Preventing access by requiring an account, with strict access rules can curb the vast majority of scraping, then your only bad actors are the rich venture capitalists.
scarabine@lemmynsfw.com
on 23 Sep 2024 18:04
nextcollapse
I have an idea. Why don’t I put a bunch of my website stuff in one place, say a pdf, and you screw heads just buy that? We’ll call it a “book”
gaylord_fartmaster@lemmy.world
on 23 Sep 2024 18:36
nextcollapse
They’re already ignoring robots.txt, so I’m not sure why anyone would think they won’t just ignore this too. All they have to do is get a new IP and change their useragent.
redditReallySucks@lemmy.dbzer0.com
on 24 Sep 2024 07:32
collapse
Cloudflare is protecting a lot of sites from scraping with their POW captchas. They could allow people who pay
magic_smoke@links.hackliberty.org
on 23 Sep 2024 23:40
collapse
As someone who uses invidious daily I’ve always been of the belief if you don’t want something scraped, then maybe don’t upload it to a public web page/server.
General_Effort@lemmy.world
on 24 Sep 2024 10:59
nextcollapse
There’s probably not many people here who understand the connection between Invidious and scraping.
Justas@sh.itjust.works
on 26 Sep 2024 12:00
collapse
Imagine a company that sells a lot of products online. Now imagine a scraping bot coming at peak sales hours and looking at each product list and page separately for said service. Now realise that some genuine users will have a worse buying experience because of that.
magic_smoke@links.hackliberty.org
on 26 Sep 2024 13:15
collapse
Yeah there’s way easier ways to combat that without trying to prevent scraping.
threaded - newest
How can I do this without Cloudflare?
Put a page on your website saying that scrapping your website costs [insert amount] and block the bots otherwise.
The hard part is reliably detecting the bots
Also you don't want to block legit search engines that are not scraping your data for AI.
Again: hard to differentiate all those different bots, because you have to trust that they are what they say they are, and they often are not
Instead of blocking bots on user agent.. I'm blocking full IP ranges: https://gitlab.melroy.org/-/snippets/619
It certainly can be a cat and mouse game, but scraping at scale tends to be ahead of the curve of the security teams. Some examples:
brightdata.com
oxylabs.io
Preventing access by requiring an account, with strict access rules can curb the vast majority of scraping, then your only bad actors are the rich venture capitalists.
I have an idea. Why don’t I put a bunch of my website stuff in one place, say a pdf, and you screw heads just buy that? We’ll call it a “book”
They’re already ignoring robots.txt, so I’m not sure why anyone would think they won’t just ignore this too. All they have to do is get a new IP and change their useragent.
Cloudflare is protecting a lot of sites from scraping with their POW captchas. They could allow people who pay
As someone who uses invidious daily I’ve always been of the belief if you don’t want something scraped, then maybe don’t upload it to a public web page/server.
There’s probably not many people here who understand the connection between Invidious and scraping.
Imagine a company that sells a lot of products online. Now imagine a scraping bot coming at peak sales hours and looking at each product list and page separately for said service. Now realise that some genuine users will have a worse buying experience because of that.
Yeah there’s way easier ways to combat that without trying to prevent scraping.
Maybe don’t ship 20 units to the same address.