I fight bots in my free time
xeiaso.net
I made Anubis, a lightweight, open-source Web Application Firewall designed to block automated bot attacks without frustrating real users. Anubis uses techniques like TLS fingerprinting and JavaScript proof of work to keep your site safe while staying flexible, fast, and easy to deploy.
  • Allero@lemmy.todayEnglish
    9·
    5 hours ago

    Why does default config check Mozilla specifically?

    {
"name": "generic-browser",
"user_agent_regex": "Mozilla",
"action": "CHALLENGE"
}

    Guess that’s why I’ve seen Anubis check screen quite a few times.

    • morbidcactus@lemmy.caEnglish
      12·
      5 hours ago

      Afaik, almost every browser uses “Mozilla/5.0” as part of the user agent, Mozilla mentions it as well in developer docs about User agents, it’s a historical compatibility thing apparently.

        • lime!@feddit.nuEnglish
          8·
          4 hours ago

          it’s even stupider, it’s more like why there is no windows 9 because of programs doing stuff like if os.name.startswith("windows 9") then print("this program is not compatible with windows 98") end

          • sugar_in_your_tea@sh.itjust.worksEnglish
            4·
            3 hours ago

            Yup. There was a time when Mozilla was somewhat dominant, so browsers unlocked features based on the browser being Mozilla (as opposed to Internet Explorer).

            • lime!@feddit.nuEnglish
              4·
              2 hours ago

              well if you want to get into it, i think the last browser that didn’t have mozilla in the useragent was internet explorer, which had “trident/9.0” or something. every other browser on the market is based on the old KDE browser Konqueror, which had “khtml, like gecko” in it. when that didn’t work they just added “mozilla” to it. then apple took that codebase and added “safari”, chrome took that codebase and added “chrome”, etc etc etc. compatibility problems just kept compounding on every browser based on khtml until we got to the point where microsoft edge’s current user agent is Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.

              even firefox has had to give in to this: my useragent is Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0 even though the version of gecko in firefox 140 is v125, from 2022.

  • Shanmugha@lemmy.worldEnglish
    3·
    5 hours ago

    My hero in shining armour (not a sarcasm, just a form of appreciation of someone who did what I would never have done)

  • PushButton@lemmy.worldEnglish
    81·
    12 hours ago

    I use the lynx browser sometimes, for hacker news, some blogs that I follow, or just for a quick browse to find an answer.

    The fact that more and more websites need to use this kind of protection is saddening me, since lynx doesn’t support JavaScript.

    That’s just another reason why I fucking hate AI.

    I don’t hate it, I /fucking/ hate AI.

    • Flipper@feddit.orgEnglish
      4·
      11 hours ago

      You can bypass it by changing the user agent to not include Mozilla in the beginning.

  • karpintero@lemmy.worldEnglish
    101·
    1 day ago

    Cool project. The closing slide was pretty funny

    If you are working at an AI company, here’s how you can sabotage Anubis development as easily and quickly as possible. So first is quit your job, second is work for Square Enix, and third is make absolute banger stuff for Final Fantasy XIV. That’s how you can sabotage this the best.

  • rhythmisaprancer@piefed.socialEnglish
    2·
    13 hours ago

    Interesting. I clicked on a link here a couple weeks ago and was presented with this and wasn’t really sure what it was. Thanks for sharing this! It seems like a good alternative.