frontpage.
newsnewestaskshowjobs

Open Source @Github

fp.

Open in hackernews

Creepy Crawlies

https://people.kernel.org/monsieuricon/creepy-crawlies
84•zdw•21h ago

Comments

jruohonen•21h ago
Off-topic, but anyone with which he did the plots?
dingaling911•54m ago
looks like this https://github.com/rfonseca/xkcd-gnuplot
jruohonen•50m ago
Thanks, and, yes, I don't write with LLMs, as seen above.
electrogas•6m ago
or this: https://matplotlib.org/stable/gallery/showcase/xkcd.html
Artoooooor•46m ago
How expensive would AI access be if every user paid their fair share instead of shoving it on the people doing the actual work?
parineum•21m ago
You mean shoving it onto the investors?
initramfs•42m ago
I've been noticing page views in the past several months with a much wider span of origin on my Blogger stats. Before I would get a few from several countries, but now I am getting views from tiny countries and obscure or outdated browsers and operating systems, which leads me to think scrapers could be using VPN services in various countries along with header anonymizers that mask the device that they are using.

Extensions like ModHeader, BrowserMask do this: https://github.com/apify/crawlee-python

https://github.com/mthcht/Masquerade-Spoofer

Great for AI scrapers, bad for hosters and everyone else.

chuckadams•39m ago
Given the nature of git, wouldn't all that HTML be highly cacheable? I get that's not free either, but it's got to be a lot less intensive than having cgit generate it every single time.
Zariel•36m ago
That was my first thought, varnish (vinyl these days) in front of the website should dramatically reduce this as the git repo should be practically static for most of the content.
teo_zero•32m ago
But there are "cubic bazillions" of possible URLs that are being requested. Even if they boil down to "only" some millions actual commits, their rendered HTMLs are all different.
kijin•5m ago
Yes, this is very difficult to solve for sites with many URL variations, like git repos and heavily threaded forums. Your cache is always full, but the hit ratio is abysmal.
kees99•14m ago
Or, html generation could be very, very fast in the first place. For example, serving static files is usually just as fast as a reverse-proxy cache.

Interestingly enough, cgit bills itself as "a hyperfast web frontend for git repositories" [0]. Alas, nothing is fast enough for the bots, it would appear.

[0] https://git.zx2c4.com/cgit/about/

lkbm•12m ago
> So, you'd think that something that pretends to be “Artificial Intelligence” would use the most efficient way of using our data for training purposes, right? Clone the repos, walk every commit. Done.

If repos like this were 10%+ of what they crawled, having a special case for clone-able repos would be smart, but if you're crawling everything, you're not going to do an efficiency tweak for each special case that has a more parse-able option.

nicman23•9m ago
couldn't you have anubis on a dynamic difficulty? ie if a ip requests more than 1k pages per day +1 the difficulty ?
dunder_cat•5m ago
Yes, but the article (not to call you out - I just think it's a very important point!) points out that this type of throttling would not be effective:

> Suddenly, the crawlers were coming from millions of random residential or mobile IPs, all pretending to be random modern browsers. An IP like that would make 4-5 requests and then never show up in the logs again. There was no point in banning them, because by the time you figured out that they were bots, they were already done with you. You just needlessly ballooned your firewall ruleset by adding IPs that would never be back.

Without something like cookies (which are almost certainly tossed after the IP is rotated) or some other persistent identifier, you are stuck have to apply mitigations that scale with the load you're encountering, which means longer challenges for everyone or degraded functionality, like removing some of the fancier cgit features.

Velocifyer•7m ago
But why don't they just git clone?
lkbm•5m ago
Because they're crawling a billion webpages, only a tiny fraction of which can be git cloned, and configuring a special case just for that tiny fraction isn't worth the effort (of the crawlers).
acedTrex•2m ago
Because the crawlers dont care, they are the internets parasites. Their creators care nothing for people or systems downstream of their greed.
AshamedCaptain•5m ago
This is bad enough that I'm going to stop serving cgit. I've been doing cvsweb, then subversion, then cgit over my home server for many many years and for the first time ever this is annoying my own bw usage.

