Skip to content

The AI company Perplexity is complaining their bots can't bypass Cloudflare's firewall

Technology
232 123 46
  • Can't believe I've lived to see Cloudflare be the good guys

    Lesser of two bad guys maybe?

  • Cloudflare are notorious for shielding cybercrime sites. You can't even complain about abuse of Cloudflare about them, they'll just forward on your abuse complaint to the likely dodgy host of the cybercrime site. They don't even have a channel to complain to them about network abuse of their DNS services.

    So they certainly are an enabler of the cybercriminals they purport to protect people from.

    If they acted differently, they'd probably be liable for illegal activity that they proxy for (this is for example relevant for the DMCA safe harbor).

    Anyhow, when on their abuse page, I have an option for "Registrar", which is used for "DNS abuse", among others.

  • Cloudflare are notorious for shielding cybercrime sites. You can't even complain about abuse of Cloudflare about them, they'll just forward on your abuse complaint to the likely dodgy host of the cybercrime site. They don't even have a channel to complain to them about network abuse of their DNS services.

    So they certainly are an enabler of the cybercriminals they purport to protect people from.

    Any internet service provider needs to be completely neutral. Not only in their actions, but also in their liability.
    Same goes for other services like payment processors.
    If companies that provide content-agnostic services are allowed to policy the content, that opens the door to really nasty stuff.

    You can't chop everyone's arms to stop a few people from stealing.

    If they think their services are being used in a reprehensible manner, what they need to do is alert the authorities, not act like vigilantes.

  • That all sounds very vague to me, and I don't expect it to be captured properly by law any time soon. Being accessed for LLM? What does it mean for you and how is it different from being accessed by a user? Imagine you host a weather forecast. If that information is public, what kind of compensation do you expect from anyone or anything who accesses that data?

    Is it okay for a person to access your site? Is it okay for a script written by that person to fetch data every day automatically? Would it be okay for a user to dump a page of your site with a headless browser? Would it be okay to let an LLM take a look at it to extract info required by a user? Have you heard about changedetection.io project? If some of these sound unfair to you, you might want to put a DRM on your data or something.

    Would you expect a compensation from me after reading your comment?

    That all sounds very vague to me, and I don’t expect it to be captured properly by law any time soon.

    It already has been captured, properly in law, in most places. We can use the US as an example: Both intellectual property and real property have laws already that cover these very items.

    What does it mean for you and how is it different from being accessed by a user?

    Well, does a user burn up gigawatts of power, to access my site every time? That's a huge different.

    Imagine you host a weather forecast. If that information is public, what kind of compensation do you expect from anyone or anything who accesses that data?

    Depends on the terms of service I set for that service.

    Is it okay for a person to access your site?

    Sure!

    Is it okay for a script written by that person to fetch data every day automatically?

    Sure! As long as it doesn't cause problems for me, the creator and hoster of said content.

    Would it be okay for a user to dump a page of your site with a headless browser?

    See above. Both power usage and causing problems for me.

    Would it be okay to let an LLM take a look at it to extract info required by a user?

    No. I said, I do not want my content and services to be used by and for LLMs.

    Have you heard about changedetection.io project?

    I have now. And should a user want to use that service, that service, which charges 8.99/month for it needs to pay me a portion of that, or risk having their service blocked.

    There no need to use it, as I already provide RSS feeds for my content. Use the RSS feed, if you want updates.

    If some of these sound unfair to you, you might want to put a DRM on your data or something.

    Or, I can just block them, via a service like Cloud Flare. Which I do.

    Would you expect a compensation from me after reading your comment?

    None. Unless you're wanting to access if via an LLM. Then I want compensation for the profit driven access to my content.

  • This post did not contain any content.

    I don't see a problem here. Maybe Perplexity should consider the reasons WHY Cloudflare have a firewall...?

  • Recaptcha v2 does way more than check if the box was checked.

    you're not wrong, but it also allows more than 99.8% of the bot traffic through too on text challenges. Its like the TSA of website security. Its mostly there to keep the user busy while cloudflare places itself in a man in the middle of your encrypted connection to a third party. The only difference between cloudflare and a malicious attacker is cloudflares stated intention not to be evil. With that and 3 dollars I can buy myself a single hard shell taco from tacobell.

