News for hackers. Stuff that matters.
Re:Firefox removes core product support for RSS/Atom feeds by capdeck on Friday October 12, 2018 @02:36PM (#18203638)
> You can accomplish 90% of what you want with RSS just by parsing the metadata on an HTML page.

I am not sure you can. Metadata is quite inconsistent and many websites that I have the RSS feed for block crawlers and scrapers. Advantages of RSS are common standard and design to be consumed by a bot. What we've got instead are curated fb and twitter feeds that people get hooked on and never look back. Openness is the aspect of RSS that I'll miss the most.

Re:Firefox removes core product support for RSS/Atom feeds by pteraspidomorph on Friday October 12, 2018 @03:47PM (#18204175)
Very large websites aside, the RSS offer on most of the web is pretty appaling. Standards are not followed or followed poorly. Things like publication dates that are actually the upload date and completely unrelated to the date the content went online, or images that are loaded by html embedded in the description field in nonstandard ways, or sometimes in the image field, or not at all... Or it's the wrong image, because the feed is provided automatically and doesn't have the intelligence to correctly parse the content...

That said, if Firefox hadn't hidden live bookmarks away several years ago they might see more use. The small subset of users who bothered to look for them and bring them back to the toolbar might even overlike the set of users who disable telemetry, too.

Re:Firefox removes core product support for RSS/Atom feeds by PaulHoule on Friday October 12, 2018 @04:28PM (#18204468)
I have been through this Wikipedia vs DBpedia, any kind of case where there is the primary product (which is part of quality control loops; bugs in the HTML get fixed) vs secondary products (RDF/RSS bugs don't get reported never mind fixed.)

Part of the solution is this sort of A.I.

http://ontology2.com/essays/ClassifyingHackerNewsArticles/

but trained by you and not some other person who is training it to control your behavior.

Re:Firefox removes core product support for RSS/Atom feeds by slacka on Saturday October 13, 2018 @11:44AM (#18208474)
If anything hiding live bookmarks was a favor to RSS. Anyone who was introduced to RSS through live bookmarks would think RSS was a horrible idea. It was the worst RSS implementation I've ever tried or experienced.
Re:Firefox removes core product support for RSS/Atom feeds by ehnto on Friday October 12, 2018 @11:34PM (#18206263)
I'm not sure it would be any different for any other feed specification unless the spec maintainer supplies all the software. It's a human problem rather than a software/spec problem. But I agree of course, it's a bit of a mess and definitely not something you can rely on to use in automated systems without a lot of extra validation.
Re:Firefox removes core product support for RSS/Atom feeds by Sophira on Saturday October 13, 2018 @07:29AM (#18207480)
There's an article from 14 years ago that I remember to this day, mainly for the immortal line "RSS 2.0 is incompatible with itself": http://www.diveintomark.link/2004/the-myth-of-rss-compatibil...

It goes into some detail about the various RSS incompatibilities and is well worth the read, because RSS never really got any better even afterwards.

Re:Firefox removes core product support for RSS/Atom feeds by gregknicholson on Sunday October 14, 2018 @06:52AM (#18212313)
Perhaps with hindsight Atom should have been called RSS 3.0.
Re:Firefox removes core product support for RSS/Atom feeds by ChuckMcM on Friday October 12, 2018 @05:32PM (#18204867)
This captures it. Metadata isn't a controlled spec so there is no leverage to say "you are doing it wrong". As a result when you only care about a couple of "big players" it is feasible to just follow along with their changes as they change but a dozen different players? That is impractical.
Re:Firefox removes core product support for RSS/Atom feeds by greglindahl on Friday October 12, 2018 @05:48PM (#18204957)
Websites tend to use Facebook opengraph metadata correctly, because they can see the results on Facebook.

I think that's the kind of thing that burtonator was referring to.

Re:Firefox removes core product support for RSS/Atom feeds by eli on Friday October 12, 2018 @05:59PM (#18205046)
Dunno if RSS is the example I’d hold up of a controlled spec success story. Worked fine if you only ever had links, titles and, sometimes, some body text.
Re:Firefox removes core product support for RSS/Atom feeds by irrational on Friday October 12, 2018 @03:00PM (#18203820)
How do they block crawlers and scrapers? If I grab the page using headless chrome, how can it tell what I'm doing with the data on my end, especially if I have the script grab the pages at a rate that would be more consistent with a human?
Re:Firefox removes core product support for RSS/Atom feeds by aftbit on Friday October 12, 2018 @04:46PM (#18204597)
Headless Chrome sets a different User Agent than normal Chrome. Once you get past that, there are trickier ways to distinguish bots from humans. These range from access pattern analysis (who visits hundreds of URLs per day but never clicks anything?) to differences in the JavaScript and rendering behavior of headless Chrome from normal Chrome. Developing a truly human-like bot that can pass modern anti-bot logic is very hard, and that's without even dealing with IP reputation or ReCaptcha.
Re:Firefox removes core product support for RSS/Atom feeds by jjeaff on Friday October 12, 2018 @10:52PM (#18206131)
Even if you manually browse lots of pages in Google or Amazon, you will eventually be presented with a captcha because it thinks you are a bot.
Re:Firefox removes core product support for RSS/Atom feeds by tubbs on Friday October 12, 2018 @03:09PM (#18203888)
> at a rate that would be more consistent with a human?

