Bots Compose 42% of Overall Web Traffic; Nearly Two-Thirds Are Malicious | Hacker News Reader

Bots Compose 42% of Overall Web Traffic; Nearly Two-Thirds Are Malicious

prnewswire.com

21 pointsspeckx9 comments

I wonder if the percentage of the world economy that is based on crime has increased in recent years due to the ease of commiting crimes on the internet. Everybodies identity has been stolen multiple times, everything is hackable; seems like that would have accelerated crime. Maybe it explains the drop in violent crimes, it's so much easier to just buy stolen credit cards on the dark web or buy an automated ransomware attack suite than to fight a gang war? An essential driver behind crime seems to be laziness, criminals don't want to work for a living, they'd rather take resources from others because it seems easier. Cybercrime may be the easiest, lowest risk crime ever (other than forming a corporation :-)

Random question from a very-much-not-computer savvy person on the off chance someone cares to answer: If a tiny charge was levied every time a webserver delivered a page to me would it cure this kind of problem? I'm imagining e.g. my browser has to send some crypto of some variety (or guarantee that it will in the future so as to not slow things down).

I work in cybersecurity and we need to be able to get info about CVEs extremely quickly from all major software vendors. The problem is this means we need to either subscribe to websites for webhooks (async notifications sent to us when an event happens) or poll a website. It turns out that polling is extremely inefficient, but is how it works most of the time because most of the websites we watch don’t support webhooks/push style notifications.

We create bot traffic, but we don’t want to. The problem is that the data we want isn’t available when we want it (we can’t wait days/weeks for the central CVE db to unembargo CVE records which have high impact) and isn’t delivered to us. Instead, we have to go through lots of effort to go get it. So we create a resilient crawler. And other similar companies / entities do too. Now we are all competing to get the same info in a short time, so we poll the sites too often. This all becomes a stress on the websites we hit.

All because the info should be open, but the companies with the info don’t want to build the most efficient system to distribute it. And there is probably legal liability for a middleman company to just crawl those websites and build a shim webhook system to push data as soon as it is found to webhook subscribers.

Google Chrome proposed hardware attestation. I actually thought it was a pretty good idea but there were some privacy risks so it ended up DOA.

https://github.com/RupertBenWiser/Web-Environment-Integrity/...

Wouldn't fix a thing given that there are operations overseas that run thousands of legitimate iPhones and Android phones for botting purposes.

No because the bots are running on compromised machines, so they'd just steal the real owner's micropayments.

It'd also entrench search monopolies even harder, because everyone would exempt Google/Bing because they want to get indexed, but they wouldn't exempt other bots like the one you need for your new engine.

This was actually an idea that came along with the original internet. Coined “micropayments,” it was an idea to enable content consumers to pay content producers. A little bit (fractions of a cent) times a lot of people was the gist of it.

A subscription model is a better business than a tiny charge, because expenses will be the same, but ROI will be much larger. Even with subscription, many web services are not profitable.

Micropayments never took off. Advertising / freemium did. Why?

If your server doesn’t serve responses unless someone pays, then there is the problem of uncertainty for the client — how do I know the content behind the paywall is worth it?

Nearly all of the services we use that index the web are free/cheap and require the ability to crawl the web without logging into services. Search engines like Google, Bing, Yandex, Baidu. LLMs like ChatGPT piggyback on CommonCrawl, in addition to paying for large expensive data contracts from companies like Reddit.

We have a word for the part of the internet that is walled off from open crawling — the Deep Web.

Reply on news.ycombinator.com