Thought is good, but if life has taught me anything it’s that it’s only a matter of time until someone new takes over and uses it for their nefarious purposes. Forcing it is never a good option, it should be opt in

Damn this is insane. Using claude/cursor for work is near, but they have a mode literally called “yolo mode” which is this. Agents allowed to run whatever code they like, which is insane. I allow it to do basic things, you can search the repo and read code files, but goddamn allowing it to do whatever it wants? Hard no

As an aside, I have that coffee maker and love it! See if there’s a local coffee shop, here in my city it was stocked and they even let me try a cup from there

Oh as an aside, the coffee comes out SUPER weak at the beginning, where I thought it was broken. Give it 20-30 shots/cups and it’ll start tasting more normal. I’ve had mine for 3 years now and love it

Honestly they all suck

Holy setup batman. Was thinking it was going to be another container I spin up, but it’s enabling kernel modules, needs IOMMU, needs a ton of setup and then it looks like you still have to compile it? For now at least that’s above my needs

Setting aside all the consumerism comments I’m sure my fellow Lemmy users will fill us in about - you don’t want any black Friday deals. I worked electronics retail for almost a decade and saw it.

Black Friday “deals” aren’t percentages off products you want. For the most part they are shittier models with a letter different from their normal model number. These special black Friday models are made with parts that failed qa or just all around are cheaper. The companies don’t just magically take 20% off, they plan for it.

That $100 dollar 48" flat screen? Yeah it’s worth $100. Hope it was worth giving up time in your holidays to buy, because there’s a decent chance you’ll be returning it when it breaks.

(Tip for those buying tvs. Super bowl is the best time of year to buy a TV. They’re the actual good models and it’s the best sales of the year. Stores are in the post holiday slump and eager to move them.)

Zoey Deschanel 's she and him album. On repeat. All month. I was there, man

Not offended. Annoyed that on every thread here it devol es into politics and becomes a depressing place. I know the world is depressing and the everything is politics GM but goddamn I found this comic sweet, I followed xkcd through the cancer years, and someone saying “must be nice to have money” really feels disrespectful to them. Yeah, it probably did help, and yeah, our country sucks, but can we just have a nice comic for once that celebrates them making it through cancer? Why does every comment section on Lemmy have to have someone saying “Hey look! The system is fucked!”. I know it is! That’s why I was here trying to enjoy something for a few seconds!

Jfc this is exactly why people run to the right, because so many people on the left can’t let anything be a nice moment without making sure everyone knows that they’re the most moral person in the room. We all already know the problems.

Stop virtue signalling. It’s transparent, annoying, and hurts the causes more than helps.

but the vast majority of crawlers don’t care to do that. That’s a very specific implementation for this one problem. I actually did work at a big scraping farm, and if they encounter something like this,they just give up. It’s not worth it to them. That’s where the “worthiness” check is, you didn’t bother to do anything to gain access.

Great, other companies have thought the same and they’re sheepishly realizing that’s not realistic. Let us know how it goes

SEO ruined the Internet

That’s counting on one machine using the same cookie session continuously, or they code up a way to share the tokens across machines. That’s now how the bot farms work

I was a single server with only me and 2 others or so, and then saw that I had thousands of requests per minutes at times! Absolutely nuts! My cloud bill was way higher. Adding anubis and it dropped down to just our requests, and bills dropped too. Very very strong proponent now.

This dance to get access is just a minor annoyance for me, but I question how it proves I’m not a bot. These steps can be trivially and cheaply automated.

I don’t think the author understands the point of Anubis. The point isn’t to block bots completely from your site, bots can still get in. The point is to put up a problem at the door to the site. This problem, as the author states, is relatively trivial for the average device to solve, it’s meant to be solved by a phone or any consumer device.

The actual protection mechanism is scale, the scale of this solving solution is costly. Bot farms aren’t one single host or machine, they’re thousands, tens of thousands of VMs running in clusters constantly trying to scrape sites. So to them, a calculating something that trivial is simple once, very very costly at scale. Say calculating the hash once takes about 5 seconds. Easy for a phone. Let’s say that’s 1000 scrapes of your site, that’s now 5000 seconds to scrape, roughly an hour and a half. Now we’re talking about real dollars and cents lost. Scraping does have a cost, and having worked at a company that does professionally scrape content they know this. Most companies will back off after trying to load a page that takes too long, or is too intensive - and that is why we see the dropoff in bot attacks. It’s that it’s not worth it for them to scrape the site anymore.

So for Anubis they’re “judging your value” by saying “Are you willing to put your money where your mouth is to access this site?” For consumer it’s a fraction of a fraction of a penny in electricity spent for that one page load, barely noticeable. For large bot farms it’s real dollars wasted on my little lemmy instance/blog, and thankfully they’ve stopped caring.

Check out Anubis. If you have a reverse proxy it is very easy to add, and for the bots stopped spamming after I added it to mine

Oh, oh no no no it wasn’t

The reason he wants it is he doesn’t want secrets to setup auth

Yes I’d like auth without the auth please

This looks great! Thank you for the recommendation!

That really sucks, I’m sorry :/ yet I’m not surprised at all. Airlines, while absolutely terrible, can see if you booked through them and if you’re a loyal flyer, and they’ll help you out. Priceline just don’t care at all about you, you’re a single transaction, and they already got their money