Anubis rarely ever annoys me (I still prefer it over cloudflare's Mitm) but this specific visit feels almost vindictive. It used half my CPU cores at full blast for three straight minutes.

It seems to be effective since I can't really "bypass" it with extensions, so AI crawlers probably can't either, but damn there really should be an option to complete a manual captcha or email the administrators to complain.

As I'm typing this the challenge is still running xD

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 3 months ago (4 children)

It's not about stopping the bots, it's about slowing them down

  • source
  • parent
  • hideshow 4 child comments
  • [–] 2 points 3 months ago* (3 children)

    But once the challenge is completed, they have the token and can scrape until it's expired right? So if it's just taking them a bit more time to get the auth token, what is it solving?

    Example: the token lasts for a week and it takes 30 seconds to get the token.

  • source
  • parent
  • hideshow 3 child comments
  • [–] 5 points 3 months ago* (last edited 3 months ago) (1 child)

    I would assume the token is only good for a few page accesses.

    E.g. 500 would mean that a person would see this extremely rarely, and still block a bot from crashing the site.

  • source
  • parent
  • hideshow 1 child comment