So you're a front-end guy?

Yes, I'm being sarcastic. It's a win-win situation when ANY large mapping group joins OSM. At the very least; they will accidentally contribute road-level improvements when they work with the data. I rely upon OSM data and need these large players throwing their weight behind this mapping system.

The only automation you need to keep a plant alive is a timer attached to a water source. Also, don't forget to feed it with nutrients every month or so... they don't eat soil and letting a plant starve isn't proof you needed a moisture sensor.

OP even said they gave up on cloudflare but people are trying to upsell him on the higher tiers through this hn post!

"Uber's Operating Losses Piled Up to $12 BILLION since 2014" (source is from 2018)

https://cdn.statcdn.com/Infographic/images/normal/17705.jpeg

"Uber Technologies Inc (UBER.N) on Thursday reported its first profitable quarter on an adjusted basis since it launched more than a decade ago - November 4, 2021"

https://www.reuters.com/technology/uber-posts-first-small-ad...

You can hack whatever you want, but from a SECURITY perspective this is horrible and the banks know this. There are secure ways to store credentials for scripts but most people will just hard-code the values or stick them in unencrypted ENV vars. Also, who's fault is it when the bank updates their website and the selenium script does something horribly wrong? Tell me more about Disney...

Comments URL: https://news.ycombinator.com/item?id=33097021

Points: 1

# Comments: 0

This is just #2 and #3 combined.

It sounds like this is working as intended and also wastes your time with un-passable captchas instead of you spending more time trying to figure out how to get around their bot protection.

Another observation here is that you really shouldn't be hacking some scripts on top of your bank login. The banks know this and they are trying everything possible to dissuade you from doing this.

How did you set up LUA scripting to provide a JS hidden browser test with Nginx and HAProxy?

That story nailed it.

> If you’re curious, Cloudflare did pay me for the site. We made a deal for them to pay me $8.03; the cost of the domain registration. The goal was never to make money from the site.

A little more than $1, but basically the same idea.

This constant and unrelenting beating at your doors doesn't go away unless you add perimeter protection.

The options here are:

1) Block the IP and cidr ranges that are giving you trouble

2) Silently scan the connection request and block it when things look fishy

3) Provide a challenge in the return response that is difficult for bots to complete

Most of the bot protection on the internet is #2 where you don't notice you've been verified as a human and the site just loads. People hate #3 of completing a challenge, but the other option here is #1 where the site doesn't load at all.

I'd argue that bots are breaking the internet.

I hate these "are you human" checks too, but when a persistent threat is poking your defenses and legitimate web traffic is only 10% - 20% of your server load... you have to do something.

So the alternative here to receiving a challenge is that the site would just be blocked in your country or for your network provider.

Would you prefer to be outright blocked, or is it ok to have an annoying "are you human?" challenge?

This article with the sections "Why I'm Right", "Why You're Wrong", and "Conclusion" is the perfect blogspam I'd expect from Viget. You guys don't have anything of value to say and I got this same "I'm better than you" treatment when I interviewed to be a dev at your shop years ago. I'm not salty because I got turned down; I'm responding today because you guys are pompous and are spreading that attitude with bad hiring practices in my area, and garbage blog posts in my neck of the internet.