Lobsters is a community-driven platform for sharing and discussing links to articles, tutorials, and projects related to technology and programming. Readers can learn about a wide range of topics, from software development and system administration to cybersecurity and artificial intelligence. With user submissions, comments, and voting, Lobsters provides a platform for collaborative learning and knowledge sharing among technology enthusiasts.

Lobsters

The post reports the completion of a task in 445 milliseconds, taking 3,009,490 iterations.

Making sure you're not a bot!

<h1>Illegal Software - Easy to bypass</h1>
(Leave a Thumbs Up or Heart in the Github Issue <a href="https://github.com/TecharoHQ/anubis/issues/50" target="_blank" rel="noopener nofollow">https://github.com/TecharoHQ/anubis/issues/50</a> I just created for this.)
<h2>Legal Problem</h2>
Huge problem is the usage of the IP of the user before even asking for consent. And the fact that you know about it and brag that you can set a cookie before GDPR compliance is even asked.
Congratulations, you just broke the law in the entire EU (GDPR), UK (UK-GDPR), Switzerland (revDSG), Brasil (LGPD), South Africa (POPIA), South Korea (PIPA), Japan (APPI), Canada (PIPEDA), Argentinia, India (DPDP), and also possibly in Australia (Privacy Act), California (CCPA/CPRA), Thailand (PDPA), Indonesia (PDP), Malaysia (PDPA) and other countries I haven’t heard of their data protection laws of.
And most of these countries always had IP protection (consent) laws in place long before GDPR.
<h2>Security Problem</h2>
Not only is relying on Javascript a very risky thing for a “safety check”, but also very easily passable for a Bot. No AI needed.
If you don’t believe me, that’s okay. I just wrote a webscraper that easily bypasses Anubis.
<h3>Step 1 - Init</h3>
<pre><code>npm init -y
</code></pre>
<h3>Step 2 - Install dependencies</h3>
<pre><code>npm install puppeteer puppeteer-extra puppeteer-extra-plugin-stealth
</code></pre>
<h3>Step 3 - Create the scraper</h3>
<pre><code class="language-js">const puppeteer = require(&#x27;puppeteer-extra&#x27;);
const StealthPlugin = require(&#x27;puppeteer-extra-plugin-stealth&#x27;);
const fs = require(&#x27;fs&#x27;);

puppeteer.use(StealthPlugin());

(async () =&gt; {
 const browser = await puppeteer.launch({ headless: false, args: [&#x27;--no-sandbox&#x27;] });
 const page = await browser.newPage();

 try {
 await page.goto(&#x27;https://anubis.techaro.lol/docs/design/how-anubis-works&#x27;, {
 waitUntil: &#x27;domcontentloaded&#x27;,
 timeout: 60000,
 });

 await page.waitForFunction(() =&gt; {
 const h1 = document.querySelector(&#x27;h1&#x27;);
 return h1 &amp;&amp; h1.textContent.trim() !== &#x27;Making sure you\&#x27;re not a bot!&#x27; &amp;&amp; h1.textContent.trim() !== &#x27;Success!&#x27;;
 }, { timeout: 120000 });

 const h1Text = await page.$eval(&#x27;h1&#x27;, el =&gt; el.textContent.trim());
 const url = page.url();
 const title = await page.title();

 console.log(&#x27;Final H1:&#x27;, h1Text);
 console.log(&#x27;Final URL:&#x27;, url);
 console.log(&#x27;Page Title:&#x27;, title);

 const html = await page.content();
 fs.writeFileSync(&#x27;anubis-test.html&#x27;, html);
 await page.screenshot({ path: &#x27;anubis-test.png&#x27;, fullPage: true });

 } catch (err) {
 console.error(&#x27;Error:&#x27;, err.message);
 } finally {
 await browser.close();
 }
})();
</code></pre>
<h3>Step 4 - Run the Scraper</h3>
<pre><code>node anubis.js
</code></pre>
<h3>Result</h3>
<img src="https://media.daily.dev/image/upload/s--2uL0kVeE--/f_auto/v1742563785/ugc/content_c81cad9f-7b60-44f2-829d-7d18a70ce90a" alt="anubis-test">

<blockquote>
The post reports the completion of a task in 445 milliseconds, taking 3,009,490 iterations.
</blockquote>
this is prove that it is working againts bot (including AI). While as user I got into the main page.

I encountered this while using the Gnome Icon-Preview app. The “About” dialogue has a link to their Gitlab page, and I was blocked from accessing it thanks to this reverse proxy scraper, Anubis.
It would not even present me with a challenge, and the try again or Home options do nothing.
Trying to figure out the problem has led me here, and I’m trying to understand why they are using this.
One user suggested this may be illegal to use, and another user also said that it was unethical to block users from their own data on Gnome’s Gitlab.
I feel like there is some non-practical motivation going on here somewhere. Maybe something ideological even?
Sorry if I’m way off base, but it seems like an odd problem for such a huge project to force upon users.