• nialv7@lemmy.world
    link
    fedilink
    English
    arrow-up
    34
    ·
    edit-2
    5 days ago

    We had a trust based system for so long. No one is forced to honor robots.txt, but most big players did. Almost restores my faith in humanity a little bit. And then AI companies came and destroyed everything. This is why we can’t have nice things.

  • thatonecoder@lemmy.ca
    link
    fedilink
    English
    arrow-up
    43
    arrow-down
    1
    ·
    6 days ago

    I know this is the most ridiculous idea, but we need to pack our bags and make a new internet protocol, to separate us from the rest, at least for a while. Either way, most “modern” internet things (looking at you, JavaScript) are not modern at all, and starting over might help more than any of us could imagine.

    • Pro@programming.devOP
      link
      fedilink
      English
      arrow-up
      44
      ·
      edit-2
      6 days ago

      Like Gemini?

      From official Website:

      Gemini is a new internet technology supporting an electronic library of interconnected text documents. That’s not a new idea, but it’s not old fashioned either. It’s timeless, and deserves tools which treat it as a first class concept, not a vestigial corner case. Gemini isn’t about innovation or disruption, it’s about providing some respite for those who feel the internet has been disrupted enough already. We’re not out to change the world or destroy other technologies. We are out to build a lightweight online space where documents are just documents, in the interests of every reader’s privacy, attention and bandwidth.

      • thatonecoder@lemmy.ca
        link
        fedilink
        English
        arrow-up
        13
        arrow-down
        1
        ·
        6 days ago

        Yep! That was exactly the protocol on my mind. One thing, though, is that the Fediverse would need to be ported to Gemini, or at least for a new protocol to be created for Gemini.

        • Echo Dot@feddit.uk
          link
          fedilink
          English
          arrow-up
          10
          ·
          6 days ago

          If it becomes popular enough that it’s used by a lot of people then the bots will move over there too.

          They are after data, so they will go where it is.

          One of the reasons that all of the bots are suddenly interested in this site is that everyone’s moving away from GitHub, suddenly there’s lots of appealing tasty data for them to gobble up.

          This is how you get bots, Lana

          • thatonecoder@lemmy.ca
            link
            fedilink
            English
            arrow-up
            1
            ·
            6 days ago

            Yes, I know. But, while trying to find a way to bomb the AI datacenters (/s, hopefully it doesn’t come to this), we can stall their attacks.

        • b000rg@midwest.social
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 days ago

          It shouldn’t be too hard, and considering private key authentication, you could even use a single sign-in for multiple platforms/accounts, and use the public key as an identifier to link them across platforms. I know there’s already a couple proof-of-concept Gemini forums/BBSs out there already. Maybe they just need a popularity boost?

      • vacuumflower@lemmy.sdf.org
        link
        fedilink
        English
        arrow-up
        2
        ·
        6 days ago

        I’ve personally played with Gemini a few months ago, and now want a new Internet as opposed to a new Web.

        Replace IP protocols with something better. With some kind of relative addressing, and delay-tolerant synchronization being preferred to real-time connections between two computers. So that there were no permanent global addresses at all, and no centralized DNS.

        With the main “Web” over that being just replicated posts with tags hyperlinked by IDs, with IDs determined by content. Structured, like semantic web, so that a program could easily use such a post as directory of other posts or a source of text or retrieve binary content.

        With user identities being a kind of post content, and post authorship being too a kind of post content or maybe tag content, cryptographically signed.

        Except that would require to resolve post dependencies and retrieve them too with some depth limit, not just the post one currently opens, because, if it’d be like with bittorrent, half the hyperlinks in found posts would soon become dead, and also user identities would possibly soon become dead, making authorship check impossible.

        And posts (suppose even sites of that flatweb) being found by tags, maybe by author tag, maybe by some “channel” tag, maybe by “name” tag, one can imagine plenty of things.

        The main thing is to replace “clients connecting to a service” with “persons operating on messages replicated on the network”, with networked computers sharing data like echo or ripples on the water. In what would be the general application layer for such a system.

        OK, this is very complex to do and probably stupid.

        It’s also not exactly the same level as IP protocols, so this can work over the Internet, just like the Internet worked just fine, for some people, over packet radio and UUCP or FTN email gates and copper landlines. Just for the Internet to be the main layer in terms of which we find services, on the IP protocols, TCP, UDP, ICMP, all that, and various ones and DNS on application layer, - that I consider wrong, it’s too hierarchical. So it’s not a “replacement”.

