2 ms·

> I wonder how many cumulative hours of human life have been wasted waiting on Anubis. "How dare that mugging victim fight back". The choice is not between An

> I wonder how many cumulative hours of human life have been wasted waiting on Anubis. "How dare that mugging victim fight back". The choice is not between Anubis and no Anubis, the choice is between Anubis and my website going offline because I can't afford the $400/month that AI scrapers would cost me (yes, I checked, and yes, that's the real figure) if Anubis wasn't in front.

frollogaston 4mo ago
That makes sense, and I believe you, I'm just surprised it really deters the scrapers.
- xena 4mo ago
  If it's dumb and it works, is it really dumb?
  - frollogaston 4mo ago
    No it's not dumb, but I don't get how it manages to be so light still. Like I visit an Anubis-guarded site and barely have to wait. Scrapers really see that little CPU usage or wall time and back off? Or maybe that's just cause I'm not visiting sites that are under attack.
    - saintfire 4mo ago
      It chooses the challenge weight based on signals. If your phone looks like a phone from a residential IP you get a simple challenge. If you then spam requests you might get another, harder, hallenge appear. If you have a data center IP and look like bot traffic you get a hard challenge out the gate. AFAIU after looking at their docs several months ago.
      - frollogaston 4mo ago
        Ah, knowing the type of IP is really advantageous by itself
junior44660 4mo ago
Smarter people have put unique captchas (in form of domain-specific questions) on their websites for long time.
account42 4mo ago
> "How dare that mugging victim fight back". If you would go with that analogy this would be a case of the mugging victim stabbing random bystanders. > The choice is not between Anubis and no Anubis, the choice is between Anubis and my website going offline because I can't afford the $400/month that AI scrapers would cost me (yes, I checked, and yes, that's the real figure) if Anubis wasn't in front. Those aren't the only options and anyone who claims there is no other choice is either dishonest or incompetent.

frollogaston 4mo ago

That makes sense, and I believe you, I'm just surprised it really deters the scrapers.

xena 4mo ago
If it's dumb and it works, is it really dumb?
- frollogaston 4mo ago
  No it's not dumb, but I don't get how it manages to be so light still. Like I visit an Anubis-guarded site and barely have to wait. Scrapers really see that little CPU usage or wall time and back off? Or maybe that's just cause I'm not visiting sites that are under attack.
  - saintfire 4mo ago
    It chooses the challenge weight based on signals. If your phone looks like a phone from a residential IP you get a simple challenge. If you then spam requests you might get another, harder, hallenge appear. If you have a data center IP and look like bot traffic you get a hard challenge out the gate. AFAIU after looking at their docs several months ago.
    - frollogaston 4mo ago
      Ah, knowing the type of IP is really advantageous by itself

junior44660 4mo ago

Smarter people have put unique captchas (in form of domain-specific questions) on their websites for long time.

account42 4mo ago

> "How dare that mugging victim fight back". If you would go with that analogy this would be a case of the mugging victim stabbing random bystanders. > The choice is not between Anubis and no Anubis, the choice is between Anubis and my website going offline because I can't afford the $400/month that AI scrapers would cost me (yes, I checked, and yes, that's the real figure) if Anubis wasn't in front. Those aren't the only options and anyone who claims there is no other choice is either dishonest or incompetent.