Live data from Hacker News

Cloudproxy – hide your scrapers IP behind the cloud

github.com

11–20 of 116 posts

Re: Cloudproxy – hide your scrapers IP behind the cloud

#11
post #5

i tend to use tor network as a proxy which enables me to request a new ip whenever i need

quite slow and often blacklisted (by Cloudflare for example)

with parallelization you can come up to speed - on big machine with several cores may be still cheaper than many cloud instances

of course no option if your 'target' blocks tor ips

Re: Cloudproxy – hide your scrapers IP behind the cloud

#13

This is relatively easy to block, given that these companies publish their IP ranges. Similar to the Tor block, blocking "datacenter IP's" simply becomes the norm. This is why you have companies offering "resi's" or residential proxies to bypass such blocks for some years now.

I heard a while back, on HN 8 I think, that a lot of residential proxies are computers that have been infected with malware. How true is that?

Re: Cloudproxy – hide your scrapers IP behind the cloud

#16

This is relatively easy to block, given that these companies publish their IP ranges. Similar to the Tor block, blocking "datacenter IP's" simply becomes the norm. This is why you have companies offering "resi's" or residential proxies to bypass such blocks for some years now.

I heard a while back, on HN 8 I think, that a lot of residential proxies are computers that have been infected with malware. How true is that?

There have been a number of Chrome extensions which monetize by selling your bandwidth to provide this kind of service. Not ethical but probably not a compromise.

Re: Cloudproxy – hide your scrapers IP behind the cloud

#17

This is relatively easy to block, given that these companies publish their IP ranges. Similar to the Tor block, blocking "datacenter IP's" simply becomes the norm. This is why you have companies offering "resi's" or residential proxies to bypass such blocks for some years now.

Are there even ethical or “official” ways to source residential IPs? I thought most of them were from botnet infected IoT devices.

Re: Cloudproxy – hide your scrapers IP behind the cloud

#18

Is it ethical to scrape things, trying to bypass prevention methods, against the expressed wishes of a site?

As someone who has to deal with a lot of bots, bot networks and other weird scraper apps people use: The biggest issue is that most of these tools are not behaved very well. This tool is clearly designed to circumvent protections, rate limits mostly, against scraping that might be essential to keep things running.

They follow links that are explicitly marked as do not follow, they do not even try to limit their rate, they spoof their user agent strings etc etc. These bots cause real problems and cost real money. I do not think that kind of misuse is ethical. In fact, using this tool to circumvent protections can turn your scraping into a DDOS attack, which I do not feel are ethical.

If your bot behaves itself though, public information is public imo. Just don't take down websites, respect rate limits and do not follow 'no-follow' links.

To give an idea of the size of the issue, we have websites for customers that have maybe 5 hits per minute from actual users. Then _suddenly_ you go to 500 hits/minute for a couple of hours, because some bot is trying to scrape a calendar and is now looking for events in 1850 or whatever. (Not the greatest software that these links are still there tbh, but that is out of my control.)

Or another situation, not entirely related, but interesting i think: A few years back for days on end 80% of our total traffic came from random IPs across china & request could be traced through HTTP referrers where the 'user' had apparently opened a page in one province, then traveled to the other side of China and clicked a link 2 hours later.

All these things are relatively easy to mitigate, but that doesn't make it ethical.

Re: Cloudproxy – hide your scrapers IP behind the cloud

#20
post #17

This is relatively easy to block, given that these companies publish their IP ranges. Similar to the Tor block, blocking "datacenter IP's" simply becomes the norm. This is why you have companies offering "resi's" or residential proxies to bypass such blocks for some years now.

Are there even ethical or “official” ways to source residential IPs? I thought most of them were from botnet infected IoT devices.

I've heard of services that offer free proxy bandwidth in exchange for the user acting as a residential proxy node for other users and/or paying clients. It's generally marketed as a way for the user to avoid geoblocks and such. If this is clearly stated to the user upfront rather than buried behind half a dozen dark patterns and fine print, it seems like this business model could be conducted ethically. When it comes to whether the companies in this space are currently acting ethically though, I have serious doubts.
Post reply on HN