@[email protected] to TechnologyEnglish • 17 hours agoCloudflare plans marketplace to sell permission to scrape websitestechcrunch.comexternal-linkmessage-square11fedilinkarrow-up1140arrow-down13starcopymore-verticalflagCreate ReportslashBlock usercross-posted to: [email protected][email protected]
arrow-up1137arrow-down1external-linkCloudflare plans marketplace to sell permission to scrape websitestechcrunch.com@[email protected] to TechnologyEnglish • 17 hours agomessage-square11fedilinkstarcopymore-verticalflagCreate ReportslashBlock usercross-posted to: [email protected][email protected]
minus-squareumami_wasabilinkfedilinkEnglish18•17 hours agoHow can I do this without Cloudflare? arrow-up118arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-squareRikudou_SagelinkfedilinkEnglish21•17 hours agoPut a page on your website saying that scrapping your website costs [insert amount] and block the bots otherwise. arrow-up121arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-square@[email protected]linkfedilinkEnglish9•14 hours agoThe hard part is reliably detecting the bots arrow-up19arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-squaremelroylinkfedilink4•12 hours agoAlso you don’t want to block legit search engines that are not scraping your data for AI. arrow-up14arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-square@[email protected]linkfedilinkEnglish4•12 hours agoAgain: hard to differentiate all those different bots, because you have to trust that they are what they say they are, and they often are not arrow-up14arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-squaremelroylinkfedilink4•11 hours agoInstead of blocking bots on user agent… I’m blocking full IP ranges: https://gitlab.melroy.org/-/snippets/619 arrow-up14arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
minus-square@vinnymaclinkEnglish2•edit-27 hours agoIt certainly can be a cat and mouse game, but scraping at scale tends to be ahead of the curve of the security teams. Some examples: https://brightdata.com/ https://oxylabs.io/ Preventing access by requiring an account, with strict access rules can curb the vast majority of scraping, then your only bad actors are the rich venture capitalists. arrow-up12arrow-down10file-textreply1starmore-verticalmailMessageflagCreate ReportslashBlock user
How can I do this without Cloudflare?
Put a page on your website saying that scrapping your website costs [insert amount] and block the bots otherwise.
The hard part is reliably detecting the bots
Also you don’t want to block legit search engines that are not scraping your data for AI.
Again: hard to differentiate all those different bots, because you have to trust that they are what they say they are, and they often are not
Instead of blocking bots on user agent… I’m blocking full IP ranges: https://gitlab.melroy.org/-/snippets/619
It certainly can be a cat and mouse game, but scraping at scale tends to be ahead of the curve of the security teams. Some examples:
https://brightdata.com/
https://oxylabs.io/
Preventing access by requiring an account, with strict access rules can curb the vast majority of scraping, then your only bad actors are the rich venture capitalists.