News for hackers. Stuff that matters.
Re:Only Google is really allowed to crawl the web by henriquez on Friday March 26, 2021 @11:47AM (#26593483)
I'd like to see some data on their claim that website operators are giving googlebot special privileges. As far as I can tell it would be a huge pain in the ass to block crawler bots from my servers, not that I've tried. I have some weird pages that tend to get crawlers caught in infinite loops, and I try to give them hints with robots.txt but most of the bots don't even respect robots.txt.

If I actually wanted to restrict bots, it would be much easier to restrict googlebot because they actually follow the rules.

I don't disagree in principle that there should be an open index of the web, but for once I don't see Google as a bad actor here.

Re:Only Google is really allowed to crawl the web by suicas on Friday March 26, 2021 @11:59AM (#26593639)
A company I worked for ~7 years ago ran its own focused web crawler (fetching ~10-100m pages per month, targeting certain sections of the web).

There were a surprising number of sites out there that explicitly blocked access to anyone but Google/Bing at the time.

We'd also get a dozen complaints or so a month from sites we'd crawled. Mostly upset about us using up their bandwidth, and telling us that only Google was allowed to crawl them (though having no robots.txt configured to say so).

Re:Only Google is really allowed to crawl the web by dillondoyle on Friday March 26, 2021 @01:00PM (#26594367)
Isn't that the website owners right though? I'm not sure I understand the problem here.

If Google is taking traffic and reducing revenue, a company can deny in robots.txt. Google will actually follow those rules - unlike most others that are supposedly in this 2nd class.

Re:Only Google is really allowed to crawl the web by suicas on Friday March 26, 2021 @01:10PM (#26594486)
Yup, no problem here, was just making an observation about how common such blocking was (and about the fact that some people were upset at being crawled by someone other than Google, despite not blocking them).

The company did respect robots.txt, though it was initially a bit of a struggle to convince certain project managers to do so.

Re:Only Google is really allowed to crawl the web by d110af5ccf on Friday March 26, 2021 @07:07PM (#26598076)
> Isn't that the website owners right though?

No. The internet is public. Publishers shouldn't get any say in who accesses their content or how they do it. As far as I'm concerned, the fact that they do is a bug.

Re:Only Google is really allowed to crawl the web by lytedev on Friday March 26, 2021 @08:16PM (#26598534)
No, it's not. I can setup a login page and keep you out if I want. And I can do it however I want.
Re:Only Google is really allowed to crawl the web by DangitBobby on Saturday March 27, 2021 @09:32AM (#26602171)
But your login page will be public and subject to being crawled.
Re:Only Google is really allowed to crawl the web by henriquez on Saturday March 27, 2021 @12:44AM (#26599986)
My server, my rules.
Re:Only Google is really allowed to crawl the web by luckylion on Friday March 26, 2021 @12:37PM (#26594102)
I usually recommend setting only Google/Bing/Yandex/Baidu etc to Allow and everything else to Disallow.

Yes, the bad bots don't give a fuck, but even the non-malicious bots (ahrefs, moz, some university's search engine etc) don't bring any value to me as a site owner, take up band width and resources and fill up logs. If you can remove them with three lines in your robots.txt, that's less noise. Especially universities do, in my opinion, often behave badly and are uncooperative when you point out their throttling does not work and they're hammering your server. Giving them a "Go Away, You Are Not Wanted Here" in a robots.txt works for most, and the rest just gets blocked.

Re:Only Google is really allowed to crawl the web by d110af5ccf on Friday March 26, 2021 @07:09PM (#26598084)
> they're hammering your server

Why can't you just ratelimit IPs that are "too active" for your server to handle?

Re:Only Google is really allowed to crawl the web by luckylion on Saturday March 27, 2021 @04:53AM (#26600966)
From some I could, but why would I? If they're not adding value and they don't want to behave, I don't see a reason to spend money to adapt my systems to be "inclusive" towards their usage patterns.
Re:Only Google is really allowed to crawl the web by d110af5ccf on Sunday March 28, 2021 @02:13AM (#26608383)
In context, you're justifying blocking all automated traffic, even that which does behave, by pointing out that some of it doesn't. That attitude seems lazy at best, malicious at worst.
Re:Only Google is really allowed to crawl the web by MinorTom on Friday March 26, 2021 @08:10PM (#26598503)
CGNAT
Re:Only Google is really allowed to crawl the web by d110af5ccf on Sunday March 28, 2021 @02:09AM (#26608373)
Now that's a really good point. I wonder why there isn't a standard protocol for signalling upstream that a particular connection is abusive and to please rate limit the path at the source on your behalf? It would certainly add complexity, but the current situation is hardly better.
Re:Only Google is really allowed to crawl the web by jameshart on Friday March 26, 2021 @01:04PM (#26594427)
When you operate commercial sites at scale, bots are a real thing you spend real engineering hours thinking about and troubleshooting and coding to solve for.

And yes, that means google gets special treatment.

Think about the model for a site like stackoverflow. The longest of long tail questions on that site: what’s the actual lifecycle of that question?

- posted by a random user - scraped by google, bing, et al - visited by someone who clicked on a search result on google - eventually, answered - hopefully, reindexed by google, bing et al - maybe never visited again because the answer now shows up on the google SERP

In the lifetime of that question how many times is it accessed by a human, compared to the number of times it’s requested and rerequested by an indexing bot?

