Live data from Hacker News

Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

github.com

201–210 of 288 posts

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#201

The more ways people mess with scrapers, the better -- let a thousand flowers bloom! You as an individual can't compete with VC-funded looters, but there aren't enough of them to defeat a thousand people resisting in different ways.

I remember what happened after Mao's "Let a Thousand Flowers Bloom".

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#202

This is a cute idea, but I wonder what is the sustainable solution to this emerging fundamental problem: As content publishers, we want our content to be accessible to everyone, and we're even willing to pay for server costs relative to our intended audience -- but a new outsized flood of scrapers was not part of the cost calculation, and that is messing up the plan. It seems all options have major trade-offs. We can…

If the LLMs are the "new Google" one solution would be for them to pay you when scraping your content, so you both have an incentive, you're more willing to be scraped and they'll try to not abuse you because it will cost them at every visit. If your content is valuable and requested on prompts they will scrape you more and so on. I can't see other solutions honestly. For now they decided to go full evil and abuse ev…

No disrespect to op, but I'm baffled as to how people keep coming up with ideas like this as if they are viable.

Google is never ever ever ever going to "pay to scrape." I'm genuinely baffled as to how people think it would possibly come to this.

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#203

I own a forum which currently has 23k online users, all of them bots. The last new post in that forum is from _2019_. Its topic is also very niche. Why are so many bots there? This site should have basically been scraped a million times by now, yet those bots seem to fetch the stuff live, on the fly? I don’t get it.

Sure you do by now. You are the hard drive.

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#204
post #139

Earlier quoted context omitted.

Yeah, I really have to wonder what the thought process is behind leaving such a comment. When people first started doing it I wondered if it was some kind of guerrilla outrage marketing campaign.

Maybe he wanted to verify whether what I was saying was true and asked ChatGPT, then tried to be helpful by pasting the response here?

Maybe I'm getting too jaded but I'm struggling to be quite that charitable.

The entireity of the human-written text in that comment was "From ChatGPT:" and it was formatted as though it was a slam-dunk "you're wrong, the computer says so" (imagine it was "From Wikipedia" followed by a quote disagreeing with you instead).

I'm sure some people do what you describe but then I would expect at least a little bit more explanation as to why they felt the need to paste a paragraph of LLM output into their comment. (While I would still disagree that it is in any way valuable, I would at least understand a bit about what they are trying to communicate.)

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#205

Earlier quoted context omitted.

As someone on the browsing end, I love Anubis. I've only seen it a couple of times, but it sparks joy. It's rather refreshing compared to Cloudfare, which will usually make me immediately close the page and not bother with whatever content was behind it.

Anyone is free to replace the cat girl with an actual cat or a vintage computer logo or whatnot anyway. My issue is that it blocks away people using browsers without javascript.

How can one do this? Did not find it in the docs

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#206
post #92

Disclosure, I've not run a website since my health issues began, however, Cloudflare has an AI firewall, Cloudflare is super cheap (also: unsure if the AI firewall is on the free tier, however I would be surprised if it is not). Ignoring the recent drama about a couple incidents they've had (because this would not matter for a personal blog), why not use this instead? Just curious. Hoping to be able to work on a webs…

Cloudflare has created a bit of grief with regular users getting spammed with "prove your human" requests.

Can confirm. I have been blocked plenty of times and it's really annoying.

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#208

> checks user agents and won't show the links to legitimate search engines, so Google and Bing won't see them. Serving different contents to search engines is called "cloaking" and can get you banned from their indexes.

didn't know that thanks for pointing it out, i'll remove that feature

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#209

Earlier quoted context omitted.

rate limit per ip that progressively keeps decreasing req/mins every few mins?

What if scrapers ips are millions of smartphones? If I was as evil as an AI scraper company that is not obeying robots.txt I would totally build/buy thousands of small games/apps for mobiles to use them as jumphosts to scape the web. This is probably happening already.

in my case my application does not use pagination, it uses infinite scroll, even if you had a million devices that use google chrome, they would all load page 1 and if that req/minute progressively decreaasing thing is implemented, once they start scrolling endlessly they would all hit the rate limits sooner or later, the thing is a human is not going to scroll down a 100 pages but a bot will. once this difference has been factored it, it wont matter how many unique devices they bring into the battle

Re: Show HN: Stop AI scrapers from hammering your self-hosted blog (using porn)

#210
post #189

Earlier quoted context omitted.

rate limit per ip that progressively keeps decreasing req/mins every few mins?

so why not just do that for these scrapers, rather than complicate it by encrypting and decrypting, which is just obfuscation as the private key is clearly available to the end-user?

tbh i did not encrypt decrypt for the ai scrapers at all, a lot of people were previously trying to download data directly from my API that my frontend uses and this kinda pissed me off a bit. So I added encryption/decryption to the mix and will release the newer version. As I mentioned earlier as well, can someone sit through and decrypt it? yes. Will 99% of them do it? no! Thats where I win
Post reply on HN