  • Site owners currently do and should have the freedom to decide who is and is not allowed to access the data, and to decide for what purpose it gets used for. Idgaf if you think scraping is malicious or not, it is and should be illegal to violate clear and obvious barriers against them at the cost of the owners and unsanctioned profit of the scrapers off of the work of the site owners.

    to decide for what purpose it gets used for

    Yeah, fuck everything about that. If I'm a site visitor I should be able to do what I want with the data you send me. If I bypass your ads, or use your words to write a newspaper article that you don't like, tough shit. Publishing information is choosing not to control what happens to the information after it leaves your control.

    Don't like it? Make me sign an NDA. And even then, violating an NDA isn't a crime, much less a felony punishable by years of prison time.

    Interpreting the CFAA to cover scraping is absurd and draconian.

  • That all sounds very vague to me, and I don’t expect it to be captured properly by law any time soon.

    It already has been captured, properly in law, in most places. We can use the US as an example: Both intellectual property and real property have laws already that cover these very items.

    What does it mean for you and how is it different from being accessed by a user?

    Well, does a user burn up gigawatts of power, to access my site every time? That's a huge different.

    Imagine you host a weather forecast. If that information is public, what kind of compensation do you expect from anyone or anything who accesses that data?

    Depends on the terms of service I set for that service.

    Is it okay for a person to access your site?

    Sure!

    Is it okay for a script written by that person to fetch data every day automatically?

    Sure! As long as it doesn't cause problems for me, the creator and hoster of said content.

    Would it be okay for a user to dump a page of your site with a headless browser?

    See above. Both power usage and causing problems for me.

    Would it be okay to let an LLM take a look at it to extract info required by a user?

    No. I said, I do not want my content and services to be used by and for LLMs.

    Have you heard about changedetection.io project?

    I have now. And should a user want to use that service, that service, which charges 8.99/month for it needs to pay me a portion of that, or risk having their service blocked.

    There no need to use it, as I already provide RSS feeds for my content. Use the RSS feed, if you want updates.

    If some of these sound unfair to you, you might want to put a DRM on your data or something.

    Or, I can just block them, via a service like Cloud Flare. Which I do.

    Would you expect a compensation from me after reading your comment?

    None. Unless you're wanting to access if via an LLM. Then I want compensation for the profit driven access to my content.

    Both intellectual property and real property have laws already that cover these very items.

    And it causes a lot of trouble to many people and pains me specifically. Information should not be gated or owned in a way that would make it illegal for anyone to access it under proper conditions. License expiration causing digital work to die out, DRM causing software to break, idiotic license owners not providing appropriate service, etc.

    Well, does a user burn up gigawatts of power, to access my site every time?

    Doing a GET request doesn't do that.

    As long as it doesn't cause problems for me, the creator and hoster of said content.

    What kind of problems that would be?

    Both power usage and causing problems for me.

    ?? How? And what?

    do not want my content and services to be used by and for LLMs.

    You have to agree that at one point "be used by LLM" would not be different from "be used by a user".

    which charges 8.99/month

    It's self-hosted and free.

    Use the RSS feed, if you want updates.

    How does that prohibit usage and processing of your info? That sounds like "I won't be providing any comments on Lemmy website, if you want my opinion you can mail me at a@b.com"

    I can just block them, via a service like Cloud Flare. Which I do.

    That will never block all of them. Your info will be used without your consent and you will not feel troubled from it. So you might not feel troubled if more things do the same.

    None. Unless you're wanting to access if via an LLM. Then I want compensation for the profit driven access to my content.

    What if I use my local hosted LLM? Anyway, the point is, selling text can't work well, and you're going to spend much more resources on collecting and summarizing data about how your text was used and how others benefited from it, in order to get compensation, than it worths.

    Also, it might be the case that some information is actually worthless when compared to a service provided by things like LLM, even though they use that worthless information in the process.

    I'm all for killing off LLMs, btw. Concerns of site makers who think they are being damaged by things like Perplexity are nothing compared to what LLMs do to the world. Maybe laws should instead make it illegal to waste energy. Before energy becomes the main currency.

