Comment on Anubis is awesome and I want to talk aout it

0_o7@lemmy.dbzer0.com ⁨2⁩ ⁨months⁩ ago

• Allero@lemmy.today ⁨2⁩ ⁨months⁩ ago

  Afaik, you can set it up not to have any image, or have any other one.

  source

  • Voroxpete@sh.itjust.works ⁨2⁩ ⁨months⁩ ago

    It’s actually a brilliant monetization model. If you want to use it as is, it’s free, even for large corporate clients.

    If you want to get rid of the puppygirls though, that’s when you have to pay.

    (The absolute Chads at the UN left the puppygirls in, and I have to respect that

    source

    • frongt@lemmy.zip ⁨2⁩ ⁨months⁩ ago

      It’s open source, so you could always just patch it without paying too. But you should support the maintainers if you think they deserve it.

      source
• kilgore_trout@feddit.it ⁨2⁩ ⁨months⁩ ago

  It’s a palette of 10 colours. I would guess it uses an indexed colorspace, reducing the size to a minimum.

  source

  • CameronDev@programming.dev ⁨2⁩ ⁨months⁩ ago

    A HTTP get request is a few hundred bytes. The response is 28KB. Thats 280x. If a large botnet wanted to denial of service an Anubis protected site, requesting that image could be enough.

    Ideally, Anubis should serve as little data as possible until the POW is completed. Caching the POW algorithm (and the image) to a CDN would also mitigate the issue.

    source

    • teolan@lemmy.world ⁨2⁩ ⁨months⁩ ago

      The whole point of Anubis is to not have to go through a CDN to sustain scrapping botnets

      source

      • CameronDev@programming.dev ⁨2⁩ ⁨months⁩ ago

        I dunno that is true, nothing in the docs indicates that it is explicitly anti-CDN. And using a CDN for a static javascript resource and an image isn’t the same as running the entire site through a CDN proxy.

        source
    • kilgore_trout@feddit.it ⁨2⁩ ⁨months⁩ ago

      I might agree, still one could argue that brand recognisability is contributing to the service as well.

      source

      • CameronDev@programming.dev ⁨2⁩ ⁨months⁩ ago

        Definitely, which is why i suggested hosting the image + js on a CDN. Keeps brand awareness, and lets the CDN take the brunt of any malicious activity. with a bit of code-golfing, the data served by Anubis directly prior to POW could be a few hundred bytes, without impacting its functionality.

        source