        • IndustryStandard@lemmy.world
          link
          fedilink
          English
          arrow-up
          4
          ·
          6 days ago

          IP is the most robust and best protocol humanity ever invented. No other protocol survived the test of time this well. How would you even go about replacing it with decentralization? Something needs to route the PC to the server

          • vacuumflower@lemmy.sdf.org
            link
            fedilink
            English
            arrow-up
            3
            ·
            6 days ago

            Something needs to route the PC to the server

            I don’t want client-server model. I want sharing model. Like with Briar.

            The only kind of “servers” might be relays, like in NOSTR, or machines running 24/7 like Briar mailbox.

            IP. How would I go about replacing it? I don’t know, I think Yggdrasil authors have written something about their routing model, but 1) it’s represented as ipv6, so IP, 2) it’s far over my head, 3) read the previous, I don’t really want to replace it as much as not to make it the main common layer.

            • nymnympseudonym@lemmy.world
              link
              fedilink
              English
              arrow-up
              2
              ·
              6 days ago

              client-server model. I want sharing model. Like with Briar

              Guess what

              Briar itself, and every pure P2P decentralized network where all nodes are identical… are built on Internet Sockets which inherently require one party (“server”) to start listening on a port, and another party (“client”) to start the conversation.

              Briar uses TCP/IP, but it uses Tor routing, which is IMO a smart thing to do

  • Net_Runner :~$@lemmy.zip
    link
    fedilink
    English
    arrow-up
    14
    ·
    6 days ago

    I use Anubis on my personal website, not because I think anything I’ve written is important enough that companies would want to scrape it, but as a “fuck you” to those companies regardless

    That the bots are learning to get around it is disheartening, Anubis was a pain to setup and get running

  • londos@lemmy.world
    link
    fedilink
    English
    arrow-up
    46
    arrow-down
    2
    ·
    7 days ago

    Can there be a challenge that actually does some maliciously useful compute? Like make their crawlers mine bitcoin or something.

      • polle@feddit.org
        link
        fedilink
        English
        arrow-up
        76
        arrow-down
        2
        ·
        7 days ago

        The saddest part is, we thought crypto was the biggest waste of energy ever and then the LLMs entered the chat.

        • 1rre@discuss.tchncs.de
          link
          fedilink
          English
          arrow-up
          22
          arrow-down
          8
          ·
          7 days ago

          At least LLMs produce something, even if it’s slop, all crypto does is… What does crypto even do again?

          • Honytawk@feddit.nl
            link
            fedilink
            English
            arrow-up
            13
            ·
            6 days ago

            It gives people with already too much money a way to invest by gambling without actually helping society.

            • baguettefish@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              1
              ·
              6 days ago

              for the biggest crypto investors it isn’t even really gambling. they use celebrities to hype a memecoin and then rug pull and split the profits harvested from the celebrity’s fans.

            • Echo Dot@feddit.uk
              link
              fedilink
              English
              arrow-up
              5
              ·
              6 days ago

              It also makes it’s fans poorer, which at least is funny, especially since they never learn

          • prole@lemmy.blahaj.zone
            link
            fedilink
            English
            arrow-up
            4
            ·
            edit-2
            6 days ago

            Monero allows you to make untraceable transactions. That can be useful.

            The encryption schemes involved (or what I understand of them, at least) are pretty rad imo. That’s why it interests me.

            Still, it’s proof of work, which is not great.

            • 1rre@discuss.tchncs.de
              link
              fedilink
              English
              arrow-up
              3
              ·
              6 days ago

              Sure, Monero is good for privacy-focused applications, but it’s a fraction of the market and the larger coins aren’t particularly any less tracable than virtual temporary payment cards, so Monero (and other privacy-centric coins) get overshadowed by the garbage coins.

              Same with AI, where non-LLM models are having a huge impact in medicine, chemistry, space exploration and more, but because tech bros are shouting about the objectively less useful ones, it brings down the reputation of the entire industry.

      • kameecoding@lemmy.world
        link
        fedilink
        English
        arrow-up
        39
        arrow-down
        6
        ·
        7 days ago

        Bro couldn’t even bring himself to mention protein folding because that’s too socialist I guess.