What would be the impact on your site of three more bots as persistent as google bot? Why should you bother with their requests?

So yes, sites care about bot traffic and they care about google in particular.

Re:Only Google is really allowed to crawl the web by burkaman on Friday March 26, 2021 @12:11PM (#26593798)
See figure I.4 on page 24 of this UK government report: https://assets.publishing.service.gov.uk/media/5efb1db6e90e0...

Additional evidence here: https://knuckleheads.club/the-evidence-we-found-so-far/

Re:Only Google is really allowed to crawl the web by zmarty on Friday March 26, 2021 @11:52AM (#26593530)
A lot of news websites restrict any crawler other than Google. And this does not happen only via robots.txt.
Re:Only Google is really allowed to crawl the web by simias on Friday March 26, 2021 @12:09PM (#26593768)
Indeed, years ago I had scripts to automatically fetch URLs from IRC and I quickly realized that if I didn't spoof the user agent of a proper web browser many websites would reject the query. Googlebot's UA worked just fine however.
Re:Only Google is really allowed to crawl the web by judge2020 on Friday March 26, 2021 @01:49PM (#26594920)
> Googlebot's UA worked just fine however

They obviously don't care enough then - Google says you should use rdns to verify that googlebot crawls are real[0]. Cloudflare does this automatically now as well for customers with WAF (pro plan).

0: https://developers.google.com/search/docs/advanced/crawling/...

Re:Only Google is really allowed to crawl the web by Lammy on Friday March 26, 2021 @11:58AM (#26593619)
Spoofing your user-agent as googlebot is a common way to bypass paywalls, is (was?) a way to read Quora without creating an account, etc. Publishers obviously need to send their page/article to Google if they want it to be indexed but may not want to send the same page content to a normal user: https://www.256kilobytes.com/content/show/1934/spoofing-your...

This was common even back in the mid-2000s:

https://www.avivadirectory.com/bethebot/

https://developers.google.com/search/blog/2006/09/how-to-ver...

Re:Only Google is really allowed to crawl the web by malf on Friday March 26, 2021 @11:53AM (#26593550)
Re:Only Google is really allowed to crawl the web by noxvilleza on Friday March 26, 2021 @01:58PM (#26595002)
Google aren't the bad actor in the sense that they are actively doing something wrong, but they are definitely benefiting from the monopoly that they created and work on maintaining. If this continues then nobody will really ever be able to challenge them, which means possibly "better" products will fail to penetrate the market.
Re:Only Google is really allowed to crawl the web by ehsankia on Friday March 26, 2021 @02:28PM (#26595287)
> but for once I don't see Google as a bad actor here.

As inflammatory as the headline of the page looks, they literally admit it's not google's fault in the smaller text lower down:

"This isn’t illegal and it isn’t Google’s fault, but"

Re:Only Google is really allowed to crawl the web by throwaway_uat on Friday March 26, 2021 @11:52AM (#26593541)
LinkedIn profile/Quora answer are accessible by Google bot without signin
Re:Only Google is really allowed to crawl the web by calimac on Friday March 26, 2021 @11:57AM (#26593608)
The studies and data to support their claim is in the first paragraph of the article you "read" before posting the question.
Re:Only Google is really allowed to crawl the web by soheil on Friday March 26, 2021 @11:59AM (#26593634)
It's hilarious to think there exists people who think googlebot does not get special treatment from website operators. Here is an experiment you can do in a jiffy, write a script that crawls any major website and see how many URL fetches it takes before your IP gets blocked.

Googlebot has a range of IP addresses that it publicly announces so websites can whitelist them.

Re:Only Google is really allowed to crawl the web by quitethelogic on Friday March 26, 2021 @04:16PM (#26596420)
> Googlebot has a range of IP addresses that it publicly announces so websites can whitelist them.

Google says[1] they do not do this:

"Google doesn't post a public list of IP addresses for website owners to allowlist."

[1]https://developers.google.com/search/docs/advanced/crawling/...

Re:Only Google is really allowed to crawl the web by johncolanduoni on Friday March 26, 2021 @05:35PM (#26597225)
From that same page they recommend using a reverse DNS lookup (and then a forward DNS lookup on the returned domain) to validate that it is google bot. So the effect is the same for anyone trying to impersonate googlebot (unless they can attack the DNS resolution of the site they’re scraping I guess).
Re:Only Google is really allowed to crawl the web by tedunangst on Friday March 26, 2021 @01:57PM (#26594994)
I don't whitelist googlebot, but I don't block them either because their crawler is fairly slow and unobtrusive. Other crawlers seem determined to download the entire site in 60 seconds, and then download it again, and again, until they get banned.
Re:Only Google is really allowed to crawl the web by Mauricebranagh on Friday March 26, 2021 @01:01PM (#26594378)
I have never had that problem running screaming frog on big brand sites apart from one or two times.
Re:Only Google is really allowed to crawl the web by WesolyKubeczek on Friday March 26, 2021 @12:45PM (#26594198)
I don't scrape a website often, but when I do, I'm using a user agent of a major browser.
Re:Only Google is really allowed to crawl the web by dheera on Friday March 26, 2021 @01:22PM (#26594640)
Do any of them intersect with Google Cloud IP addresses? If so set up a VPN server on Google Cloud.