Live data from Hacker News

Facebook's Fascination with My Robots.txt

blog.nytsoi.net

41–50 of 55 posts

Re: Facebook's Fascination with My Robots.txt

#41
post #10
post #9

Have you considered serving a zip bomb to this user agent?

I'm sure their crawler can handle a zip bomb. Plus it might interpret that as "this site doesn't have a robots.txt" and start scraping that OP is trying to prevent with their current robots.txt.

Pretty sure every crawler can. You kinda have to go out of your way not to, given how the gzread API looks.

https://refspecs.linuxbase.org/LSB_3.0.0/LSB-Core-generic/LS...

Re: Facebook's Fascination with My Robots.txt

#42

1. Put a note in robots.txt that says "By accessing this file more than one time per second you agree to pay a fee of $0.1 per access plus an additional $0.1 for each previous access each day. This fee will be charged on a per access basis." 2. Run a program that logs the number for Facebook requests and prints a summary and bill. 2. Then get a stamp, envelope and write out a bill for the first day, call it a demand…

Why do you think this would be anything other than a time-consuming and slightly costly exercise?

Do you think there's a contract created by your robots.txt comment?

Re: Facebook's Fascination with My Robots.txt

#44

1. Put a note in robots.txt that says "By accessing this file more than one time per second you agree to pay a fee of $0.1 per access plus an additional $0.1 for each previous access each day. This fee will be charged on a per access basis." 2. Run a program that logs the number for Facebook requests and prints a summary and bill. 2. Then get a stamp, envelope and write out a bill for the first day, call it a demand…

Great point. By the way, by reading this comment, you agree to pay me one gorillion dollars.

Re: Facebook's Fascination with My Robots.txt

#45

1. Put a note in robots.txt that says "By accessing this file more than one time per second you agree to pay a fee of $0.1 per access plus an additional $0.1 for each previous access each day. This fee will be charged on a per access basis." 2. Run a program that logs the number for Facebook requests and prints a summary and bill. 2. Then get a stamp, envelope and write out a bill for the first day, call it a demand…

It this functionally different from posting the "I DO NOT GRANT FACEBOOK PERMISSION..." copypasta to your Facebook page?

Re: Facebook's Fascination with My Robots.txt

#46

I recently started maintaining a MediaWiki instance for a niche hobbyist community and we'd been struggling with poor server performance. I didn't set the server up, so came into it assuming that the tiny amount of RAM the previous maintainer had given it was the problem. Turns out all of the major AI slop companies had been hounding our wiki constantly for months, and this had resulted in Apache spawning hundreds of…

For some reason it seems really important to these AI companies to get the very latest version of your pages as well, so they'll do anything in their power to avoid hitting any caching you may try to set up.

Re: Facebook's Fascination with My Robots.txt

#47

1. Put a note in robots.txt that says "By accessing this file more than one time per second you agree to pay a fee of $0.1 per access plus an additional $0.1 for each previous access each day. This fee will be charged on a per access basis." 2. Run a program that logs the number for Facebook requests and prints a summary and bill. 2. Then get a stamp, envelope and write out a bill for the first day, call it a demand…

You can't just make a one sided contract agreement like that though. Just like I can't tell anyone that by reading this comment they agree to pay me (as another commenter pointed out).

Re: Facebook's Fascination with My Robots.txt

#48
post #35

Earlier quoted context omitted.

> this had resulted in Apache spawning hundreds of instances, bringing the whole machine to a halt. Ugh, such a weird design. At least my experience has been you are better off setting Apache to always run the same number of instances, and tuning that number as appropriate rather than having the instance count fluctuate under load.

Yeah, I did suggest nginx in the past for this project and I think I'll consider it after this saga. For now I've set pretty low limits on Apache.

Apache itself is fine. Just need to set MaxClients/MaxRequestWorkers equal to StartServers and MaxSpareThreads (assuming prefork), so that all the forking happens at start up. Similar things for other mpms, I assume.

Re: Facebook's Fascination with My Robots.txt

#49
post #5

> Perhaps someone at their end screwed up a loop conditional, but you'd think some monitoring dashboard somewhere would have a warning pop up because of this. If you've been in any big company you'll know things perpetually run in a degraded, somewhat broken mode. They've even made up the term "error budget" because they can't be bothered to fix the broken shit so now there's an acceptable level of brokenness.

It's not a matter of "can't be bothered." Engineers are constantly fixing things and rolling out new features. "Error budgets" are an acknowledgement of the tradeoff between these two things, and making a conscious choice about the balance between them, according to the business requirements of the application in question.

Keep in mind that "fixing things" is essentially a Sisyphean task - no matter how much you do there's always more you can do. Just like adding features. You have to have some kind of guideline on when enough is enough.

Post reply on HN