        • londos@lemmy.world
          link
          fedilink
          English
          arrow-up
          19
          ·
          edit-2
          7 days ago

          You’re 100% right. I just grasped at the first example I could think of where the crawlers could do free work. Yours is much better. Left is best.

        • andallthat@lemmy.world
          link
          fedilink
          English
          arrow-up
          15
          ·
          edit-2
          7 days ago

          LLMs can’t do protein folding. A specifically-trained Machine Learning model called AlphaFold did. Here’s the paper.

          Developing, training and fine tuning that model was a research effort led by two guys who got a Nobel for it. Alphafold can’t do conversation or give you hummus recipes, it knows shit about the structure of human language but can identify patterns in the domain where it has been specifically and painstakingly trained.

          It wasn’t “hey chatGPT, show me how to fold a protein” is all I’m saying and the “superhuman reasoning capabilities” of current LLMs are still falling ridiculously short of much simpler problems.

        • NeilBrü@lemmy.world
          link
          fedilink
          English
          arrow-up
          11
          arrow-down
          16
          ·
          edit-2
          6 days ago

          Hey dipshits:

          The number of mouth-breathers who think every fucking “AI” is a fucking LLM is too damn high.

          AlphaFold is not a language model. It is specifically designed to predict the 3D structure of proteins, using a neural network architecture that reasons over a spatial graph of the protein’s amino acids.

          • Every artificial intelligence is not a deep neural network algorithm.
          • Every deep neural network algorithm is not a generative adversarial network.
          • Every generative adversarial network is not a language model.
          • Every language model is not a large language model.

          Fucking fart-sniffing twats.

          $ ./end-rant.sh

      • londos@lemmy.world
        link
        fedilink
        English
        arrow-up
        10
        arrow-down
        1
        ·
        7 days ago

        I went back and added “malicious” because I knew it wasn’t useful in reality. I just wanted to express the AI crawlers doing free work. But you’re right, bitcoin sucks.

            • Echo Dot@feddit.uk
              link
              fedilink
              English
              arrow-up
              1
              ·
              6 days ago

              Is it? Don’t you risk losing a rather large percentage of the value.

              Just by cars or something as they are much better at keeping their value. Also if somebody asks where did you get all this money from you can just point to the car and say, I sold that.

    • T156@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      7 days ago

      Not without making real users also mine bitcoin/avoiding the site because their performance tanked.

    • nymnympseudonym@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 days ago

      The Monero community spent a long time trying to find a “useful PoW” function. The problem is that most computations that are useful are not also easy to verify as correct. javascript optimization was one direction that got pursued pretty far.

      But at the end of the day, a crypto that actually intends to withstand attacks from major governments requires a system that is decentralized, trustless, and verifiable, and the only solutions that have been found to date involve algorithms for which a GPU or even custom ASIC confers no significant advantage over a consumer-grade CPU.

    • BlameTheAntifa@lemmy.world
      link
      fedilink
      English
      arrow-up
      4
      ·
      6 days ago

      The problem is that hundreds of bad actors doing the same thing independently of one another means it does not qualify as a DDoS attack. Maybe it’s time we start legally restricting bots and crawlers, though.

  • zbyte64@awful.systems
    link
    fedilink
    English
    arrow-up
    30
    ·
    7 days ago

    Is there nightshade but for text and code? Maybe my source headers should include a bunch of special characters that then give a prompt injection. And sprinkle some nonsensical code comments before the real code comment.

    • KubeRoot@discuss.tchncs.de
      link
      fedilink
      English
      arrow-up
      5
      ·
      6 days ago

      I think the issue is that text uses comparatively very little information, so you can’t just inject invisible changes by changing the least insignificant bits - you’d need to change the actual phrasing/spelling of your text/code, and that’d be noticable.

    • Honytawk@feddit.nl
      link
      fedilink
      English
      arrow-up
      2
      ·
      6 days ago

      Maybe like a bunch of white text at 2pt?

      Not visible to the user, but fully readable by crawlers.

        • Apytele@sh.itjust.works
          link
          fedilink
          English
          arrow-up
          3
          ·
          6 days ago

          Well if it’s a prompt injection to fuck with llms you don’t want any users having to read it anyway, vision impaired or no.

