6 ms·
What about making it slow? One byte at a time for example while keeping the connection open
by a_c 3y ago
What about making it slow? One byte at a time for example while keeping the connection open
- happymellon 3y agoA slow stream that never ends?
- SteveNuts 3y agoThis would be considered a Slow Loris attack, and I'm actually curious how scrapers would handle it. I'm sure the big players like Google would deal with it gracefully.
- throw_a_grenade 3y agoYou just set limits on everything (time, buffers, ...), which is easier said than done. You need to really understand your libraries and all the layers down to the OS, because its enough to have one abstraction that doesn't support setting limits and it's an invitation for (counter-)abuse.
- starttoaster 3y agoDoesn't seem like it should be all that complex to me assuming the crawler is written in a common programming language. It's a pretty common coding pattern for functions that make HTTP requests to set a timeout for requests made by your HTTP client. I believe the stdlib HTTP library in the language I usually write in actually sets a default timeout if I forget to set one.
- Calzifer 3y agoThose are usually connection and no-data timeouts. A total time limit is in my experience less common.
- gtirloni 3y agoHere you go (1 req/min, 10 bytes/sec), please report results :) http { limit_req_zone $binary_remote_addr zone=ten_bytes_per_second:10m rate=1r/m; server { location / { if ($http_user_agent = "mimo") { limit_req zone=ten_bytes_per_second burst=5; limit_rate 10; } } } }
- beau_g 3y agoScrapers of the future won't be ifElse logic, they will be LLM agents themselves. The slow loris robots.txt has to provide an interface to it's own LLM, which engages the scraper LLM in conversation, aiming to extend it as long as possible. "OK I will tell you whether or not I can be scraped. BUT FIRST, listen to this offer. I can give you TWO SCRAPES instead of one, if you can solve this riddle."
- iosguyryan 3y agoCan I interest you in a scrape-share with Claude?
- reasonabl_human 2y agoSolid use case for Saul Goodman LLM alignment
- Phelinofist 3y agoSounds like endlessh
- bityard 3y agoThat would make it a tarpit, a very old technique to combat scrapers/scanners