It's ridiculous also how you ban an IP then 1 second later another one picks up from where the first one left on.

a-dub•5m ago
i wonder what they're all up to. i imagine some are scraping datasets for pre-training, others are probably real-time scrapers looking for security bugs, even more still are agents working on coding tasks and looking at the kernel. also interesting to think about solutions: does everything need to be optimized now for weird access patterns that proliferated ai creates? do the ais need to have behavior trained in to be better netizens? is this the end of anonymous browsing and the beginning of an era where one has to attach an identity to all requests? or the end of community hosted free information services more broadly?
yellow_lead•4m ago
High Anubis difficulty is annoying the hell out of me for several sites. And it's starting to not block LLM bots anymore?

> 33% are now solving the math and getting through to the main site — because apparently what we have to offer is worth spending a ton of cycles to calculate the Anubis challenge.

Demiurge•3m ago
I maintain a formally popular gaming website, and it used to have hundreds of legitimate requests per second. The load would be especially high during popular event times. So, it’s always been running on a dedicated server.

It also has an “online users” counter, which attempted to count real user sessions of unauthenticated user which still maintained a session, which lets them comment, or modify certain filter and display options. It never counted the Google bot.

Over the last few years this counter went from 100-200 users online to thousands. I have been very hands-off with it for many years, doing minor upgrades and backups. However, the site also has gotten quite slow, these sessions were obviously impacting it. So, I finally investigated these crawlers, and yes, it turns out it’s an insane amount of traffic that is entirely artificial, the site has just a handful of real users, and thousands of these crawling sessions that actually try to do everything they can, click every button. It doesn’t help that sort and search were implemented using GET links.

I fixed the counter to exclude the crawlers, but I have a bit of a dilemma. I don’t want to stop the bots from updating their knowledge based on all the content.

The best solution I could find is the new CloudFlare feature where they might charge the crawlers for every request, or otherwise block them. I think that’s a fantastic idea for the internet, at large. I signed up for the beta access, but haven’t heard from them again. I do think it’s unfortunate that this requires CloudFlare and the middleman.

Overall, it seems like the LLM are really straining the internet economy, the openness of it. Email spam used to be the worst, but the organized trillionaire labs sucking up the entire internet is going to break something if we don’t preempt them better.

It’s too bad the copyright and public internet systems are not acting quick enough. And I think there is no reason to act like this race really has to be at such a breakneck speed.

mik1998
•
9m ago
The cache gets evicted between the times the old commits are revisited.

Creepy Crawlies

https://people.kernel.org/monsieuricon/creepy-crawlies
90•zdw•21h ago•26 comments

No AI Fridays

https://noaifridays.com/
108•xendo•2h ago•40 comments

Hacking IKEA Furniture

https://greenlightning.eu/diy/hacking-ikea-furniture/
113•greenlightning•3h ago•49 comments

Casey Muratori – The Root of the Root of All Evil – BSC 2026 [video]

https://www.youtube.com/watch?v=hpj6r6CjJf8
150•surprisetalk•3d ago•45 comments

What my dad taught me about AI coding in the 90s

https://askmike.org/articles/ai-coding-lessons-in-the-90s-from-my-dad/
66•askmike•6d ago•19 comments

Arbitrary code execution in QubesOS via copy-to-VM error reporting backchannel

https://www.qubes-os.org/news/2026/08/29/qsb-118/
127•vntok•6h ago•53 comments

Longest Straight Line Paths on Water or Land on the Earth (2018)

https://arxiv.org/abs/1804.07389
145•joebig•6h ago•40 comments

An implementation of Conway's Game of Life for Windows 3.1x and later

https://www.muppetlabs.com/~breadbox/software/windows.html
31•Bluestein•3h ago•4 comments