          • ramjambamalam@lemmy.ca
            link
            fedilink
            English
            arrow-up
            8
            ·
            6 days ago

            You missed my point. A prompt injection to fuck with LLMs would be read by a visually impaired user’s screen reader.

  • mfed1122@discuss.tchncs.de
    link
    fedilink
    English
    arrow-up
    16
    ·
    edit-2
    6 days ago

    Okay what about…what about uhhh… Static site builders that render the whole page out as an image map, making it visible for humans but useless for crawlers 🤔🤔🤔

      • mfed1122@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        15
        ·
        6 days ago

        I wasn’t being totally serious, but also, I do think that while accessibility concerns come from a good place, there is some practical limitation that must be accepted when building fringe and counter-cultural things. Like, my hidden rebel base can’t have a wheelchair accessible ramp at the entrance, because then my base isn’t hidden anymore. It sucks that some solutions can’t work for everyone, but if we just throw them out because it won’t work for 5% of people, we end up with nothing. I’d rather have a solution that works for 95% of people than no solution at all. I’m not saying that people who use screen readers are second-class citizens. If crawlers were vision-based then I might suggest matching text to background colors so that only screen readers work to understand the site. Because something that works for 5% of people is also better than no solution at all. We need to tolerate having imperfect first attempts and understand that more sophisticated infrastructure comes later.

        But yes my image map idea is pretty much a joke nonetheless

    • Echo Dot@feddit.uk
      link
      fedilink
      English
      arrow-up
      7
      ·
      6 days ago

      AI is pretty good at OCR now. I think that would just make it worse for humans while making very little difference to the AI.

      • mfed1122@discuss.tchncs.de
        link
        fedilink
        English
        arrow-up
        5
        ·
        6 days ago

        The crawlers are likely not AI though, but yes OCR could be done effectively without AI anyways. This idea ultimately boils down to the same hope Anubis had of making the processing costs large enough to not be worth it.

        • nymnympseudonym@lemmy.world
          link
          fedilink
          English
          arrow-up
          6
          ·
          6 days ago

          OCR could be done effectively without AI

          OCR has been neural nets even before convolutional networks emerged in the 2010s

          • mfed1122@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            3
            ·
            6 days ago

            Yeah you’re right, I was using AI in the colloquial modern sense. My mistake. It actually drives me nuts when people do that. I should have said “without compute-heavy AI”.

        • interdimensionalmeme@lemmy.ml
          link
          fedilink
          English
          arrow-up
          2
          ·
          6 days ago

          Do you know how trivial it is to screenshot a website and push it through an OCR ?

          This battle is completely unwinnable, just put a full dumb.zip of the public data on the front door and nobody will waste their time with a scrapper.

          Is the data public or is it not ? At this point all that you’re doing anyway is entrench the power of openai, google and facebook while starving any possible alternative.

          Anubis will never work, no version of anubis will ever be anything more than a temporary speed bump.

          • mfed1122@discuss.tchncs.de
            link
            fedilink
            English
            arrow-up
            1
            ·
            6 days ago

            Yeah, I do. I’m just grasping at straws. But you’re right, the only real solution, ironically, is to have non-open sites where you need accounts to view content. I wouldn’t mind seeing some private phpbb forums though.

  • wetbeardhairs@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    35
    ·
    7 days ago

    Gosh. Corporations are rampantly attempting to access resources so they can perform copyright infringement en-masse. I wonder if there is a legal mechanism to stop them? Oh, no there isn’t because our government is fully corrupted.

    • aquovie@lemmy.cafe
      link
      fedilink
      English
      arrow-up
      9
      ·
      7 days ago

      I think, in this particular case, it’s aggressive apathy/incompetence and not malice. Remember, Trump didn’t even know what Nvidia was.

      AI’s don’t have a skin color or use the bathroom so you can’t whip your cult into a frenzy by Othering it. You can’t solidify your fascism by getting bogged down in the details of IP law.

        • Furbag@lemmy.world
          link
          fedilink
          English
          arrow-up
          3
          ·
          7 days ago

          Yeah, I was gonna say… there are definitely way to push anything AI related into an unrelated existing outgroup. Just say the liberals are using AI to steal elections and BAM, just like that you’ve got all the MAGA zombies hating AI.

