this post was submitted on 18 Feb 2026
947 points (99.1% liked)
Technology
81534 readers
4170 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related news or articles.
- Be excellent to each other!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, this includes using AI responses and summaries. To ask if your bot can be added please contact a mod.
- Check for duplicates before posting, duplicates may be removed
- Accounts 7 days and younger will have their posts automatically removed.
Approved Bots
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Codeberg Anubis when?
Unfortunately Anubis wouldn't stop the bots, it would just slow them down.
Anubis just adds proof of work, AKA computation, to your requests. It's why your browser takes a second before it can access the site. It's nothing for things on your scale, but it's a fuck ton of time and money for large scraping operations accessing millions of links every day.
For a bot submitting PRs though, it's not gonna be a meaningful hindrance unless the person is specifically running a bot designed to make thousands of PRs every day, which a lot of these aren't.
Really unfortunate.
there is?
I'm ignorant 😅 I don't use either. I guess it doesn't really defend against browser-remote-controlling bot agents.
if you mean some users giving control of their browser to an bot no it don't because it's still a legit user browser window
but most of bots don't use a legit browser window (because it would be impossible to scale)
I was thinking that using selenium or similar would allow the bot to circumvent any block that works in a browser. Since it's probably not doing a million PRs at once, doing that would be viable. It could even use the cookie from the selenium session to then use the api directly.
Kinda like flaresolver does for prowlarr/jackett.
In which case Anubis is only a temporary measure until the vibe coders wise up.
Defense systems also improve. Anubis can make the Proof-of-Work (PoW) more difficult or add new checks. This competition is won by whoever can keep their costs lower. When spammers have to use more resources for each pull request while normal users do not pay an extra cost, the defenders win.