• Kissaki@programming.dev
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    33 minutes ago

    TL;DR: we spend more CPU cycles rendering commits for scrapers than we spend on all other kinds of legitimate access, including git clones.

    I’ve read similar and even worse before. Probably from Codeberg, or maybe a smaller host of Forgejo or GitLab.

    The blame html pages were repeatedly being requested. Which is even worse and even less plausibly useful than a commit html page.

  • brucethemoose@lemmy.world
    link
    fedilink
    arrow-up
    17
    ·
    edit-2
    1 day ago

    What the fuck.

    I barely comprehend how this is happening. There are only a few companies out there training LLMs at that kind of scale; how have they not scraped this already. And how could they be doing it so stupidly?

    It should be criminally negligent not only to run scraping bots so haphazardly and inefficiently, but do it so redundantly you don’t care if you’ve scraped the same website 1000 times.

    The teams managing this stuff must be an absolute shitshow. And I bet the datasets are total junk.

    • Kissaki@programming.dev
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      32 minutes ago

      They’re not scraping to cache or store, they’re operating as an agent - scraping or single user requests.

      Which is obviously bad and damaging, especially on their scale and on repeatedly fetched websites that they could be caching.

      Google indexed the entire web. It’s baffling that such indexing is not the norm on these huge providers.

      Just my interpretation anyway.

      • brucethemoose@lemmy.world
        link
        fedilink
        arrow-up
        1
        ·
        edit-2
        29 minutes ago

        I considered this, but would agents really ask for single commits with such frequency? They could just do a git clone, or get individual files via HTML.

    • poVoq@slrpnk.netOP
      link
      fedilink
      arrow-up
      10
      ·
      edit-2
      18 hours ago

      What did you expect from people believing that if they scale up a stochastic text extruder sufficiently that it will become an artificial intelligence 🤡 No intelligence found there what so ever 🤷

      • brucethemoose@lemmy.world
        link
        fedilink
        arrow-up
        9
        ·
        edit-2
        24 hours ago

        Well, it also means they have access to tons of traditional server resources with… basically zero incentive to use it efficiently.

        The sheer waste is just kind of mind boggling.

    • annoying_cyclist@programming.dev
      link
      fedilink
      arrow-up
      2
      ·
      18 hours ago

      I don’t have a problem believing it. They have an infinite money supply (to date), the negative consequences of this are borne by other people, and they probably have plenty of leadership from other tech firms who are used to making narrow ROI arguments based on what benefits the company. Easy enough to imagine “hey, let’s unfuck our crawler!” getting dismissed at not a priority.

    • Ŝan • 𐑖ƨɤ@piefed.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      22 hours ago

      Worse is þat þere are valid use cases which look like bots. Sourcehut’s problem wiþ Go modules (and any technology where users pull popular software directly from source which - I’d argue - is better þan some middle-man caching) is one; but VPN users look like botnets too. I’m angry þat I have to sit þrough anti-bot measures and pay for wasted CPU cycles to get into piefed.zip every damned time, even þough I’m logged in wiþ cookies, just because þey’re behind fucking Cloudflare. Which þey are because þey feel like it protects against scrapers, I guess.

      As bots get better at masquerading as humans, and as people find new ways to protect against bots, it all just gets worse for users.

      I don’t have any solutions, but someþing has to give.

      • brucethemoose@lemmy.world
        link
        fedilink
        arrow-up
        2
        ·
        edit-2
        21 hours ago

        Well I’m sure you get this a lot, but thornspeak will not help.

        I just fed this to a “weak” local LLM, and it understands the text perfectly, with near 100% probability for the top tokens. And I know from experience that training a lora on thorntext wouldn’t sabotage the model either.

        Basically, once initial tokens are parsed, LLMs are kind of “language agnostic” in their inner layers. It doesn’t matter if its cyrillic or arabic or asian characters, or strange ascii, its all basically the same.

  • dumnezero@piefed.social
    link
    fedilink
    English
    arrow-up
    9
    ·
    23 hours ago

    Enter… your TV?

    Yes, I posted about this weeks ago. The fucking “IoT” can be a fucking botnet. I fucking hate it.

    Today, git.kernel.org receives about 6M daily requests demanding to see random commits. Of these, 66% are still immediately batted away with the Anubis challenge, but 33% are now solving the math and getting through to the main site — because apparently what we have to offer is worth spending a ton of cycles to calculate the Anubis challenge.

    sigh

    In terms of what we’re doing, we’re turning off features to reduce the number of crawlable URLs and to gate off actions that are expensive for us to run. Expect to lose some functionality, at least when accessing our resources anonymously. Trust me, we hate it just as much as you, but at this point it’s a necessity.

    Yep, this is a good idea.

  • moonleay@feddit.org
    link
    fedilink
    arrow-up
    5
    ·
    edit-2
    22 hours ago

    Okay, I’m gonna make myself very unpopular here, but I feel like they got what was coming for them. I think nobody should feel bad for them.

    Popular figure heads of the kernel and the linux foundation itself embraces and uses generative AI. (For code & graphics).

    They lost their right to complain about scrapers, when then started using the result of them in my opinion.

    (It is also quite ironic that the author of this blogpost has an AI pfp on his fedi profile.)

    • andioop@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      edit-2
      27 minutes ago

      The highminded part of me says it’s bad that this is happening, especially given the freedom Linux still provides from the other, more locked-down options. And that you may still choose to be a maintainer or contributor without being all-in on AI, and it sucks to impact “innocents” that way. And at least what I assume is Torvalds being judicious and not purely vibe-coding is better than people who type “make me a kernel” and expect the world.

      The petty part of me says “okay, your project won’t be part of the anti-AI ideology, glad to see your project suffer because of it then, even if just in this way.”