      • 0x0@lemmy.zip
        link
        fedilink
        English
        arrow-up
        1
        ·
        6 days ago

        Trump didn’t even know what Nvidia was.

        I think you mean navidia.

  • Spaz@lemmy.world
    link
    fedilink
    English
    arrow-up
    18
    ·
    edit-2
    6 days ago

    Is there a migration tool? If not would be awesome to migrate everything including issues and stuff. Bet even more people would move.

    • BlameTheAntifa@lemmy.world
      link
      fedilink
      English
      arrow-up
      17
      ·
      7 days ago

      Codeberg has very good migration tools built in. You need to do one repo at a time, but it can move issues, releases, and everything.

    • dodos@lemmy.world
      link
      fedilink
      English
      arrow-up
      3
      ·
      7 days ago

      There are migration tools, but not a good bulk one that I could find. It worked for my repos except for my unreal engine fork.

  • Wispy2891@lemmy.world
    link
    fedilink
    English
    arrow-up
    14
    ·
    7 days ago

    Question: those artificial stupidity bots want to steal the issues or want to steal the code? Because why they’re wasting a lot of resources scraping millions of pages when they can steal everything via SSH (once a month, not 120 times a second)

  • r00ty@kbin.life
    link
    fedilink
    arrow-up
    13
    ·
    7 days ago

    For mbin I managed to kill the attack of the scrapers only using cloudflare managed challenge for all except to fediverse post endpoints, from fediverse ua agents on certain get endpoints. Managed challenge on everything else.

    So far, they’ve not gotten past it. But, a matter of time.

    • PrettyFlyForAFatGuy@feddit.uk
      link
      fedilink
      English
      arrow-up
      18
      ·
      7 days ago

      man, you’d think they’d just use the actual activitypub protocol to inhale all that data at once and not bother with costly scraping.

      This A aint very I

      • Wispy2891@lemmy.world
        link
        fedilink
        English
        arrow-up
        6
        ·
        7 days ago

        Same for all the WordPress blogs, by default in all of them there’s an API without authentication that lets you download ALL the posts in an easy JSON.

        Dear artificial stupidity bot… WHY THE FUCK ARE YOU FUCKING SCRAPING THE WHOLE PAGE 50 TIMES A SECOND???

      • r00ty@kbin.life
        link
        fedilink
        arrow-up
        2
        ·
        7 days ago

        Well the posts to inbox are generally for incoming info. Yes, there’s endpoints for fetching objects. But, they don’t work for indexing, at least not on mbin/kbin. If you have a link, you can use activitypub to traverse upwards from that object to the root post. But you cannot iterate down to child comments from any point.

        The purpose is that say I receive an “event” from your instance. You click like on a post I don’t have on my instance. Then the like event has a link to the object for that on activitypub. If I fetch that object it will have a link to the comment, if I fetch the comment it will have the comment it was in reply to, or the post. It’s not intended to be used to backfill.

        So they do it the old fashioned way, traversing the human side links. Which is essentially what I lock down with the managed challenge. And this is all on the free tier too.

    • aquovie@lemmy.cafe
      link
      fedilink
      English
      arrow-up
      19
      ·
      7 days ago

      You need to properly detect that they’re bots first and then they’ll just figure out how to spoof that. Then you’re back to square one.

      Abstractly, POW doesn’t need to determine if you’re a bot or not. To make a request, as a human or bot, you need to pay in cpu-time. The hope is that the cost is not so high that a human notices very much but for a bot trying to hoover up data as fast as possible, the aggregate cost is high.

      I think the more horrifying aspect is that they’ll just build ever bigger datacenters to crunch POW tests faster and the carbon cost will skyrocket even more.

      • mic_check_one_two@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        12
        ·
        7 days ago

        Exactly. Imagine needing to pay a penny for every request. Not a huge deal for someone who only makes one or two requests per year. But if you’re running a bot farm and making tens of millions of requests per day, you’ll quickly find that your operating costs have skyrocketed. That’s basically the idea behind Anubis; Make someone pay in CPU time, so the legit users don’t really notice but bots quickly eat up all of their servers’ CPU.

      • nialv7@lemmy.world
        link
        fedilink
        English
        arrow-up
        3
        arrow-down
        7
        ·
        7 days ago

        Oh I haven’t even considered the carbon aspect. Anubis is an even worse idea than I previously thought…