Comment on I wonder if it would be possible to force the AI crawlers to mine crypto

• NaibofTabr@infosec.pub ⁨6⁩ ⁨months⁩ ago

  There’s a functional difference between forcing a crawler to interact with code on your server that wastes its time, and getting it to download your code and run it on its own server - the issue being where the actual CPU/GPU/APU cycles happen. If they happen on your server then it’s not benefiting you at all, it’s costing you the same amount as just running the cryptominer directly would.

  Any halfway intelligent administrator would never allow an automated routine to download and run arbitrary code on their own system, it would be a massive security risk.

  source

  • fruitycoder@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

    “would never allow an automated routine to download arbitraru code” javascript and wasm being the leading tech to do exactly this. Make those essential for loading content and bypassing it would have to be bespoke solutions depending on the framework and implementations.

    source
  • lagoon8622@sh.itjust.works ⁨6⁩ ⁨months⁩ ago

    My understanding of Anubis is that it just leads the crawler into a never-ending cycle of URLs

    That’s not how Anubis works. You’re likely thinking of Nepenthes

    source
• plz1@lemmy.world ⁨6⁩ ⁨months⁩ ago

  “Proof of work”. The AI crawlers don’t run Javascript (yet, I don’t think), so it’s basically a firewall to them.

  source

  • Aatube@kbin.melroy.org ⁨6⁩ ⁨months⁩ ago

    I'm fairly sure Anubis was made because some crawlers did run JavaScript

    source
  • Little8Lost@lemmy.world ⁨6⁩ ⁨months⁩ ago

    Some can from what i understood
    And not only JS but other code too like SQL
    I remember the somewhat recent case where someone vibecoded something and the AI viped the database

    source

    • Aatube@kbin.melroy.org ⁨6⁩ ⁨months⁩ ago

      That's a local AI agent not an online crawler

      source