this post was submitted on 11 Jul 2025
5 points (100.0% liked)

Technology

239 readers
226 users here now

Share interesting Technology news and links.

Rules:

  1. No paywalled sites at all.
  2. News articles has to be recent, not older than 2 weeks (14 days).
  3. No videos.
  4. Post only direct links.

To encourage more original sources and keep this space commercial free as much as I could, the following websites are Blacklisted:

More sites will be added to the blacklist as needed.

Encouraged:

founded 2 months ago
MODERATORS
[email protected]
5
Anubis now supports non-JS challenges (anubis.techaro.lol)
submitted 5 days ago by [email protected] to c/[email protected]
5 comments fedilink hide all child comments
top 5 comments
sorted by: hot top controversial new old
[–] [email protected] 2 points 4 days ago* (last edited 4 days ago) (1 children)

non-JS

WebAssembly

Erm... technically correct I guess? But disappointing. Other solutions let you run a local command to generate the response and then paste it into a form.

I sortof understand the argument that it can look like what some malware does, but I feel like there should be an easy fix for that, like maybe just label it as an "advanced user" feature or something, so at least it's still available. I just feel like requiring wasm is a step in the wrong direction and even moreso shuts out legitimate users that don't have/enable wasm on their browser.

[–] [email protected] 2 points 3 days ago* (last edited 3 days ago) (1 children)

No, they also added a non webassembly non js based challenge as well.

Anubis finally has support for running without client-side JavaScript thanks to the Meta Refresh challenge

[–] [email protected] 1 points 2 days ago* (last edited 2 days ago) (1 children)

Yes but it doesn't actually do any work or verify anything... crawlers could follow the refresh URL immediately and get right through. And I'm skeptical that not having to actually solve a PoW could make a meaningful difference, especially if the delay from the meta refresh can be easily bypassed.

[–] [email protected] 1 points 2 days ago (1 children)

This site doesn't seem to let me link to a specific comment: https://lobste.rs/s/aa7ske/anubis_now_supports_non_js_challenges

But on that page, the creator has a comment explaining that the meta refresh challenge does more than just reload the page and wait. They explain that it actually checks if the browser supports modern desktop browser features like gzip encoding, cookies, and more that's not documented.

[–] [email protected] 1 points 1 day ago* (last edited 1 day ago)

Yes but even curl easily passes those tests by default, regardless of the user-agent. I guess I'm just skeptical of how much effect it really has in the real world... you see a lot of people saying "oh yea it works great", but they don't tell you what the before and after bot traffic actually was.

Happen to be proven wrong though if anyone has some hard data.