Bar presented two completely different situations. Each Tieba had posts requesting Q Bar to formally apologize, and the level of attention was very high. The attitude of the bar friends was also unanimously supportive, but on the other hand, Q Bar , one night, under the instigation of trolls, tens of thousands of users went to Q Bar and posted many posts demanding an apology from Q Bar, but almost without exception, they were all deleted by Q Bar, making these users very angry. .
Li Mu was so busy that after two o'clock he couldn't bear it any longer, so he went back to his house to sleep. He even set an alarm clock for himself at eight thirty.
…
In the early morning of the next day, almost all the new local newspapers reported on the unprecedented event that happened on the Internet. Zhao Kang's public relations for traditional media began to work. Except for the local newspapers in Yanjing, according to Post bar friends reported that today at least thirty newspapers across China reported on this incident, and more than half of them were the result of Zhao Kang's public relations. The rest almost all reported it spontaneously as a hot news, and it caused a stir. Li Mu is gratified that these less influential local media are similar to what he expected, pointing the source of the conflict to Q Bar's infringement.
The morning news of many TV stations also carried relevant reports, including Yanjing TV. Overnight, comments criticizing Q Bar spread from TV to the Internet to newspapers, instantly pushing Q Bar and Teng Xun to the forefront.
Mr. Ma, who had arrived in Yanjing to participate in the Internet forum, was furious when he learned about this incident. He made more than a dozen calls to Shenzhen City. On the one hand, he severely criticized the person in charge of the time, and on the other hand, he asked the person in charge of the headquarters to A vice president did everything possible to restore the reputation of Q Bar and the company in front of the media.
It’s just that the voices of condemnation are overwhelming now, and it is difficult for all the media that have spoken out to carry out counter-public relations. The media cannot easily slap themselves in the face, so there is very little space left for them.
Even though there were so many media outlets denouncing Q Bar's practices, Q Bar still did not change its tone. They issued another statement at 9:30 in the morning, claiming that the infringement did indeed exist, but it was entirely the individual behavior of the user. Q Bar had already taken action against the infringement. The accounts involved have been investigated and we reserve the right to pursue legal responsibilities. At the same time, Q Bar also calls on users to keep their eyes peeled and not to be taken advantage of by some unscrupulous elements on the Internet.
When Li Mu heard about this new announcement, he wore a dark blue suit and drove to the entrance of the conference center of a five-star hotel in Dongcheng, where this Internet conference was held.
The conference started at ten o'clock. When Li Mu arrived, a considerable number of invited Internet practitioners had already signed in and entered the venue. Before Li Mu entered the venue, he communicated with Zhao Kang and asked him to focus on mobilizing users in the post bar during the day. , you can first call on everyone to conduct the second explosion of the bar at eight o'clock tonight, but do not reveal the specific method of the explosion. Just do the preliminary mobilization work first and attract users to the "Tieba Family" bar, and then in Before the time is up, inform users of the method of breaking the news on the site.
Once Zhao Kang's navy begins to spread the news about the explosion of Q Bar tonight, Q Bar will definitely be prepared, but they will definitely consolidate the defense like the 300 Spartan warriors, but they ignore that there is a small intestine path that can be used from the back. Attack yourself.
When Li Mu signed in with the invitation letter, Luo Zhongwen, the head of Q Bar Business Department, had already received the news that Tieba was planning to explode at 8pm. He immediately made a strict and detailed division of labor for his subordinates: responsible for the technical meeting of the server. Monitor the changes in the number of online users at all times and be prepared to deal with traffic peaks in a timely manner; while the backend technicians must be ready to implement more stringent restrictions at any time. He is worried that Baoba users will register multiple accounts to log in to exceed the one-hour limit. There is a barrier to posting once, so we have formulated an IP restriction strategy. Once we find that a user switches accounts to log in, we will immediately restrict the other party's IP address, and increase the restriction of posting once an hour from the account level to the IP address level.
For him, this battle must be fought against the barrage attacks from Tieba friends. If the website is closed again because the server cannot bear the load, it will be really shameless!
(End of chapter)