Partisanship is a cancer. Inaction is a choice.
Singular they. Or whatever you like, I won't take offence.Proud member of the Banned By Tesseract Club.
Branch on every commit. Never delete. If something needs to be rolled back, merge it back into HEAD. Conflict resolution only through melee combat.
It's a joke.
The design is very human. All you need to do is close all tabs where a Microsoft service is potentially running, find all the cookies used by Microsoft's domains (there are only like six of them) and delete them, then restart the browser.
Yes Man would never refuse to help you commit tax fraud.
Crawlers don't have to follow conventions or specifications. If one has a
setTimeoutimplementation that doesn't wait the specified amount of time and simply executes the callback immediately, it defeats the system. Proof-of-work is meant to ensure that it's impossible to get around the time factor because of computational inefficiency.Anubis is an emergency solution against the flood of scrapers deployed by massive AI companies. Everybody wishes it wasn't necessary.
Bro is also concerned about attacks on exposed well-known ports, in which case bro can use Tailscale Funnel to expose a service without exposing a port. Besides, bro can make up bro's own mind.
Consider Tailscale. It's a mesh VPN based on Wireguard that uses a hosted service to manage keys and devices. It works without having to expose any ports on the firewall, and can expose a service through a relay server.
Some people will say that you shouldn't trust it because company bad, but you should give it a try and make up your own mind. If you're feeling adventurous, you can install Headscale on a VPS to serve as a control server.
It assumes that we sites are under constant ddos
It is literally happening. https://www.youtube.com/watch?v=cQk2mPcAAWo https://thelibre.news/foss-infrastructure-is-under-attack-by-ai-companies/
It assumes that anubis is effective against ddos attacks
It's being used by some little-known entities like the LKML, FreeBSD, SourceHut, UNESCO, and the fucking UN, so I'm assuming it probably works well enough. https://policytoolbox.iiep.unesco.org/ https://xeiaso.net/notes/2025/anubis-works/
anti-AI wave
Oh, you're one of those people. Enough said. (edit) By the way, Anubis' author seems to be a big fan of machine learning and AI.
(edit 2 just because I'm extra cross that you don't seem to understand this part)
Do you know what a web crawler does when a process finishes grabbing the response from the web server? Do you think it takes a little break to conserve energy and let all the other remaining processes do their thing? No, it spawns another bloody process to scrape the next hyperlink.
- A web server that can't discriminate between a request made by a human and one made by a machine has to handle all requests. It may not be an issue for large companies like Amazon or Microsoft, but small websites will suffer timeouts and outages.
- Without a locally hosted solution like Anubis, small websites would have to move behind a large centralized service like Cloudflare.
- Otherwise they might not be able to continue operating and only large corporate-backed services like Twitter and Reddit would survive.
The alternative is having to choose between Reddit and Cloudflare. Does that look "free" and "open" to you?
Anubis is a simple anti-scraper defense that weighs a web client's soul by giving it a tiny proof-of-work workload (some calculation that doesn't have an efficient solution, like cryptography) before letting it pass through to the actual website. The workload is insignificant for human users, but very taxing for high-volume scrapers. The calculations are done on the client's side using Javascript code.
(edit) For clarification: this works because the computation workload takes a relatively long time, not because it bogs down the CPU. Halting each request at the gate for only a few seconds adds up very quickly.
Recently, the FSF published an article that likened Anubis to malware because it's basically arbitrary code that the user has no choice but to execute:
[...] The problem is that Anubis makes the website send out a free JavaScript program that acts like malware. A website using Anubis will respond to a request for a webpage with a free JavaScript program and not the page that was requested. If you run the JavaScript program sent through Anubis, it will do some useless computations on random numbers and keep one CPU entirely busy. It could take less than a second or over a minute. When it is done, it sends the computation results back to the website. The website will verify that the useless computation was done by looking at the results and only then give access to the originally requested page.
Here's the article, and here's aussie linux man talking about it.
I can't believe it. The incident has actually been reported!
I don't use Caddy, but it seems like it tried to generate and write a TLS certificate into
/usr/local, but didn't have the necessary permissions. Basically it tried to usesudo tee ...to write a file. Is Caddy running in a container? If it is, you might need to create a volume at/usr/local/share/ca-certificates. If not in a container, you'll need to grant thecaddyuser write permissions in that directory.But to answer your question directly, it's not a cause for concern. You're not getting hacked, it's just a configuration error.
- JumpRemoved
Turn linux server into a router?
Do not do that. You need to set up VLANs and proper separation between them on both the switch and the router, assuming the switch even supports tagged trunk lines. If you don't, you're just connecting all of your hosts to the unfiltered internet.
- JumpRemoved
Turn linux server into a router?
Yes, that will be enough. You can also use a single port on the NIC and the one on the motherboard if it can handle the ethernet speed you want.
This is my network setup on Proxmox:
vmbr0is a bridge that has a single port going to the modem. The OPNSense VM's first virtual interface is connected to this and configured as a WAN interface. Nothing else connects to this bridge as it is exposed to the internet.vmbr1also has a single port that goes to the physical switch. OPNSense's second interface connects to it as a LAN port, as well as every other VM and container running on the server. - JumpRemoved
Turn linux server into a router?
You can use OPNSense inside a virtual machine. You can use QEMU or install the Proxmox toolkit over Debian to manage it. I've been using this setup for years without issue.
You'll have to create a bridge network for the WAN and the LAN interface, connect them to the VM, then configure the virtual interfaces inside OPNSense.
Please share those options, don't keep them secret.
PVE running on a pile of e-waste. Most of the parts are leftovers from my parents' old PC that couldn't handle Win10. Proxmox loves it. Even the 10GB mis-matched DDR3 memory. The only full VM is OPNSense (formerly pfSense), everything else runs inside Debian containers. It only struggles when Jellyfin has to transcode something because I don't have a spare GPU.
I let the interns handle those. If they survive, they get bragging rights.