  • to decide for what purpose it gets used for

    Yeah, fuck everything about that. If I'm a site visitor I should be able to do what I want with the data you send me. If I bypass your ads, or use your words to write a newspaper article that you don't like, tough shit. Publishing information is choosing not to control what happens to the information after it leaves your control.

    Don't like it? Make me sign an NDA. And even then, violating an NDA isn't a crime, much less a felony punishable by years of prison time.

    Interpreting the CFAA to cover scraping is absurd and draconian.

    If you want anybody and everyone to be able to use everything you post for any purpose, right on, good for you, but don't try to force your morality on others who rely on their writing, programming, and artworks to make a living to survive.

  • If you want anybody and everyone to be able to use everything you post for any purpose, right on, good for you, but don't try to force your morality on others who rely on their writing, programming, and artworks to make a living to survive.

    I'm gonna continue to use ad blockers and yt-dlp, and if you think I'm a criminal for doing so, I'm gonna say you don't understand either technology or criminal law.

  • I'm gonna continue to use ad blockers and yt-dlp, and if you think I'm a criminal for doing so, I'm gonna say you don't understand either technology or criminal law.

    Thats a crime yeah and if Alphabet co wants to sue you for $1.34 damages then they have that right, just as we should have the right to sue them if their AI crawlers make our site unusable and plagiarize our work to the effect of thousands of dollars, or even press charges for the criminal act of intentional disruption of services.

  • 99 Stimmen
    32 Beiträge
    83 Aufrufe
    E
    After watching what they did with social media you'd think everyone would give a bit of pause before swallowing another load from big tech but the people are guzzling it down, I have zero interest in being a beta tester for this dumb technology or talking to a machine.
  • It shocked the market but has China's DeepSeek changed AI?

    Technology technology
    7
    1
    42 Stimmen
    7 Beiträge
    22 Aufrufe
    U
    It's not the BBC's job to be an authority. Their job is to report what the (relevant) authorities are saying: DeepSeek challenged certain key assumptions about AI that had been championed by American executives like Sam Altman, CEO of ChatGPT-maker OpenAI. "We were on a path where bigger was considered better," according to Sid Sheth, CEO of AI chip startup d-Matrix. Perhaps maxing out on data centres, servers, chips, and the electricity to run it all wasn't the way forward after all. Despite DeepSeek ostensibly not having access to the most powerful tech available at the time, Sheth told the BBC that it showed that "with smarter engineering, you actually can build a capable model". That said, seems suspect that an AI startup CEO is getting this much airtime. I would have preferred an industry analyst or an AI researcher.
  • 147 Stimmen
    17 Beiträge
    41 Aufrufe
    M
    Good if true, but of course they'll find a scapegoat for this, as all big corporations do.
  • Apple sues YouTuber for alleged iOS 26 trade-secret theft

    Technology technology
    14
    1
    145 Stimmen
    14 Beiträge
    188 Aufrufe
    S
    You can read it two ways: gee they’re so WFH friendly they drive their people hard and they work nights and weekends
  • 106 Stimmen
    28 Beiträge
    337 Aufrufe
    D
    Wait, we need compulsory ID checks to visit adult content but no checks with Chatgpt who is there to help you plan your suicide? We are about to face an epidemic of AI cat fishing, scams, and unhealthy relationships that corporations are pushing on us. This is like the Atomic bomb only with propaganda and psychological manipulation. The war for the human mind just got a shortcut and the Techbros are in charge.
  • 26 Stimmen
    11 Beiträge
    106 Aufrufe
    F
    Absolute horseshit. Bulbs don't have microphones. If they did, any junior security hacker could sniff out the traffic and post about it for cred. The article quickly pivots to TP-Link and other devices exposing certificates. That has nothing to do with surveillance and everything to do with incompetent programming. Then it swings over to Matter and makes a bunch of incorrect assertion I don't even care to correct. Also, all the links are to articles on the same site, every single one of which is easily refutable crap. Yes, there are privacy tradeoffs with connected devices, but this article is nothing but hot clickbait garbage.
  • FairPhone AMA

    Technology technology
    5
    14 Stimmen
    5 Beiträge
    73 Aufrufe
    alcan@lemmy.worldA
    Ask Me Anything
  • 4 Stimmen
    1 Beiträge
    21 Aufrufe
    Niemand hat geantwortet