frontpage.
newsnewestaskshowjobs

Made with ♥ by @iamnishanth

Open Source @Github

fp.

Open in hackernews

Guarding My Git Forge Against AI Scrapers

https://vulpinecitrus.info/blog/guarding-git-forge-ai-scrapers/
25•todsacerdoti•2h ago

Comments

pabs3•1h ago
> the difference in power usage caused by scraping costs us ~60 euros a year
dirkc•1h ago
I'm not 100% against AI, but I do cheer loudly when I see things like this!

I'm also left wondering about what other things you could do? For example - I have several friends that built their own programming languages, I wonder what the impact would be if you translate lots of repositories to your own language and host it for bots to scrape? Could you introduce sufficient bias in a LLM to make an esoteric programming language popular?

zwnow•46m ago
> Could you introduce sufficient bias in a LLM to make an esoteric programming language popular?

Wasn't there a study a while back showing that a small sample of data is good enough to poison an LLM? So I'd say it for sure is possible.

hashar•44m ago
I do not understand why the scrappers do not do it in a smarter way: clone the repositories and fetches from there on a daily or so basis. I have witnessed one going through every single blame and log links across all branches and redoing it every few hours! It sounds like they did not even tried to optimize their scrappers.
FieryMechanic•40m ago
The way most scrapers work (I've written plenty of them) is that you just basically get the page and all the links and just drill down.
tigranbs•36m ago
And obviously, you need things fast, so you parallelize a bunch!
ACCount37•30m ago
Because that kind of optimization takes effort. And a lot of it.

Recognize that a website is a Git repo web interface. Invoke elaborate Git-specific logic. Get the repo link, git clone it, process cloned data, mark for re-indexing, and then keep re-indexing the site itself but only for things that aren't included in the repo itself - like issues and pull request messages.

The scrapers that are designed with effort usually aren't the ones webmasters end up complaining about. The ones that go for quantity over quality are the worst offenders. AI inference-time data intake with no caching whatsoever is the second worst offender.

immibis•28m ago
Because they don't have any reason to give any shits. 90% of their collected data is probably completely useless, but they don't have any incentive to stop collecting useless data, since their compute and bandwidth is completely free (someone else pays for it).

They don't even use the Wikipedia dumps. They're extremely stupid.

Actually there's not even any evidence they have anything to do with AI. They could be one of the many organisations trying to shut down the free exchange of knowledge, without collecting anything.

captn3m0•35m ago
I switched to rgit instead of running Gitea.
ArcHound•34m ago
Seems like you're cooking up a solid bot detection solution. I'd recommend adding JA3/JA4+ into the mix, I had good results against dumb scrapers.

Also, have you considered Captchas for first contact/rate-limit?

If you have smart scrapers, then good luck. I recall that bot farms use pre-paid SIM cards for their data connections so that their traffic comes from a good residential ASN. They also have a lot of IPs and overall well-made headless browsers with JS support. Then it's a battle of JS quirks where the official implementation differs from headless one.

mappu•19m ago
Gitea has a builtin defense against this, `REQUIRE_SIGNIN_VIEW=expensive`, that completely stopped AI traffic issues for me and cut my VPS's bandwidth usage by 95%.
sodimel•3m ago
I, too, am selfhosting some projects on an old computer. And the fact that you can "hear internet" (with the fans going on) is really cool (unless you're trying to sleep while being scrapped).

The tiniest yet real telescope I've built

https://lucassifoni.info/blog/miniscope-tiny-telescope/
81•chantepierre•2h ago•20 comments

GPT-5.2

https://openai.com/index/introducing-gpt-5-2/
998•atgctg•16h ago•849 comments

Nokia N900 Necromancy

https://yaky.dev/2025-12-11-nokia-n900-necromancy/
303•yaky•10h ago•94 comments

He set out to walk around the world. After 27 years, his quest is nearly over

https://www.washingtonpost.com/lifestyle/2025/12/05/karl-bushby-walk-around-world/
117•wallflower•4d ago•48 comments

