Live data from Hacker News

The Scraping Problem and Ethics

blog.osvdb.org

61–70 of 130 posts

Re: The Scraping Problem and Ethics

#61

Web scraping isn't a crime - the simple act of downloading the data should not be a problem here. (The reuse of the data might be, depending, but we don't have that information right now.) This doesn't even rise to the level of what Weev did.

He's just making the point that it's unethical, which it is. Even if it boils down to simple bandwidth theft.

In agreement with my sibling comment: if I ask you politely for some bandwidth, and you give it to me, it's hard to describe that as "bandwidth theft".

Re: The Scraping Problem and Ethics

#62
post #47

Earlier quoted context omitted.

It's not really reasonable to say "I don't like the way you market your goods... so you really shouldn't be concerned with people stealing them."

Tell that to the 95% of the population on this site who torrent TV shows, movies and music.

Even ignoring the difference between taking something for personal use and taking something for commercial use (as that is a distinction that does not affect the legality of the matter) "because other people do it" is not a valid defence.

Re: The Scraping Problem and Ethics

#63

I'm more and more concerned that the legal and cultural environment for web scraping would make it hard for a company like Google or Yahoo to be founded today. The internet isn't about "don't take my stuff", it's about spreading that stuff around. I'm confused by people who want to make their data public, but want to control exactly how people access it.

>make it hard for a company like Google or Yahoo to be founded today.

Is that a bad thing?

>The internet isn't about "don't take my stuff", it's about spreading that stuff around.

Try asking Google if they want to "share" their database of crawled data.

>I'm confused by people who want to make their data public, but want to control exactly how people access it.

Me too.

Re: The Scraping Problem and Ethics

#64

If I were in OSVDB's shoes, I would call these people out in an email and ask them to pay a licencing fee. McAfee have always had a shady past, even when they shook themselves clean of John, they have a history of scam-like behaviour to make a quick-buck. You should be rate-limiting how many requests free API users can make, like; Twitter, Facebook and every other Internet provider does via their API. Make it harder…

Even if you limit the rate, they will just create multiple accounts on multiple servers. There is no way you will make them pay for it as you could find it hard trying to prove it's them scraping in the first place.

Re: The Scraping Problem and Ethics

#65
post #29

Earlier quoted context omitted.

[deleted]

Actually, Terms of Service violations fall under the Computer Fraud and Abuse Act, since ToS agreements can lay out under which circumstances that authorization for access to computer systems is given. That sort of obscene generality is the reason for proposals such as Aaron's Law, but to my knowledge there are no such protections today.

While what you have stated is certainly the position held by the US AG, I don't believe it's been tested in court yet.

Re: The Scraping Problem and Ethics

#66
post #63

I'm more and more concerned that the legal and cultural environment for web scraping would make it hard for a company like Google or Yahoo to be founded today. The internet isn't about "don't take my stuff", it's about spreading that stuff around. I'm confused by people who want to make their data public, but want to control exactly how people access it.

>make it hard for a company like Google or Yahoo to be founded today. Is that a bad thing? >The internet isn't about "don't take my stuff", it's about spreading that stuff around. Try asking Google if they want to "share" their database of crawled data. >I'm confused by people who want to make their data public, but want to control exactly how people access it. Me too.

>Is that a bad thing? Yes, no question about it. More players in the market means more competition and more competition means a better service.

Re: The Scraping Problem and Ethics

#67
post #56

If I were in OSVDB's shoes, I would call these people out in an email and ask them to pay a licencing fee. McAfee have always had a shady past, even when they shook themselves clean of John, they have a history of scam-like behaviour to make a quick-buck. You should be rate-limiting how many requests free API users can make, like; Twitter, Facebook and every other Internet provider does via their API. Make it harder…

If I were in their shows I would track their IPs and send them bogus data along the lines of "Please pay for a commercial license."

You need to be careful sending bogus data: in some jurisdictions this could be argued to be deliberate targeted commercial sabotage. You would no doubt eventually win any resulting legal argument, assuming you could afford to carry the argument on to that conclusion. Sending no data, or limited data, would be safe though.

A better method would be to set "default" pricing (something high but not ridiculous, that could easily be negotiated downwards if they contact you) and make access beyond a few requests a click-through (or better: have them respond to an email before progressing further) where they agree to that pricing if they are using the information commercially.

Re: The Scraping Problem and Ethics

#68
post #63

Earlier quoted context omitted.

>make it hard for a company like Google or Yahoo to be founded today. Is that a bad thing? >The internet isn't about "don't take my stuff", it's about spreading that stuff around. Try asking Google if they want to "share" their database of crawled data. >I'm confused by people who want to make their data public, but want to control exactly how people access it. Me too.

>Is that a bad thing? Yes, no question about it. More players in the market means more competition and more competition means a better service.

>More players in the market means more competition and more competition means a better service

I'm not sure if this is a joke. So, I'll refrain from replying.

Re: The Scraping Problem and Ethics

#69
post #13

Earlier quoted context omitted.

On the other hand, large (even non-profit) organisations are precisely the ones who have the resources to scrape steathily and widely, as would a loosely-organised community of users... it's not hard to come up with algorithms to respect the rate limits, balancing the load across multiple IPs and accounts, and producing access patterns that don't look any different from the rest of the site traffic.

like much security, it's not about making it impossible, it's about making it a lot less convenient/a bit harder. At one point the effort to circumvent would cost more in man-hours than just buying the product.

You can get scrapping libraries fairly easily. In my more shady past I developed a library like that and shared it, HTTP client library with automatic proxy rotation and rate limiting friendly.

When I used it (which was almost a decade ago) never ran into problems, plug a list of 10,000 proxy and scrap away.

Not condoning that, which is a bit hypocrite of me, at the time I was mostly doing what I was told and I thought I was clever. Now that I'm in a position to have a positive impact, I do buy data and pay appropriate licence fees on all software/data purchase, which still baffles some of my programmers who constantly ask "why not crack it?", "you know I found a .zip on Google with the data, why buy it?", and so forth.

I don't know what in programmer culture makes it so hard for us to pay for something, some people put some effort behind that software / data collection, and it's only fair to pay them.

Re: The Scraping Problem and Ethics

#70
post #37

Earlier quoted context omitted.

Maybe they want Google to be able to crawl their database (which it has clearly done, as you'll see if you do a search.) That also raises some questions...

Not completely by the specification, but I think this one works as expected. user-agent: * disallow: / user-agent: Googlebot allow: /

Not sure it's a good idea to block all search engines but Google.
Post reply on HN