When Fruit Is Scarce, These Monkeys Hunt Animals

https://www.smithsonianmag.com/smart-news/when-fruit-is-scarce-these-monkeys-hunt-animals-the-beh...
16•cisc•1d ago•0 comments

Brits would quite like their private messages to stay private

https://www.theregister.com/security/2026/08/30/turns-out-brits-would-quite-like-their-private-me...
263•defrost•5h ago•193 comments

RISC-V is now officially supported by CPython

https://blog.python.org/2026/08/riscv-now-officially-supported/
244•lumpa•5d ago•44 comments

Europe's summer drought is so extreme that desertification is a growing threat

https://fortune.com/2026/08/29/europe-summer-drought-desertification-threat-rivers-fish/
25•Brajeshwar•46m ago•11 comments

Automating Immersive Reading

https://smoores.dev/post/automating_immersive_reading/
36•smoores•3h ago•13 comments

monty-go: Pure-Go wrapper for Pydantic's Monty Python Interpreter

https://github.com/fugue-labs/monty-go
26•networked•3h ago•2 comments

JupyterGIS 0.16: a grammar of graphics for maps, and collaborative story maps

https://blog.jupyter.org/jupytergis-0-16-new-visualization-capabilities-collaborative-story-maps-...
68•arjxn-py•5d ago•7 comments

Hy4 preview

https://www.tencent.com/tencent-releases-and-open-sources-tencent-hy4-preview/
356•shenli3514•19h ago•212 comments

California lawmakers unanimously pass Linux exemption from age-verification law

https://www.tomshardware.com/software/linux/california-lawmakers-unanimously-pass-linux-exemption...
512•shscs911•12h ago•230 comments

The Einstein-Szilard Refrigerator (2020)

https://invention.si.edu/invention-stories/einstein-szilard-refrigerator
79•EndXA•3d ago•28 comments

Orbs

https://ampcode.com/notes/orbs-explained
56•tosh•4d ago•21 comments

FreeCORE TrueNAS Core – Continued

https://freecore.org/
148•sashk•13h ago•76 comments

Tether: iMessage, SMS, etc. on Linux

https://zackbartel.com/blog/2026/08/tether/
502•zackb•6d ago•201 comments

Xcena and Samsung's Near Memory Compute CXL Device

https://chipsandcheese.com/p/hot-chips-2026-xcena-and-samsungs
43•klelatti•7h ago•2 comments

Nancy Grace Roman Space Telescope

https://science.nasa.gov/mission/roman-space-telescope/
249•JumpCrisscross•23h ago•87 comments

Bug Blindness

https://danluu.com/bug-blind/
328•davidmckenna•14h ago•207 comments

Creating Teensy ELF Executables for Linux (Or, "Size Is Everything") (1999)

https://www.muppetlabs.com/~breadbox/software/tiny/teensy.html
70•Bluestein•5d ago•17 comments

Benchmarking Pocket-Scale Inference

https://artificialanalysis.ai/hardware-inference-stack/mobile-phones
70•sys42590•2d ago•11 comments

SQLite as a Document Database (2020)

https://dgl.cx/2020/06/sqlite-json-support
233•lioeters•5d ago•54 comments

Zoom activated my mic and played "recording in progress" at 4AM

https://imgur.com/a/0NQ0rFk
25•telmop•2h ago•3 comments

Fair Work Commission condemns 'plain wrong' AI legal advice

https://www.abc.net.au/news/2026-08-29/fair-work-commission-condemns-ai-legal-advice/107089766
49•martyvis•4h ago•20 comments

Lawmakers added $1 to car insurance policies. That money paid for Flock cameras

https://www.texastribune.org/2026/08/28/texas-flock-cameras-auto-insurance-fee-mvcpa-grants/
370•DeepLogin•15h ago•257 comments