Google de-indexed Bear Blog and I don't know why

https://journal.james-zhan.com/google-de-indexed-my-entire-bear-blog-and-i-dont-know-why/
158•nafnlj•9h ago•53 comments

Smartphone Without a Battery (2022)

https://yaky.dev/2022-09-06-smartphone-without-battery/
22•MYEUHD•2h ago•2 comments

Guarding My Git Forge Against AI Scrapers

https://vulpinecitrus.info/blog/guarding-git-forge-ai-scrapers/
25•todsacerdoti•2h ago•12 comments

CRISPR fungus: Protein-packed, sustainable, and tastes like meat

https://www.isaaa.org/kc/cropbiotechupdate/article/default.asp?ID=21607
144•rguiscard•9h ago•75 comments

Rivian Unveils Custom Silicon, R2 Lidar Roadmap, and Universal Hands Free

https://riviantrackr.com/news/rivian-unveils-custom-silicon-r2-lidar-roadmap-universal-hands-free...
314•doctoboggan•16h ago•400 comments

Spirograph style Lego drawing machine

https://jkbrickworks.com/simple-drawing-machine/
10•ensocode•4d ago•0 comments

The highest quality codebase

https://gricha.dev/blog/the-highest-quality-codebase
543•Gricha•3d ago•346 comments

Programmers and software developers lost the plot on naming their tools

https://larr.net/p/namings.html
290•todsacerdoti•16h ago•390 comments

Journalism students expose Russian-linked vessels off the Dutch and German coast

https://www.digitaldigging.org/p/they-droned-back
43•harshreality•1h ago•28 comments

An SVG is all you need

https://jon.recoil.org/blog/2025/12/an-svg-is-all-you-need.html
243•sadiq•14h ago•94 comments

Litestream VFS

https://fly.io/blog/litestream-vfs/
297•emschwartz•16h ago•78 comments

Stoolap: High-performance embedded SQL database in pure Rust

https://github.com/stoolap/stoolap
71•murat3ok•9h ago•14 comments

Denial of service and source code exposure in React Server Components

https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-comp...
284•sangeeth96•13h ago•176 comments

Show HN: Jottings; Anti-social microblog for your thoughts

https://jottings.me/
5•vishalvshekkar•1h ago•0 comments

Show HN: Sim – Apache-2.0 n8n alternative

https://github.com/simstudioai/sim
200•waleedlatif1•17h ago•46 comments

Auto-grading decade-old Hacker News discussions with hindsight

https://karpathy.bearblog.dev/auto-grade-hn/
608•__rito__•1d ago•255 comments

Laying out the 404 Media zine

https://tedium.co/2025/12/10/404-media-zine-linux-affinity/?
63•robenkleene•10h ago•6 comments

Einstein: NewtonOS running on other operating systems

https://github.com/pguyot/Einstein
66•fanf2•4d ago•3 comments

Craft software that makes people feel something

https://rapha.land/craft-software-that-makes-people-feel-something/
295•lukeio•20h ago•144 comments

The architecture of “not bad”: Decoding the Chinese source code of the void

https://suggger.substack.com/p/the-architecture-of-not-bad-decoding
103•Suggger•19h ago•119 comments

Pdsink: USB Power Delivery Sink library for embedded devices

https://github.com/pdsink/pdsink
43•zdw•5d ago•13 comments

The Walt Disney Company and OpenAI Partner on Sora

https://openai.com/index/disney-sora-agreement/
227•inesranzo•20h ago•459 comments

Cadmium Zinc Telluride: The wonder material powering a medical 'revolution'

https://www.bbc.com/news/articles/c24l223d9n7o
45•1659447091•8h ago•13 comments

French supermarket's Christmas advert is worldwide hit (without AI) [video]

https://www.youtube.com/watch?v=Na9VmMNJvsA
352•gbugniot•20h ago•178 comments

EFF launches Age Verification Hub

https://www.eff.org/press/releases/eff-launches-age-verification-hub-resource-against-misguided-laws
336•iamnothere•1d ago•287 comments

Almond (YC X25) Is Hiring SWEs and MechEs

https://www.ycombinator.com/companies/almond-2/jobs
1•shawnpatel•13h ago