Getting "double_spend" error while trying to access the blog. Anyone else?
It took a year to ship WebAssembly in Anubis
221–226 of 226 posts
Re: It took a year to ship WebAssembly in Anubis
#222Earlier quoted context omitted.
> GP is talking about what indications they get a page is running arbitrary code as they load it I mean, you get the same indicators as when the page runs arbitrary Javascript on load? WASM assembly may be (slightly) harder to read than typescript compiled to JS, but the source is all there, it calls the same APIs, etc.
They are not saying: js on any site -> okay, I enable permanently wasm on any site -> not okay, will never enable But rather: js disabled -> I often get a fallback warning message letting me know a site needs it to work wasm disabled -> I'd like a similar kind of message So they don't have to guess at the cause(s). I.e. they don't mind Anubis moved to WASM over JS in itself, they mind there is no fallback warning mes…
Right, but the base assumption here is unfounded. Disabling WASM isn't in any way equivalent to disabling Javascript - you are just kneecapping your own browser performance, rather than closing off a large attack surface.
Re: It took a year to ship WebAssembly in Anubis
#223Earlier quoted context omitted.
> requiring 1 second of compute before allowing a page load After 1 solve, you get a cookie and can load tons of pages with it. Scrapers and user agents alike will need to spend the compute only once to get a valid session for themselves Seems to be working so far though. Fwiw, lots of silly things stop bots until someone puts their mind (or tokens) to bypassing it, and then the blocking mechanism has to adapt. We'll…
The issue is that scrapers are rotating their IP and essentially performing a DDoS attack. Anubis is part of a defense-in-depth solution. If scrapers reuse a cookie, traditional anti-abuse mechanisms will work.
I don't know what you mean by traditional anti-abuse (typing over two words from an image?), but switching IP addresses rapidly, while staying recognisable as one entity because of the unique cookie, is not normal user behavior so this would be trivial to filter out for something like Anubis and require another solve. Maybe that's what you meant though?
Re: It took a year to ship WebAssembly in Anubis
#224Is there a place where I can try out if my browser is compatible? Easier to find out now than when I'm trying to get work done and a million websites now have it deployed On https://wasm-feature-detect.surma.technology it shows that I don't have 3 of all these features but I'm not sure if Anubis needs any of them to not kick me back to the pure JS solution Which would apparently be bad because > The WebAssembly that'…
If you don't disable browser features for fun and/or sport, Chrome as of version 120 or later (or another browser of that vintage) will use the optimized flow.
Bit sad that the default assumption is that everyone should use Google Chrome, even when explicitly asking for a compatibility tester. I'm asking because I don't use Google's browser
Re: It took a year to ship WebAssembly in Anubis
#225Earlier quoted context omitted.
The Anubis anime girl is an instant tab close for me, especially while in public. I dont like having to explain to people that I'm not one of those creepy anime guys.
It isn't even anime style, it gives me more western cartoonish vibes.
From someone who doesn't want to associate with it, I think 'anime girl' is fair. Even if people who consume it might (and do) categorize it otherwise.
Re: It took a year to ship WebAssembly in Anubis
#226Earlier quoted context omitted.
There's no mechanistic difference between the two types of cookies, let's not pretend this is an actual config choice that people are making. Whenever I hit Anubis, I simply go "keep your secrets then" and take my leave. The vast majority of the sites posted to HN (that catch my fancy) work fine or fine enough, and are better for it. If I really, really desperately want to check something out, I can always just turn…
The Anubis anime girl is an instant tab close for me, especially while in public. I dont like having to explain to people that I'm not one of those creepy anime guys.
uBlock Origin filter to block the anime girl from loading:
! Title: Hide Anubis Image
*/.within.website/x/cmd/anubis/static/img/*.webp$image