YHK - yet another hacker news clone

It's too late to comment on your older posts, but I'd just like to say: it's nice to see someone making oldschool web browsers work properly on the modern web.

https://www.sammystraus.com/#using-llms-to-make-the-emacs-we...

I _also_ posted to HN and made it to #1[0]; the effect this had on my CPU/network traffic on a 5/EUR month VPS over at Hetzner was in the single digit percentages.

As per the wiki page for the C10k problem[1] where it says "_was_ [emphasis mine] the problem of optimizing computer networking stacks to handle a large number of clients at the same time". This was solved over a decade ago...

Now get off my lawn!

(TBF I think the author acknowledges this)

[0] https://news.ycombinator.com/item?id=43725815

[1] https://en.wikipedia.org/wiki/C10k_problem

> one specific user. I won't name names

Who is?!

Try posting something viral on Mastodon. The logs clearly show that it isn't the most efficient social network.

What confused me most about this is that the entire site is, apparently, a single page (there's no sitemap that I can use to verify this; there IS an RSS file which appears to confirm it) containing all posts. Links at the top (headed "Table of Contents") are all in-page links.

At first, I assumed this was a single blog post, especially with a "Table of Contents" at the top. I guess it's following some old-school blogging conventions, but AFAICR, even those sites retained individual pages for separate posts.

There is so much spam, abuse, and aggressive scraping that I've had to block:

  - AWS
  - Google Cloud
  - Azure
  - Alibaba Cloud
  - Oracle

and a handful of other ASNs on almost all of my properties. It would be one thing if it was simple scraping, but it's often genuine agentic abuse (just spamming for vulnerabilities* or scraping millions of pages with very little valuable or dynamic content). These clouds must get the abuse happening under their own roof under control.

I banned Alibaba's Cloud two years ago and it still hits one of my domains 1 million times per day, despite every route 4xx-ing during that time.

Even Apple has aggressively ramped up its scraping in the past few months, but thankfully they do respect robots.txt.

It's frustrating because some of my real users route through these clouds via their work VPNs. Also, there are a lot of less-than-reputable AI scrapers using global bot-nets via residential IPs to scrape, making it even harder to detect and ban them without affecting real people.

* like leaked .env routes, brute forcing admin panels, and so on

Have you tried dealing with bots using CF Turnstile? Ref: https://www.cloudflare.com/products/turnstile/

Heh. I posted a GitHub project Show HN, a couple of days ago, and it never even made it out of new, but it got me some bots.

That's a big reason that I never post any of my apps here.

Welcome to hell, kid...

Ok, on the one hand to have one bot hitting your website to populate some kind of slop newsletter is pretty annoying.

On the other hand, “multiple times per minute” doesn’t seem that high? Even if it was 60x per min that’s fully within the limits of what a 2015 laptop in the closet can handle.

Same with me, every-time I got 1st page I got a lot of robots

> I won't name names, but I looked them up, and they describe themselves as a service that listens for changes to a website, and then summarizes them into an AI slop news letter. And by 'listens to changes' I mean query our website many many times per-minute. Blocked.

That sort of behavior would justify a name and shame imo

Inconsiderate shitty services don’t deserve the politeness of protecting their name