Elektrine lite

← Feed

@Suiseiseki@freesoftwareextremist.com

Post #2836499

2025-08-15 16:58 UTC

@Codeberg@social.anoxinon.de >now that they managed to break through Anubis There was no break - it's a simple matter of changing the useragent, or if for some reason there's still a challenge, simply utilizing the plentiful computing power that is available on their servers (which far outstrips the processing power mobile devices have). Anubis is evil and is proprietary malware - please do not attack your users with proprietary malware. If you want to stop scraper bots, start serving GNUzip bombs - you can't scrape when your server RAM is full. dd if=/dev/zero bs=1G count=10 | gzip > /tmp/10GiB.gz dd if=/dev/zero bs=1G count=100 | gzip > /tmp/100GiB.gz dd if=/dev/zero bs=1G count=1025 | gzip > /tmp/1TiB.gz nginx; #serve gzip bombs location ~* /bombs-path/.*\.gz { add_header Content-Encoding "gzip"; default_type "text/html"; } #serve zstd bombs location ~* /bombs-path/.*\.zst { add_header Content-Encoding "zstd"; default_type "text/html"; } Then it's a matter of bait links that the user won't see, but bots will.

Replies (1)

  • @Codeberg@social.anoxinon.de 2025-08-15 17:11

    @Suiseiseki@freesoftwareextremist.com Anubis is the option that saved us a lot of work over the past months. We are not happy about it being open core or using GitHub sponsors, but we acknowledge the position from the maintainer: https://codeberg.org/forgejo/discussions/issues/319#issuecomment-6382369 Calling our usage of anubis an attack on our users is far-fetched. But feel free to move elsewhere, or host an alternative without resorting to extreme measures. We're happy to see working proof that any other protection can be scaled up to the level of Codeberg. ~f

    Open ##2836500