Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Why are anime catgirls blocking my access to the Linux kernel?

lock.cmpxchg8b.com

Post reply on HN
Print view View original

801–810 of 968 posts

Re: Why are anime catgirls blocking my access to the Linux kernel?

#801

Post by johnea »

jerf wrote: post #83
johnea wrote: post #50

My biggest bitch is that it requires JS and cookies... Although the long term problem is the business model of servers paying for all network bandwidth. Actual human users have consumed a minority of total net bandwidth for decades: https://www.atom.com/blog/internet-statistics/ Part 4 shows bots out using humans in 1996 8-/ What are "bots"? This needs to include goggleadservices, PIA sharing for profit, real-time ad…

"Although the long term problem is the business model of servers paying for all network bandwidth." Servers do not "pay for all the network bandwidth" as if they are somehow being targeted for fees and carrying water for the clients that are somehow getting it for "free". Everyone pays for the bandwidth they use, clients, servers, and all the networks in between, one way or another. Nobody out there gets free bandwid…

Maybe my statement wasn't clear. The point is that the server operators pay for all of the bandwidth of access to their servers.

When this access is beneficial to them, that's OK, when it's detrimental to them, they're paying for their own decline.

The statement isn't really concerned with what if anything the scraper operators are paying, and I don't think that really matters in reaching the conclusion.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#802

Post by johnklos »

KolmogorovComp wrote: post #580

Why does Anubis not leverage PoW from its users to do something useful (at best, distributed computing for science, at worst, a crypto-currency at least allowing the webmasters to get back some cash)

People are already complaining. Could you imagine how much fodder this'd give people who didn't like the work or the distribution of any funds that a cryptocurrency would create (which would be pennies, I think, and more work to distribute than would be worth doing).

Re: Why are anime catgirls blocking my access to the Linux kernel?

#803

Post by superkuh »

account42 wrote: post #567
technion wrote: post #362

Earlier quoted context omitted.

It really should be recognised just how many people are watching Cloudflare interstitials on nearly every site these days (and I totally get why this happens) yet making a huge amount of noise about Anubis on a very small amount of sites.

Cloudflare's solution works without javascript enabled unless the website turns up the scare level to max or you are on an IP with already bad reputation. Anubis does not. But at the end of the day both are shit and we should not accept either. That includes not using one as an excuse for the other.

Laughable. They say this but anyone who actually surfs the web with a non-bleeding edge non-corporate browser gets constantly blocked by Cloudflare. The idea that their JS computational paywalls only pop up rarely is absurd. Anyone believing this line lacks lived experience. My Comcast IP shouldn't have a bad rep and using a browser from ~2015 shouldn't make me scary. But I can't even read bills on congress.gov anymore thanks to bad CF deployals.

Also, Anubis does have a non-JS mode: the HTML header meta-refresh based challenge. It's just that the type of people who use Cloudflare or Anubis almost always just deploy the default (mostly broken) configs that block as many human people as bots. And they never realize it because they only measure such things with javascript.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#804

Post by tgv »

drakythe wrote: post #746
tgv wrote: post #686

Earlier quoted context omitted.

That says something about the chosen picture, doesn't it? Probably that it's not well liked. It certainly isn't neutral, while the Cloudfare page is.

You know, you say that, and while I understand where you're coming from I was browsing the git repo when github had a slight error and I was greeted with an angry pink unicorn. If Github can be fun like that, Anubis can too, I think.

I don't think you want to suggest that everyone must like it?

Re: Why are anime catgirls blocking my access to the Linux kernel?

#805

Post by shkkmo »

debugnik wrote: post #439
Retr0id wrote: post #181

Earlier quoted context omitted.

If you increase the difficulty much beyond what it currently is, legitimate users end up having to wait for ages.

And if you don't increase it, crawlers will DoS the sites again and legitimate users will have to wait until the next tech hype bubble for the site to load, which is the reason why software like Anubis is being installed in the first place.

If you triple the difficulty, the cost of solving the PoW is still neglible to the crawlers but you've harmed real users even more.

The reason why anubis works is not the PoW, it is that the dev time to implement the bypass takes out the lowest effort bots. Thus the correct response is to keep the PoW difficulty low so you minimize harm to real users. Or better yet, implementing your own custom check that doesn't use any PoW and relies on ever higher obscurity to block the low effort bots.

The more anubis is used, the less effective it is and the more it harms real users.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#806

Post by jandrese »

wraptile wrote: post #689

I'm a scraper developer and Anubis would have worked 10 - 20 years ago, but now all broad scrapers run on a real headless browser with full cookie support and costs relatively nothing in compute. I'd be surprised if LLM bots would use anything else given the fact that they have all of this compute and engineers already available. That being said, one point is very correct here - by far the best effort to resist broad…

> That being said, one point is very correct here - by far the best effort to resist broad crawlers is a _custom_ anti-bot that could be as simple as "click your mouse 3 times" because handling something custom is very difficult in broad scale.

Isn't this what Microsoft is trying to do with their sliding puzzle piece and choose the closest match type systems?

Also, if you come in on a mobile browser it could ask you to lay your phone flat and then shake it up and down for a second or something similar that would be a challenge for a datacenter bot pretending to be a phone.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#808

Post by sintax »

PeterStuer wrote: post #493
marcus_holmes wrote: post #321

Earlier quoted context omitted.

How does this work, though? We can't just have "send me a picture of your ID" because that is pointlessly easy to spoof - just copy someone else's ID. So there must be some verification that you, the person at the keyboard, is the same person as that ID identifies. The UK is rapidly finding out that that is extremely difficult to do reliably. Video doesn't really work reliably on all cases, and still images are too e…

Officially sanctioned 2fa tied to your official government ID. Over here we have "It's me" [1]. Yes, you can in theory still use your ID card with a usb cardreader for accessing gov services, but good luck finding up to date drivers for your OS or use a mobile etc. [1] https://www.itsme-id.com/en-BE/

Except that itsme crap is not from the government and doesn't support activation on anything but a Windows / Mac machine. No Linux support at all, while the Belgian government stuff (CSAM) supports Linux just fine.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#809

Post by cakealert »

palata wrote: post #523
overfeed wrote: post #382

Earlier quoted context omitted.

Besides making yourself party to a criminal conspiracy, I suspect it would be partly the same reason you won't sell/rent your real-world identity to other people today; an illegal immigrant may be willing to rent it from you right now. Mostly, it will because online identifies will be a market for lemons: there will be so many fake/expired/revoked identities being sold that the value of each one will be worth pennies…

> the same reason you won't sell/rent your real-world identity to other people today If you sell your real-world identity to other people today, and they get arrested, then the police will know your identity (obviously). How does that work with a privacy-preserving scheme? If you sell your anonymous token that says that you are a human to a machine and the machine gets arrested, then the police won't be able to know…

It would appear most of the people commenting on the subject don't even understand it.

With privacy preserving cryptography the tokens are standalone and have no ties to the identity that spawned them.

No enforcement for abuse is possible.

Re: Why are anime catgirls blocking my access to the Linux kernel?

#810

Post by DanielHB »

hinach4n wrote: post #781
DanielHB wrote: post #769

Earlier quoted context omitted.

How do you bypass cloudflare? I do some light scrapping for some personal stuff, but I can't figure out how to bypass it. Like do you randomize IPs using several VPNs at the same time? I usually just sit there on my phone pressing the "I am not a robot box" when it triggers.

I believe usually you would bypass by using residential ips / proxies?

I run it through my home network and I'm still triggering it. I add 2s delays between page load and it still triggers
Post reply on HN