Admin on the slrpnk.net Lemmy instance.

He/Him or what ever you feel like.

XMPP: povoq@slrpnk.net

Avatar is an image of a baby octopus.

  • 34 Posts
  • 918 Comments
Joined 3 years ago
cake
Cake day: September 19th, 2022

help-circle






  • If there’s one thing that we learnt from the cryptocurrecy industry, it’s that users don’t care to understand how the technology works, and will do stupid things.

    Yes, like turning a digital payment system into a speculative asset and making it basically impossible to actually buy anything with it.

    But it seems you are totally missing the point of Taler, as it doesn’t even aim to be anything like so called crypto-“currencies”. It’s a digital payment system like Paypal, but decentralized.











  • You might have to sit through a slightly longer waiting time every now and then, but Anubis is not invoked on every connection and once your browser is found to be worthy you can surf as before.

    The bigger issue might be if that old hardware can’t run a modern up to date browser, because then it doesn’t work at all, which is the real down-side of Anubis.

    I tried it with the default settings of the Tor browser though and that worked ok surprisingly.




  • It does not stop them, but it does make it more expensive and slower for the attacker.

    This is a bit of a misconception of what Anubis does. It uses PoW to enforce a full browser environment, but the PoW is only used once a week or so (or when there is some suspicious things detected). The PoW is then used to autogenerate a kind of password to store in the browser cookies, and to generate this “password” you can’t use the simple servers that are used at scale to scrape (practically ddos) the open internet right now.

    The main problem is with complex websites like git forges that these AI scrapers hit all the computational expensive deep endpoints and practically force them to shut down from overloading the CPU.

    Since I was forced to implement Anubis for my Forgejo instance I also experimented with it on Lemmy. Right now the results show that while Lemmy isn’t as badly effected by this AI scraping, there is still quite a bit of it happening. After adding Anubis the overall traffic went down by about a third on our instance, and it prevents the regular traffic spikes we previously saw and had no real explanation for.

    But we also ran in some strange issues with it. Most likely it is caused by Anubis detecting mobile connections with switching IP addresses as possible scrapers (who are known to first access pages from a more complete server to get cookies and so on and then switch to a cheaper server on a different IP to do the actual scraping). But we are still figuring out how to replicate those issues, and they might have been fixed in the latest Anubis update we applied yesterday.