Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why are anime catgirls blocking my access to the Linux kernel?

lock.cmpxchg8b.com

Post reply on HN
Print view View original

481–490 of 968 posts

Re: Why are anime catgirls blocking my access to the Linux kernel?

#481

Post by 47282847 »

TheDong wrote: post #421
marcus_holmes wrote: post #321

Earlier quoted context omitted.

How does this work, though? We can't just have "send me a picture of your ID" because that is pointlessly easy to spoof - just copy someone else's ID. So there must be some verification that you, the person at the keyboard, is the same person as that ID identifies. The UK is rapidly finding out that that is extremely difficult to do reliably. Video doesn't really work reliably on all cases, and still images are too e…

We almost all have IC Chip readers in our pocket (our cell phones), so if the government issues a card that has a private key embedded in it, akin to existing GnuPG SmartCards, you can use your phone to sign an attestation of your personhood. In fact, Japan already has this in the form of "My Number Card". You go to a webpage, the webpage says "scan this QR code, touch your phone to your ID card, and type in your pin…

Germany has this. The card plus PIN technically proves you are in current possession of both, not that you are the person (no biometrics or the like). You can chose to share/request not only certain data fields but also eg if you are below or above a certain age or height without disclosing the actual number.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#482

Post by littlecranky67 »

johnisgood wrote: post #188

I like hashcash. https://github.com/factor/factor/blob/master/extra/hashcash/... https://bitcoinwiki.org/wiki/hashcash

We need bitcoin-based lightning nano-payments for such things. Like visiting the website will cost $0.0001 cent, the lightning invoice is embedded in the header and paid for after single-click confirmation or if threshold is under a pre-configured value. Only way to deal with AI crawlers and future AI scams.

With the current approach we just waste the energy, if you use bitcoin already mined (=energy previously wasted) it becomes sustainable.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#483

Post by hdndiebf »

rootsudo wrote: post #59

When I instantly read it, I knew it was anubis. I hope the anime catgirls never disapear from that project :)

This anime thing is the one thing about computer culture that I just don't seem to get. I did not get it as child, when suddenly half of children cartoons became animes and I just disliked the aestheic. I didn't get it in school, when people started reading mangas . I'll probably never get it. Therefore I sincerely hope, they do go away from anubis, so I can further dwell in my ignorance.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#484

Post by lock1 »

miohtama wrote: post #474

The solution is to make premium subscription service for those who do not want to solve CAPTCHAs. Money is the best proof of humanity.

Isn't that line of reasoning implies companies with multi-billion dollars in their war chest are much more "human" than a literal human with student loans?

Re: Why are anime catgirls blocking my access to the Linux kernel?

#485

Post by heavyset_go »

debugnik wrote: post #450
heavyset_go wrote: post #381

Earlier quoted context omitted.

There isn't a technical solution to this: governments and providers not only want proof of identity matching IDs, they want proof of life, too. This will always end with live video of the person requesting to log in to provide proof of life at the very least, and if they're lazy/want more data, they'll tie in their ID verification process to their video pipeline.

You already provided proof of a living legal identity when you got the ID, and it already expires to make you provide proof again every few years.

That's not not the kind of proof of life the government and companies want online. They want to make sure their video identification 1) is of a living person right now, and 2) that living person matches their government ID.

It's a solution to the "grandma died but we've been collecting her Social Security benefits anyway", or "my son stole my wallet with my ID & credit card", or (god forbid) "We incapacitated/killed this person to access their bank account using facial ID".

It's also a solution to the problem advertisers, investors and platforms face of 1) wanting huge piles of video training data for free and 2) determining that a user truly is a monetizable human being and not a freeloader bot using stolen/sold credentials.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#486

Post by phito »

marcus_holmes wrote: post #321
overfeed wrote: post #298

Earlier quoted context omitted.

