Hacker News Reader

Comment by eYrKEC2 | Hacker News Reader

I don't really understand why there is resistance to in-browser Anubis-style gating using crypto mining for public sites like this.

You mine crypto and my free service remains cost-neutral. Yes, that transfers some of the cost to you, but it is marginal.

You want to bang on my servers with the fury of a thousand madmen, then I'll scale up the servers and you can pay the marginal cost of your access.

Or micropayments, of course, but hard to get normal users to sign up for micropayments. Micropayments could of course be the way to bypass the crypto mining gate.

View on HN

>I don't really understand why there is resistance to in-browser Anubis-style gating using crypto mining for public sites like this.

But in the case of anubis it's not even used for crypto. It's just wasted.

>You mine crypto and my free service remains cost-neutral. Yes, that transfers some of the cost to you, but it is marginal.

No, the problem is time wasted. I don't care about the electricity cost. Spending 10s to solve a challenge on a 5W SoC translates to 0.0005 cents (yes, cents, not dollars). Meanwhile if I click on a link and it doesn't load in 5s, I'm seriously questioning the value of your blog or whatever, and will probably just close the tab.

Instead of punishing a criminal, you make everybody pay.

This is not only unfair to legitimate users having to pay.

It also needs to explain what actually happens when the Ddos succeeds (I know, you are talking about scrapers, but what’s the difference really?). Does that mean that the attacker just gets to shrug it off.

Don’t take my statements as facts, I just want to outline a few reason I could come up with that show a purely technical solution might not be enough.

Akin to “just use Cloudflare, it’s free”.

Yes it works but why conceding defeat and say “oh from now on you depend on a business to publish a server”?

If we could identify who is doing this, I bet that those people would be publicly burned at the stake by now.

I don’t like people being burnt at stakes and what I see when I google “residential proxy” does not feel like we cannot identify. More like we are not even trying.

I mean, if residential proxies are tools used to DDOS websites, why is Google advertising them? And if you have Google ads for them, can we really say “ah, if we only knew who these guys are?”.

Reply on news.ycombinator.com