On Mon, Feb 19, 2024 at 06:01:54PM +0800, George Dunlap wrote:
>
> Looking at the *non*-4.18 downloads, nearly all of them have user
> agents that make it clear they're part of automated build systems:
> user agents like curl and wget, but also "Go-http-client", "libfetch",
^^^^ ^^^^
I reject this claim. `curl` or `wget` could be part of an interactive
operation. Telling a browser to copy a URL into the paste buffer, then
using `wget`/`curl` is entirely possible. I may be the outlier, but I
routinely do this.
I don't know whether Gentoo's `emerge` uses `wget`/`curl`, but that could
be semi-interactive.
> It's not really clear to me why we'd be getting 300-ish people
> downloading the Xen 4.18.0 tarball, 2/3 of which are on Windows. But
> then I'm also not sure why someone would *fake* hundreds of downloads
> a week from unique IP addresses; and in particular, if you were going
> to fake hundreds of downloads a week, I'm not sure why you'd only fake
> the most recent release.
Remember the browser wars? At one point many sites were looking for
IE/Windows and sending back error messages without those. Getting the
tarball on Windows doesn't seem too likely, faking the browser was
pretty common for a while.
--
(\___(\___(\______ --=> 8-) EHM <=-- ______/)___/)___/)
\BS ( | ehem+sig...@m5p.com PGP 87145445 | ) /
\_CS\ | _____ -O #include <stddisclaimer.h> O- _____ | / _/
8A19\___\_|_/58D2 7E3D DDF4 7BA6 <-PGP-> 41D1 B375 37D0 8714\_|_/___/5445