> The bots will eventually be indistinguishable from humans Not until they get issued government IDs they won't! Extrapolating from current trends, some form of online ID attestation (likely based on government-issued ID[1]) will become normal in the next decade, and naturally, this will be included in the anti-bot arsenal. It will be up to the site operator to trust identities signed by the Russian government. 1. De…

How does this work, though? We can't just have "send me a picture of your ID" because that is pointlessly easy to spoof - just copy someone else's ID. So there must be some verification that you, the person at the keyboard, is the same person as that ID identifies. The UK is rapidly finding out that that is extremely difficult to do reliably. Video doesn't really work reliably on all cases, and still images are too e…

In Europe we have itsme. You link the phone app to your ID, then you can use it to scan QR codes to log into websites.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#487

Post by prmoustache »

sugarpimpdorsey wrote: post #212
Lammy wrote: post #175

Earlier quoted context omitted.

[flagged]

> Anubis is a clone of Kiwiflare, not an original work, so you're actually sort of half-right: Interesting. That itself appears to be a clone of haproxy-protection. I know there has also been an nginx module that does the same for some time. Either way, proof-of-work is by this point not novel. Everyone seems to have overlooked the more substantive point of my comment which is that it appears kernel.org cheaped out a…

> Everyone seems to have overlooked the more substantive point of my comment which is that it appears kernel.org cheaped out and is using the free version of Anubis, instead of paying up to support the developer for his work. You know they have the money to do it. > > In 2024 the Linux Foundation reported $299.7M in expenses, with $22.7M of that going toward project infrastructure and $15.2M on "event services" (I guess making sure the cotton candy machines and sno-cone makers were working at conferences). > > My point is, cough up a few bucks for a license you chiselers.

Several points:

- there is no license to pay. This is free (as in open source and as in beer) software. There is commercial support if you feel you need it and sponsoring options however. Sponsoring is not paying a license.

- Sometimes it takes so long to get approval for a sponsor that large org member give up.

- Obviously kernel.org is using an old release of anubis so they likely observed a huge spike in bandwith used at some point and used anubis, solving the problem immediately. I don't remember anubis proposing a paid license at the time of the early releases. I may be wrong but it may be that kernel.org admins have never heard of the possibly of sponsoring nor are they interested in support.

- you don't have to pay anythinf to change/remove the image and the people who implemented this clearly do not care as they didn't do it.

- do we have evidence that the anubis developer ever donated directly or indirectly to Linus Torvalds and the thousands of developers who worked on the kernel?

Re: Why are anime catgirls blocking my access to the Linux kernel?

#488

Post by elric »

technion wrote: post #362
johnklos wrote: post #244

This is a usually technical crowd, so I can't help but wonder if many people genuinely don't get it, or if they are just feigning a lack of understanding to be dismissive of Anubis. Sure, the people who make the AI scraper bots are going to figure out how to actually do the work. The point is that they hadn't, and this worked for quite a while. As the botmakers circumvent, new methods of proof-of-notbot will be made…

It really should be recognised just how many people are watching Cloudflare interstitials on nearly every site these days (and I totally get why this happens) yet making a huge amount of noise about Anubis on a very small amount of sites.

I hit Cloudflare's garbage about as much as I hit Anubis. With the difference that far more sites use Cloudflare than Anubis, thus Anubis is far worse at triggering false positives.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#489

Post by numpad0 »

johnklos wrote: post #244

This is a usually technical crowd, so I can't help but wonder if many people genuinely don't get it, or if they are just feigning a lack of understanding to be dismissive of Anubis. Sure, the people who make the AI scraper bots are going to figure out how to actually do the work. The point is that they hadn't, and this worked for quite a while. As the botmakers circumvent, new methods of proof-of-notbot will be made…

Wasn't there also weird behaviors reported by webadmins across the world, like crawlers used by LLM companies are fetching evergreen data ad nauseum or something along that? I thought the point of adding PoW than just blocking them was to convince them to at least do it right.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#490

Post by Symbiote »

Pinus wrote: post #463
mlyle wrote: post #379

Earlier quoted context omitted.

I don't trip over CloudFlare except when in a weird VPN, and then it always gets out of my way after the challenge. Anubis screws with me a lot, and often doesn't work.

I’m planning a trip to France right now, and it seems like half the websites in that country (for example, ratp.fr for Paris public transport info) require me to check a CloudFlare checkbox to promise that I am a human. And of those that don’t, quite a few just plain lock me out...

I find the same when using some foreign sites. I think the operator must have configured that France is OK, maybe neighboring countries too, the rest of the world must be checked.
Post reply on HN