Skip Navigation

InitialsDiceBearhttps://github.com/dicebear/dicebearhttps://creativecommons.org/publicdomain/zero/1.0/„Initials” (https://github.com/dicebear/dicebear) by „DiceBear”, licensed under „CC0 1.0” (https://creativecommons.org/publicdomain/zero/1.0/)D
Posts
3
Comments
929
Joined
2 yr. ago

  • It's a religious thing in general.

    In my country there's examples of religious sites changing hands several times.

    For instance the San Vicente Mártir Church, were transformed into Cordoba Mosque when the Muslims invaded the Iberian peninsula, and then after the Reconquista Christians turned it into a Cathedral.

    Religion is about power. And you cannot let the old power to preserve their place if you want your new power to hold control.

  • If you just wait for another geological age we will build hyper-gea, I promise.

  • Having a whole in your roof is a classic construction gotcha.

  • I am skeptical about the real level of protection that Anubis really provides.

    At the end is an automated test. Meaning that any machine could easily solve it.

    Most "attackers" wont bother solving it because they don't really care. But if they would want they could. It's sort of protection by obscurity.

    The more Anubis it's used the more we see attacks that actually equip a way to solve the challenges. Then is when Anubis up the challenge and the battle begin, between how much can Anubis up the challenge so normal users can still browse and how much cost the attacker is willing to eat.

    Giving that these attackers tend to have high budgets I'm not that certain about its actual capabilities to reject a targeted ddos.

    As for crawling for big data. I do think that it does nothing here. Companies willing yo scrape big amounts of data, for AI training or other purposes, have massive budgets and the electricity cost of solving the JavaScript challenges become nothing in comparison. They also doesn't need ro deny the service so they could spread the scrape to keep the challenge low reducing the cost even more.

    Once again, positive results we currently see in practice I believe that are caused just because most scrappers and ddos attackers are just blindly attacking and doesn't really equip themselves for Anubis. Protection by obscurity. But a well equiped attacker I don't think it would have that much trouble getting past it, specially for scrapping, or other type of bot attacks that could be slowed down.

  • That's just protection by obscurity then. Any targeted attack could do that challenge at zero cost.

  • Both have different purposes.

    The Anubis challenge could be easily and cheapely solved by any JavaScript engine. It only becomes expensive for a massive number of petitions.

    If for instance you would want to register a few thousand emails in a forum anubis is not going to stop anyone.

    In fact I'm sceptical about really having an impact. As even when the challenge goes up in difficulty is not that expensive compared with all other cost related to these kinds of attacks or massive scrapes.

    My suspicion is that most websites using Anubis see a positive impact because most crawlers and probers doesn't take into account Anubis, so they don't even attach a way to solve the challenge and they directly go into the "rejected by anubis" bucket. But any targeted attack I suppose would pass easily, either by doing a slow attack not to up the challenge very much, or just eating the cost. Imagine an AI company that using nuclear plants for training data, the cost of solving a few million JavaScript challenges is nothing in comparison.

    As a DDOS mitigation it helps, but once again it's just a matter of eating the cost by the attacker. And the attack will still deny some service as the challenge go up and new legit users would also need to solve harder challenges.

  • Not only I wouldn't survive I would be that stupid character that makes the beloved character die because their idiocracy :3

  • Now our advertisement overlords won't be pleased.

  • Deleted

    Permanently Deleted

    Jump
  • If pi is not exactly three why hasn't my bridge fallen?

    Check mate mathematicians.

  • When you are legally considered that in your country's law. Any other distinction is fuzzy and unlikely to be really useful.

  • Just don't pay for it and be done with it.

    Enjoy Harry Potter, just don't give money to scumbag author.

  • Deleted

    Permanently Deleted

    Jump
  • Are we landmass shaming now?

  • As a great scientist once said:

    "There's no scientific consensus that life is important" - Professor Hubert J. Farnsworth

  • If you are the only user and don't need to use those apps in devices you don't own a vpn is the way to go.

    If not. Depending the number of users you could do some heavy ip geoblocking to at least reduce the exposed surface.

    There are a few services I have just like 3 IPs allowed to get a response from caddy, any other ip gets 403 error.

  • That image have been ruling around for many many years before AI diffusion were a thing.

    It was just normal digital edit.

  • Does it work with android and TV apps?

    I tried long ago and failed.

  • Depends a lot of each movie or show.

    Anyway the worst are always translations from japanese. Maybe it's a language especially difficult to translate, idk.

  • Deleted

    Permanently Deleted

    Jump
  • I consume it. I don't pay for it but I do consume it.

  • sudo mkswap /swapfile 64G

    Problem?