3 ms·
Do you think that, if this behavior of Anubis gets well-known and Anubis cookies are specifically handled to avoid pathological PoW checks, does Anubis need a s
by lifthrasiir 2y ago
Do you think that, if this behavior of Anubis gets well-known and Anubis cookies are specifically handled to avoid pathological PoW checks, does Anubis need a significant rework? Because if it's indeed true this hack wouldn't last much longer and I have no further idea to avoid user-visible annoyances.
- solid_fuel 2y agoWell, if they rework things so that requests all originate from the same IP address or a small set of addresses, then regular IP-based rate limits should work fine right? The point is just to stop what is effectively a DDoS because of shitty web crawlers, not to stop the crawling entirely.
- lifthrasiir 2y ago> Well, if [...], then regular IP-based rate limits should work fine right? I'm not sure. IP-based rate limits have a well-known issue with shared public IPs for example. Technically they are also more resource-intensive than cryptographic approaches too (but I don't think that's not a big issue in IPv4).
- dharmab 2y ago> then regular IP-based rate limits should work fine right? These are also harmful to human users, who are often behind CGNAT and may be sharing a pool of IPs with many thousands of other ISP subscribers.