Look, I want to see WCAG adopt "Any ad that covers content, a cookie banner, or Anubis or Cloudflare harassment is an immediate F grade" I'm a little more hopeful of that than to get a requirement like "you should actually have a disabled person test it"

What the people who like Anubis don't get is that the cost for honest people is very real, the cost for crawlers is basically $0 because: most of the people who run crawlers are just idiots and aren't paying attention to what's happening and get crap data and don't even know they are getting bounced and probably don't even look at the crap data they collect, the worst of the crawlers are running botnets using stolen CPU, the real AI companies don't have any financial discipline and wouldn't care it if anubis wasted a CPU*hour per page.

Or rather, those "click on the bus" images raise your blood pressure but are close to trivial for a bot to automate... It's all performative... We're good open source people who prove we are good open source people because we put Anubis on our page to shame those bad AI people.

▲

Grombobulous 7 hours ago | parent | next [-]

What is the cost of Anubis for honest people? I’m legitimately confused by that one.

I don’t like the cloudflare checkbox or click all the buses to access this website but Anubis you just sit there for a split second and do nothing.

That’s what people like about Anubis.

▲

craftkiller 6 hours ago | parent | next [-]

> What is the cost of Anubis for honest people?

I just made a post of one of the costs of Anubis for honest people before I saw your comment. Linking it here instead of copying: https://news.ycombinator.com/item?id=50358838

▲

Grombobulous 6 hours ago | parent [-]

Interesting, if I understand correctly it seems like Anubis is just being used in a use case inappropriate way here?

The Arch equivalent to this would be building AUR packages from source, which seems to universally work fine without any of these issues.

Are NixOS repos putting their source behind Anubis or something? I’m tempted to start on an “I don’t like NixOS” rant but I don’t know who owns these forges.

	▲	craftkiller 2 hours ago \| parent [-]
		It's sort of a mix between AUR and regular pacman repositories. On Arch, you have PKGBUILDs that list upstream URLs for your package sources. For example: https://gitlab.archlinux.org/archlinux/packaging/packages/ap... then some process takes those PKGBUILDs, downloads the sources from the upstream URLs, and builds them into the binary packages that end up in the official pacman repositories. The same process happens on NixOS to build their official repository (which is called the "Nix Binary Cache"). So most NixOS users, when installing software, they are just downloading prebuilt binary packages from official NixOS servers just like pacman does on Arch. I, however, disable the Nix's official package repository so when I install software it is like building from a PKGBUILD: it needs to download the sources from the upstream URL and build the package. I'd imagine the reason I run into this issue a lot more than you do is usually you only install a couple of packages from the AUR. The vast majority of your packages are going to come prebuilt from official Arch repositories. Whereas on my systems, 100% of the software is being built from source. So if any of my software is developed on a site using anubis to protect their source tarballs or patch files, I will hit this issue.

▲

daxuak 7 hours ago | parent | prev [-]

For me to open 5 pages, which is more than often when I search with google etc, that all have Anubis, will take more time for them to load than that I ask chatgpt and it generates an answer from web search, at least in some cases. It is 100% virtue signaling that has no technical fundamentals to deter scrappers, which likely implement better solvers and have virtually unlimited amount of time and compute to spare, it just punishes me who have a body and a limited time budget. Humiliating even for a split of a second. Now I just skip any website that I do not care enough and has Anubis; the ones I have to visit, I will remember their mindless choice forever.

▲

Grombobulous 7 hours ago | parent [-]

We can make up unrealistic scenarios all day long but I just don’t believe for a second that anyone is this inconvenienced by it.

The idea that you’re in desperate need to get information from 5 web pages as quickly as possible like you’re a contestant on The Amazing Race is ridiculous. This is the definition of dramatic.

Anubis finishes up in less time than takes to read this sentence.

	▲	tescreal 5 hours ago \| parent [-]
		Do it 20 times in the search for one article, and encounter at least a 30% misconfiguration rate (inappropriately high challenge value), and it does begin to bear out. If you are looking for obscure or poorly managed data, it unfortunately does become an issue. In the daily, if you spend time researching with plenty of dead ends, ot does bear out in lost time. Not by dollars, but nickles and dimes.

▲

daxuak 9 hours ago | parent | prev | next [-]

I did not use chatbot for search until Anubis, Cloudflare and recaptcha are so prevalent that chatbot literally parses through the pages faster than I can open any one of them, using my daily browser, with my own hands. It seems not only my choice does not matter, but most websites also do not care about human readers. At this point I just use chatbot as search engine out of vengeance.

Also, optimized Anubis & other proof of work challenge solvers are much faster than a stock browser.

▲

Asraelite 5 hours ago | parent | prev | next [-]

It doesn't matter if you have to wait 10 minutes for Anubis to load, it will eventually load.

If you get blocked by another anti-bot mechanism, then there's nothing you can do without compromising on privacy or browser/device choice somehow.

An open web is more important than a convenient web, and Anubis or similar tools are the only option that keeps things truly open.

▲

darepublic 9 hours ago | parent | prev | next [-]

I think thought user behaviour telemetry was a big part of the captcha recipe. Not so much the clicking of the right squares per se

	▲	PaulHoule 9 hours ago \| parent [-]
		Can be faked. Record people doing it hundreds if not thousands of times and make a statistical model. Google and Facebook of course would love it if your were logged in and could look at the muddy footprints you leave all over the web. Yet another way to punish people for using the wrong browser or not logging in.

▲

heliomattress 8 hours ago | parent | prev | next [-]

speaking of WCAG https://news.coffee/wcag.gif

▲

Dylan16807 8 hours ago | parent | prev [-]

We can call the captchas and lockouts harassment, but I don't think a 3 second delay is in the same category of problem.