Technology

246 readers

517 users here now

Share interesting Technology news and links.

Rules:

No paywalled sites at all.
News articles has to be recent, not older than 2 weeks (14 days).
No videos.
Post only direct links.

To encourage more original sources and keep this space commercial free as much as I could, the following websites are Blacklisted:

Al Jazeera.
NBC.
CNBC.
Substack.
Tom's Hardware.
ZDNet.
TechSpot.
Ars Technica.
Vox Media outlets, with exception for Axios(Due to being ad free.)
Engadget.
TechCrunch.
Gizmodo.
Futurism.
PCWorld.
ComputerWorld.
Mashable.

More sites will be added to the blacklist as needed.

Encouraged:

Archive links in the body of the post.
Linking to the direct source, instead of linking to an article talking about the source.

founded 2 months ago

MODERATORS

Pro@programming.dev

Anubis now supports non-JS challenges (anubis.techaro.lol)

submitted 6 days ago by Pro@programming.dev to c/Technology@programming.dev

5 comments fedilink hide all child comments

you are viewing a single comment's thread
view the rest of the comments

[–] moonpiedumplings@programming.dev 2 points 5 days ago* (last edited 5 days ago) (1 children)

No, they also added a non webassembly non js based challenge as well.

Anubis finally has support for running without client-side JavaScript thanks to the Meta Refresh challenge

[–] refalo@programming.dev 1 points 4 days ago* (last edited 4 days ago) (1 children)

Yes but it doesn't actually do any work or verify anything... crawlers could follow the refresh URL immediately and get right through. And I'm skeptical that not having to actually solve a PoW could make a meaningful difference, especially if the delay from the meta refresh can be easily bypassed.

[–] moonpiedumplings@programming.dev 1 points 3 days ago (1 children)

This site doesn't seem to let me link to a specific comment: https://lobste.rs/s/aa7ske/anubis_now_supports_non_js_challenges

But on that page, the creator has a comment explaining that the meta refresh challenge does more than just reload the page and wait. They explain that it actually checks if the browser supports modern desktop browser features like gzip encoding, cookies, and more that's not documented.

[–] refalo@programming.dev 1 points 3 days ago* (last edited 3 days ago)

Yes but even curl easily passes those tests by default, regardless of the user-agent. I guess I'm just skeptical of how much effect it really has in the real world... you see a lot of people saying "oh yea it works great", but they don't tell you what the before and after bot traffic actually was.

Happen to be proven wrong though if anyone has some hard data.