Live data from Hacker News

ChatGPT won't let you type until Cloudflare reads your React state

buchodi.com

311–320 of 668 posts

Re: ChatGPT won't let you type until Cloudflare reads your React state

#311
post #149

Earlier quoted context omitted.

It's interesting to me that OpenAI considers scraping to be a form of abuse.

Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. The former relies on fairly controversial ideas about copyright and fair use to qualify as abuse, whereas the latter is direct financial damage – by your own direct competitors no less. It's fun to poke at a seeming hypocrisy of the big bad, but the similarity…

[deleted]

Re: ChatGPT won't let you type until Cloudflare reads your React state

#312
post #149

Earlier quoted context omitted.

It's interesting to me that OpenAI considers scraping to be a form of abuse.

Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. The former relies on fairly controversial ideas about copyright and fair use to qualify as abuse, whereas the latter is direct financial damage – by your own direct competitors no less. It's fun to poke at a seeming hypocrisy of the big bad, but the similarity…

It's not like those models are expensive because the usefulness that they extracted from scraping others without permission right? You are not even scratching the surface of the hypocrisy

Re: ChatGPT won't let you type until Cloudflare reads your React state

#313
post #162

Earlier quoted context omitted.

You can just decay your trust level based on the `iat` value. That way people will need to keep buying me coffee. I can optionally chide them for giving out their token. If you're engaging with the idea seriously, I suppose we'd need to build a reputation or trust network or something. Although if you're talking about replay attacks specifically, there are other crypto based solutions for that.

My point is that there probably is no way in principle to distinguish between a human user utilizing automation on their own behalf in good faith (e.g. RSS readers) and bad faith automations.

That's a feature, not a bug.

A human is personally responsible for a bot acting on their behalf. If your bot behaves, nothing is going to happen. If you keep handing out your personal keys to shitty misbehaving bots, then you will personally get banned - which gives you a pretty good incentive to be a bit more discerning about the bots you use.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#314
post #297

Earlier quoted context omitted.

> Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. I bet people being fucking DDOSed by AI bots disagree Also the fucking ignorance assuming it's "static content" and not something needing code running

> I bet people being fucking DDOSed by AI bots disagree Are you sure it's a DDoS and not just a DoS?

You should see Cloudflare's control panel for AI bot blocking. There are dozens of different AI bots you can choose to block, and that doesn't even count the different ASNs they might use. So in this case I'd say that a DDoS is a decent description. It's not as bad as every home router on the eastern seaboard or something, but it's pretty bad.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#315

Earlier quoted context omitted.

Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. The former relies on fairly controversial ideas about copyright and fair use to qualify as abuse, whereas the latter is direct financial damage – by your own direct competitors no less. It's fun to poke at a seeming hypocrisy of the big bad, but the similarity…

> Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. I bet people being fucking DDOSed by AI bots disagree Also the fucking ignorance assuming it's "static content" and not something needing code running

> Also the fucking ignorance assuming it's "static content" and not something needing code running

Wild eh.

If it's not ai now, it's by default labelled "static content" and "near-zero marginal cost".

Re: ChatGPT won't let you type until Cloudflare reads your React state

#316

To prompt a discussion that's purely technical: I'm interested in how this was done. Specifically, Turnstile as far as I'm aware doesn't do anything specifically configurable or site specific. It works on sites that don't run React, and the cookie OpenAI-Sentinel-Turnstile-Token is not a CF cookie. Did OpenAI somehow do something on their own API that uses data from Turnstile?

Cloudflare should be able to determine whether a website uses React by analyzing data flowing through its CDN.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#317
post #149

Earlier quoted context omitted.

It's interesting to me that OpenAI considers scraping to be a form of abuse.

Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. The former relies on fairly controversial ideas about copyright and fair use to qualify as abuse, whereas the latter is direct financial damage – by your own direct competitors no less. It's fun to poke at a seeming hypocrisy of the big bad, but the similarity…

  > net-zero marginal cost
Lol, you single-handedly created a market for Anubis, and in the past 3 years the cloudflare captchas have multiplied by at least 10-fold, now they are even on websites that were very vocal against it. Many websites are still drowning - gnu family regularly only accessible through wayback machine.

Spare me your tears.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#318

> A headless browser that loads the HTML but doesn't execute the JavaScript bundle won't have them. this is meaningless btw. A browser headless or not does execute javascript.

I disagree, a browser can have javascript execution disabled (and this is somewhat common in scraping to save time/resources). I read it to mean: "A browser that doesn't execute the JavaScript bundle won't have [the rendered React elements]." Which is true.

If JavaScript is disabled, why use a headless browser instead of making HTTP requests directly?

Re: ChatGPT won't let you type until Cloudflare reads your React state

#319
post #149

Hey! I'm Nick, and I work on Integrity at OpenAI. These checks are part of how we protect our first-party products from abuse like bots, scraping, fraud, and other attempts to misuse the platform. A big reason we invest in this is because we want to keep free and logged-out access available for more users. My team’s goal is to help make sure the limited GPU resources are going to real users. We also keep a very close…

It's interesting to me that OpenAI considers scraping to be a form of abuse.

Quite sure even literal thieves would consider thievery a form of abuse.

Re: ChatGPT won't let you type until Cloudflare reads your React state

#320
post #149

Earlier quoted context omitted.

It's interesting to me that OpenAI considers scraping to be a form of abuse.

Scraping static content from a website at near-zero marginal cost to its server, vs scraping an expensive LLM service provided for free, are different things. The former relies on fairly controversial ideas about copyright and fair use to qualify as abuse, whereas the latter is direct financial damage – by your own direct competitors no less. It's fun to poke at a seeming hypocrisy of the big bad, but the similarity…

Absolutely not, the former relies on controversial ideas to qualify as legal.

Stealing the content from the whole planet & actively reducing the incentive to visit the sites without financial restitution is pretty bad.

Post reply on HN