So #CERN gitlab now also has anubis with a fucking difficulty set to 6.
This took 1-2 minutes on my machine
This is super frustrating, especially because I just read the report "CMS AI Strategy" which basically concludes that everybody should use more AI.
@cccpresser they should use AI to come up with something better than f-ing Anubis. It's an absolute joke that tech/foss projects are deploying this.
@oilheap please go ahead and build something better.
I am out of ideas.
@cccpresser I think at some point I'll just publish a survey of what the "big players" are doing. So people can get some inspiration on more clever things to do.
@oilheap CERN certainly has the resources to play in the same league as 'big players'.
But I am not sure if the smol projects have the resources for a 'proper' solution.
For example KiCad just uses Cloudflare (which dynamically displays a captcha). But I don't think thats a proper solution; we should not depend on bigtech to defend against bigtech.
@cccpresser I didn't mean to suggest "everyone deploys cloudflare", but rather to look at what kind of signals and methods CF (and others in this space) use to weed out unwanted traffic.
@oilheap I would love to know more about that and have a nice solution.
But currently I am rather pessimistic. Based mainly on the fact that no good solution seems to exist.
If it were possible to build it, it would exist.
@cccpresser i think they lowered it or it is somewhat dynamic. Was on difficulty 2 for me
@CloudUwU @cccpresser I also got 2, but my phone using the same outgoing ip got 6. So i tried some more browsers and i guess it depends on the user agent.
@maltepoeggel_de @CloudUwU It seems to be dynamic. And tied to the user agent.
I got a 6 again. It took fucking 8 minutes.
With chromium on the same machine, it was only difficulty 2.
@cccpresser @CloudUwU Latest Firefox also gets a difficulty of 2. Are you using a special browser or custom user agent?
@maltepoeggel_de I have 'disposable' tabs. So every tab is like a private tab. And some anti-tracking settings.
Other than that, regular firefox.
I did open a ticket with the IT service desk.
IMHO they should disable anubis for users from the internal network.