ChanServ changed the topic of #freedesktop to: https://www.freedesktop.org infrastructure and online services || for questions about freedesktop.org projects, please see each project's contact || for discussions about specifications, please use https://gitlab.freedesktop.org/xdg or xdg@lists.freedesktop.org
scrumplex_ has joined #freedesktop
scrumplex has quit [Ping timeout: 480 seconds]
lynxis has joined #freedesktop
dcunit3d has quit [Ping timeout: 480 seconds]
dcunit3d has joined #freedesktop
snetry has joined #freedesktop
sentry has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15584
JanC has joined #freedesktop
Guest15584 has quit [Ping timeout: 480 seconds]
<kode54>
my phone passes the challenge in 1900ms
<kode54>
but I can't use firefox there
Lyude has joined #freedesktop
JanC is now known as Guest15588
JanC has joined #freedesktop
Guest15588 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15590
JanC has joined #freedesktop
Guest15590 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15593
JanC has joined #freedesktop
Guest15593 has quit [Ping timeout: 480 seconds]
ximion has joined #freedesktop
<mupuf>
Venemo: weird, android Firefox works for me. Maybe I got lucky
<dwfreed>
I got 6 seconds in tor browser on android; this is in standard security mode
ximion has quit [Remote host closed the connection]
Lyude has quit [Read error: Connection reset by peer]
Molo has quit []
tlwoerner has quit [Ping timeout: 480 seconds]
tlwoerner has joined #freedesktop
<immibis>
github throttles my browser, apparently to about 1 request per minute
<immibis>
"that sort of scraping" IS outlawed - afaik DDoS is illegal under CFAA
<immibis>
you can go file criminal charges if you know who's doing it
<immibis>
bots should be allowed to access public information whenever they are not cause DoS. Currently they do cause DoS and that's why they're getting blocked all over the internet.
<immibis>
not causing*
AbleBacon has quit [Read error: Connection reset by peer]
JanC is now known as Guest15604
JanC has joined #freedesktop
Guest15604 has quit [Ping timeout: 480 seconds]
<bentiss>
DragoonAethis: So in one of the cookies (the 'remember_user_token'), after a couple of base64 decoding, there is the user ID. So *maybe* we could use that, with a request to gitlab to check if the user is internal the first time we see it, store the id/internal pair in a compute accessible KV store and then bypass anubis for those users
<bentiss>
problems are: remember_user_token is only set if you check "remember me", it expires (and I don't know if when it is expired, the cookie is still attached to the request), and how much can we trust this
<bentiss>
I assume that for trusting, if we bypass anubis on the first pass, gitlab might reject it, trigerring anubis on the next round of requests
<bentiss>
then there the chicken and egg problem you mentioned, but ideally if we could reduce the numbers of anubis tests to one per device, that would be nice enough
<bentiss>
anyway, again, if anyone wants to give a shot at that, it's just a small rust program that is uploaded to fastly, so should not be hard to implement
Caterpillar has quit [Quit: Konversation terminated!]
Shibe has quit [Remote host closed the connection]
andy-turner has joined #freedesktop
JanC is now known as Guest15617
JanC has joined #freedesktop
<karolherbst>
bentiss: not sure if one per device helps given that the webbrowser might do legitimate requests, but the mobile game they use is part of the residential IP botnet thing
Guest15617 has quit [Ping timeout: 480 seconds]
andy-turner has quit []
andy-turner has joined #freedesktop
andy-turner has quit []
andy-turner has joined #freedesktop
andy-turner has quit []
andy-turner has joined #freedesktop
andy-turner has quit [Remote host closed the connection]
andy-turner has joined #freedesktop
andy-turner has quit []
andy-turner has joined #freedesktop
JanC is now known as Guest15618
JanC has joined #freedesktop
Guest15618 has quit [Ping timeout: 480 seconds]
ruther has quit [Remote host closed the connection]
ruther has joined #freedesktop
ruther has quit [Remote host closed the connection]
ruther has joined #freedesktop
JanC is now known as Guest15620
JanC has joined #freedesktop
Guest15620 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15622
JanC has joined #freedesktop
Guest15622 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15626
JanC has joined #freedesktop
psykose has quit [Remote host closed the connection]
psykose has joined #freedesktop
Guest15626 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15627
JanC has joined #freedesktop
jsa1 has joined #freedesktop
Guest15627 has quit [Ping timeout: 480 seconds]
ximion has joined #freedesktop
JanC is now known as Guest15629
JanC has joined #freedesktop
jsa2 has joined #freedesktop
Guest15629 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15630
JanC has joined #freedesktop
jsa1 has quit [Ping timeout: 480 seconds]
Guest15630 has quit [Ping timeout: 480 seconds]
jsa2 has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15631
JanC has joined #freedesktop
Guest15631 has quit [Ping timeout: 480 seconds]
andy-turner has quit [Quit: Leaving]
andy-turner has joined #freedesktop
andy-turner has quit []
andy-turner has joined #freedesktop
JanC is now known as Guest15633
JanC has joined #freedesktop
Guest15633 has quit [Ping timeout: 480 seconds]
AbleBacon has joined #freedesktop
alanc has quit [Remote host closed the connection]
JanC has quit [Ping timeout: 480 seconds]
alanc has joined #freedesktop
JanC has joined #freedesktop
haaninjo has joined #freedesktop
bozo16 has quit []
Hooloovoo has quit [Read error: Connection reset by peer]
JanC is now known as Guest15637
JanC has joined #freedesktop
Hooloovoo has joined #freedesktop
Guest15637 has quit [Ping timeout: 480 seconds]
<bentiss>
karolherbst: but the mobile game is unlikely to cherry-pick the cookie from the web browser, no? and it would only be for internal users, validated, not any random registered person
jsa1 has joined #freedesktop
<karolherbst>
bentiss: mhhh... I don't really know how the browser view works, but yeah.. possibly not
<karolherbst>
I think for internal users it's fine anyway
sima has quit [Ping timeout: 480 seconds]
JanC is now known as Guest15640
JanC has joined #freedesktop
Guest15640 has quit [Ping timeout: 480 seconds]
andy-turner has quit []
noodlez1232 has quit [Remote host closed the connection]
noodlez1232 has joined #freedesktop
andy-turner has joined #freedesktop
andy-turner has quit [Remote host closed the connection]
andy-turner has joined #freedesktop
JanC is now known as Guest15641
JanC has joined #freedesktop
Guest15641 has quit [Ping timeout: 480 seconds]
tintou has quit [Read error: Connection reset by peer]
tintou has joined #freedesktop
JanC is now known as Guest15645
JanC has joined #freedesktop
jsa1 has quit [Ping timeout: 480 seconds]
Guest15645 has quit [Ping timeout: 480 seconds]
andy-turner has quit []
JanC is now known as Guest15646
Guest15646 has quit [Ping timeout: 480 seconds]
JanC has joined #freedesktop
Kayden has quit [Quit: Leaving]
Kayden has joined #freedesktop
kasper93 has quit [Remote host closed the connection]
kasper93 has joined #freedesktop
JanC is now known as Guest15650
JanC has joined #freedesktop
Guest15650 has quit [Ping timeout: 480 seconds]
pjakobsson_ has quit [Ping timeout: 480 seconds]
Caterpillar has quit [Quit: Konversation terminated!]