• 3 Posts
  • 136 Comments
Joined 1 year ago
cake
Cake day: April 13th, 2024

help-circle

  • My experience with IPFS over the years has been abysmal, and I think people have said the protocol design cannot sustain any more growth, which is not even that big yet at all.

    You also cannot realistically search for files reliably by its hash, because of how files are divided into smaller pieces, whereby the method of dividing can change between clients, making the hashes incomparable. BitTorrent v2 solves this to my understanding, but almost nobody uses it for some reason.

    Often times you need to wait several minutes for IPFS to find a file, assuming it ever finds it, which sometimes fails even on two boxes next to each other.









  • What you’re doing is filtering out bots that can’t be bothered to execute JavaScript. You don’t need to do a computational heavy PoW task to do that.

    Most bots and scrapers from what I’ve seen already are using (headless) full browsers, and hence are executing javascript, so I think anything that slows them down or increases their cost can reduce the traffic they bring.

    Canvas fingerprinting filters out bots better than PoW

    Source? I strongly disagree, and it’s not hard to change your browser characteristics to get a new canvas fingerprint every time, some browsers like firefox even have built-in options for it.


  • Proof of Work is a terrible solution

    Hard disagree, because:

    it assumes computational costs are significant expense for scrapers compared to proxy costs

    The assumption is correct. PoW has been proven to significantly reduce bot traffic… meanwhile the mere existence of residential proxies has exploded the availability of easy bot campaigns.

    Canvas fingerprinting would work.

    Demonstrably false… people already do this with abysmal results. Need to visit a clownflare site? Endless captcha loops. No thanks



  • All you need in order to do this is for the client to encrypt their password before sending it to the server. Often services that advertise “zero knowledge” platforms that use end-to-end encryption will authenticate their users in this way. If this were a website for example, there could be a javascript/wasm library used within the client page that encrypts their password before a login request is sent to the server.