I think that's the hard part. Some content providers put out content way quicker than a human could ever keep up with. I wrote a web crawler once to download high resolution pictures of cars from a Russian website at a quick but modest pace and I got IP banned within a couple hours.

Re:Firefox removes core product support for RSS/Atom feeds by kbenson on Friday October 12, 2018 @03:17PM (#18203946)
It depends on the site. If the Russian site wasn't used to the amount of traffic you generated through your downloads, it's easy to see. If a site is updating content so fast that crawling it all would get you blocked, you use multiple crawlers. It's trivial and cheap to get 100 different ips for crawling for your headless chromes, instances. At that point you could get something new once a minute and not reuse an ip for close to two hours. A more aggressive reuse schedule would make that sufficient for almost any site that it's worth crawling.
Re:Firefox removes core product support for RSS/Atom feeds by shabbyrobe on Friday October 12, 2018 @05:49PM (#18204966)
How do you get 100 different IPs trivially and cheaply? I suppose we might have different definitions of cheap; 100 EC2 t3.nanos would be a bit out of my price range, but that might be small change for the next person.
Re:Firefox removes core product support for RSS/Atom feeds by kbenson on Friday October 12, 2018 @06:53PM (#18205290)
AWS is far from a cheap provider. DigitalOcean (as well as many others) have 1GB instances with 25GB disks for $5/mo. Some allow additional IPs for a few dollars. Deploy a bunch of minimal instances that all they do is run a socks proxy and are firewalled off from everyone except your source IP address, and use them as the configured proxy for your actual scanning machine(s). For chrome, you can configure a proxy on the command line. Most quality http libraries in most languages support proxies (otherwise I wouldn't consider them quality libraries...).

For a business (which what I'm thinking in terms of), $500/mo for 100 IP addresses which you can trivially cycle by destroying and creating new virts is well within cost. For an individual, I assume you wouldn't be crawling 24/7, so bring up as many as needed for short bursts. At $0.007/hr, you could bring up 100 from a snapshot/template, use them for a few hours to crawl whatever you need, and it will cost you just over $2.[1] For longer term but smaller needs, just spin up 5-10 for $25-$50/mo cost.

1: 100 * $0.007/hr * 3 hours = $2.10

Re:Firefox removes core product support for RSS/Atom feeds by jjeaff on Saturday October 13, 2018 @12:01AM (#18206365)
You also have to factor in the data transfer which will add up quickly. Aws also charges an extra fee for cycling through IP addresses. I think maybe 25 makes it under the free tier, but more than that and it will start to add up as well.

DO data is cheaper, but not free, and I'm not sure if they charge for changing IP addresses a lot.

Not to mention that in many cases, admins start blocking while up ranges. And due to scraping, lots of sites block popular ip ranges like that of AWS. There are actually forums where people keep updated ranges for the different cloud platforms.

Re:Firefox removes core product support for RSS/Atom feeds by panopticon on Friday October 12, 2018 @07:27PM (#18205425)
AWS lets you assign multiple IP addresses to a single EC2 instance. We used to do that for SSL termination because we couldn't use SNI yet.

This was a long time ago, and I don't remember what it cost, and there was a limit. It was certainly cheaper than having multiple EC2s just for their IPs though.

Re:Firefox removes core product support for RSS/Atom feeds by drchickensalad on Friday October 12, 2018 @09:12PM (#18205816)
I work on some authentication software for a relatively niche service in a company of 50 developers. We get brute force attacks of thousands of IPs quite regularly.
Re:Firefox removes core product support for RSS/Atom feeds by JetSpiegel on Saturday October 13, 2018 @06:31PM (#18210365)
You rent a botnet like Luminati. All of them residential IP, since that is provided by the Hola "free" "VPN".
Re:Firefox removes core product support for RSS/Atom feeds by gsich on Friday October 12, 2018 @06:37PM (#18205217)
VPN provider with different locations?