There is a saying in engineering.

Anyone can build a bridge.

It takes an engineer who can build a bridge just strong enough to let cars cross it.

I think I used to do something similar with email spam traps. Not sure if it’s still around but basically you could help build NaCL lists by posting an email address on your website somewhere that was visible in the source code but not visible to normal users, like in a div that was way on the left side of the screen.

Anyway, spammers that do regular expression searches for email addresses would email it and get their IPs added to naughty lists.

I’d love to see something similar with robots.

It’s definitely worth learning. I had the damnedest time with docker until I went to a meetup and had someone ELI5 to me. And it wasn’t that I wasn’t technical. I just couldn’t wrap my head around so many layers of extraction.

The guy was very patient with me and helped me get started with docker compose and the rest is history.

Yes but this wasn’t a data breach. This was a data stuffing incident, meaning they took someone else’s data dump and tried their email and credentials here.

• never use the same username and password in two or more places
• always use MFA, a hard token if you can like a yubikey

Yahoo news is notorious for this. It’s like an ad after every paragraph and every paragraph is just one sentence.