For many sites, your hypothetical penny to create an account is a cost an attacker would gladly pay.

I don't think that's generally how these networks use residential exit proxies. There are at least a dozen well-developed frameworks out there for decoupling the crawler from the network exit point.

Most res proxy exits are just slinging bytes for clients using SOCKS, or another tunneling protocol.

If nothing else, a modern scraper will want better control over their TLS fingerprints, and you can't get that if you're depending on the on-device TLS libraries alone.

https://youtu.be/RuOVY4r9ipg

Where I live, needle disposal boxes are available in almost all institutional restrooms. I'm not sure why you think the yellow light is relevant.

Here's a history of the problem in San Francisco. My memories of the issue in Washington/Oregon around the same time are similar:

https://www.japha.org/article/S1086-5802(15)30128-5/abstract

Another article, again highlighting that the focus on needle disposal is keeping all needles out of the trash, as a broader occupational safety issue:

https://journals.sagepub.com/doi/abs/10.1177/014572179402000...

I'd love to hear the citation for this one, as people using injectable insulin generally need to do in conjunction with eating, and I can't think of where you'd get the idea that T1 diabetics who use injectable insulin avoid eating outside the home as a general rule.

Granted, nowadays plenty of people are using insulin pumps which decimates disposable syringe use, but I'm really puzzled where you picked up that in-home/away-from-home impression from.

What motivates this infrastructure is the danger to workers if syringes are just thrown into the trash.

My dad had type one diabetes with a type A personality, and was very particular about making sure that syringes were disposed of properly. Not everyone is this careful, and they put others at risk.

You're reinventing a natural key with a bunch of identifiers which aren't stable enough.

Most of the traffic is originating in GCP. We're seeing ~70k req/min sustained from Google Cloud IP space (AS396982). Reported to GCP Abuse, they've been non-responsive so far.

The main distinguishing factor is the reuse of a bunch of legit AI-training bot UserAgent strings. It's clear that the traffic is under the same centralized control because of how it changes volume across thousands of IP addresses simultaneously.

An open connection is just a bit of state on either end. The C10K problem has been solved for ages.

Anyone remember consuming Twitter hoses back in the day? Those were also long-lived persistent connections for efficiency reasons.

One of my favorite trampoline hacks is to rip the legs off and use them as a giant tree swing, or portaledge when tree climbing.

The hoop is immensely lightweight, strong, and doesn't care if it's being supported by legs in compression, or by lines in (equal) tension. They break down and transport super easy.

But don't jump.

Somehow managed to fool it the other day by shutting a car trunk, helping someone load up, with me on the outside. It activated the dots for the rest of my walk afterwards, when I was using the phone.

I get the impression there are much more sophisticated signals and classification methods to determine whether someone is in a vehicle or not, beyond the accelerometers.

I miss publications with skilled human editors.

Plagiarism will always be plagiarism.