News for hackers. Stuff that matters.
Re:Only Google is really allowed to crawl the web by sxp on Friday March 26, 2021 @11:49AM (#26593501)
https://knuckleheads.club/the-googlebot-monopoly/ has actual details.

> Let’s take a look at the robots.txt for census.gov from October of 2018 as a specific example to see how robots.txt files typically work. This document is a good example of a common pattern. The first two lines of the file specify that you cannot crawl census.gov unless given explicit permission. The rest of the file specifies that Google, Microsoft, Yahoo and two other non-search engines are not allowed to crawl certain pages on census.gov, but are otherwise allowed to crawl whatever else they can find on the website. This tells us that there are two different classes of crawlers in the eyes of the operators of census.gov: those given wide access, and those that are totally denied.

> And, broadly speaking, when we examine the robots.txt files for many websites, we find two classes of crawlers. There is Google, Microsoft, and other major search engine providers who have a good level of access and then there is anyone besides the major crawlers or crawlers that have behaved badly in the past that are given much less access. Among the privileged, Google clearly stands out as the preferred crawler of choice. Google is typically given at least as much access as every other crawler, and sometimes significantly more access than any other crawler.

Re:Only Google is really allowed to crawl the web by indymike on Friday March 26, 2021 @03:47PM (#26596154)
Broadly speaking, robots.txt files are often ignored. I used to run a fairly large job ad scraping organization, and we would be hired by companies (700 of the fortune 1000 used us) to scrape the job ads from their career pages, and then post those jobs on job boards. 99 of 100 times, the robots file would disallow us to scrape. Since we were being paid by that company's HR team to scrape, we just ignored it because getting it fixed would take six months and 22 meetings.
Re:Only Google is really allowed to crawl the web by chmod775 on Friday March 26, 2021 @05:41PM (#26597294)
> Broadly speaking, robots.txt files are often ignored.

If you wanna go nuclear on people who do that, include an invisible link in your html and forbid access to that URL in your robots.txt, then block every IP who accesses that URL for X amount of time.

Don't do this if you actually rely on search engine traffic though. Google may get pissed and send you lots of angry mail like "There's a problem with your site".

Re:Only Google is really allowed to crawl the web by jedberg on Friday March 26, 2021 @06:33PM (#26597819)
> Don't do this if you actually rely on search engine traffic though. Google may get pissed and send you lots of angry mail like "There's a problem with your site".

Ah, but of course you would exclude Google's published crawler IPs from this restriction, because that is exactly what they want you to do.

Re:Only Google is really allowed to crawl the web by indymike on Friday March 26, 2021 @07:49PM (#26598381)
We would occasionally have customer try doing that. AWS has lots of IP addresses :-).
Re:Only Google is really allowed to crawl the web by dzhiurgis on Saturday March 27, 2021 @05:40AM (#26601141)
Nice insight - use different IP address for hidden links!
Re:Only Google is really allowed to crawl the web by JackFr on Friday March 26, 2021 @12:41PM (#26594159)
So from the website's point of view there is no difference between 'crawling' and 'scraping'. Census.gov I assume has a ton of very useful information which is in the public domain which a host of potential companies could monetize by regularly scraping census.gov. Census.gov's purpose to make this information available to people is served by google, yahoo and bing. On the other hand if I have a business which is based on that data, in fact I'm at cross purposes to them.
Re:Only Google is really allowed to crawl the web by jonas21 on Friday March 26, 2021 @02:05PM (#26595062)
The census data is available for bulk download, mostly as CSV (for example [1]). Scraping census.gov is worse for both the Census Bureau (which might have to do an expensive database query for each page) and for the scraper (who has to parse the page).

Blocking scrapers in robots.txt is more of a way of saying, "hey, you're doing it wrong."

It's also worth noting that the original article is out of date. The current robots.txt at census.gov is basically wide-open [2].

[1] https://www.census.gov/programs-surveys/acs/data/data-via-ft...

[2] https://www.census.gov/robots.txt

Re:Only Google is really allowed to crawl the web by foobar33333 on Friday March 26, 2021 @05:29PM (#26597171)
Scrapers don't care about robots.txt. I have scraped multiple websites in a previous job and the robots.txt means nothing. Bigger sites might detect and block you but most don't.
Re:Only Google is really allowed to crawl the web by njharman on Friday March 26, 2021 @01:17PM (#26594578)
I'm generally anti business. But I have to disagree. "The Public" that the government serves includes businesses. Businesses (ignoring corporate personhood bullshit) are owned and operated by people.

I do not want the government deciding "what purposes" e.g. non-commercial, serve the public good. The public gets to decide that. (charging a license for commercial use is maybe ok (assuming supporting that use costs government "too much").

And I very do not want current situation with the government anointing a handful of corporations (the farthest thing from the public possible) access and denying everyone else including all of the actual public.

Re:Only Google is really allowed to crawl the web by pessimizer on Friday March 26, 2021 @01:55PM (#26594973)
A specific case where this favorite-picking by government enables corruption: https://en.wikipedia.org/wiki/Nationally_recognized_statisti...

And an example from the quickly-approaching future, when there will be Nationally Recognized Media Organizations who license "Fact-Checkers," through which posts to public-facing will have to be submitted for certification and correction.

Re:Only Google is really allowed to crawl the web by marcosdumay on Friday March 26, 2021 @02:31PM (#26595308)
Favorite-picking by the government is corruption by itself already.
Re:Only Google is really allowed to crawl the web by hnbroseph on Friday March 26, 2021 @02:17PM (#26595180)
> I do not want the government deciding "what purposes" e.g. non-commercial, serve the public good. The public gets to decide that.

the public's "decision" on things like this is made manifest by government policy, no?

Re:Only Google is really allowed to crawl the web by danShumway on Friday March 26, 2021 @02:49PM (#26595525)
In theory. In practice, is every single policy that our government upholds currently popular with the majority of people?

It's possible to have government policies that the majority of people disagree with, that remain for complicated reasons related to apathy, lobbying, party ideology, or just because those issues get drowned out by more important debates.

Government is an extension of the will of the people, but the farther out that extension gets, the more divorced from the will of the people it's possible to be. That's not to say that businesses are immune from that effect either -- there are markets where the majority of people participating in them aren't happy with what the market is offering. All of these systems are abstractions, they're ways of trying to get closer to public will, and they're all imperfect. But government is particularly abstracted, especially because the US is not a direct democracy.

I'm personally of the opinion that this discussion is moot, because I think that people have a fundamental Right to Delegate[0], and I include web scraping public content under that right. But ignoring that, because not everyone agrees with me that delegation is right, allowing the government to unilaterally rule on who isn't allowed to access public information is still particularly susceptible to abuse above and beyond what the market is capable of.

[0]: https://anewdigitalmanifesto.com/#right-to-delegate

Re:Only Google is really allowed to crawl the web by vharuck on Friday March 26, 2021 @03:23PM (#26595887)
In the case of Census.gov, they offer an API to get the data[0]. It's actually pretty nice. Stable, ton of data, fairly uniform data structure across the different products. Very high rate limits, considering most data only needs retrieved once a year. I think they understand the difference between crawling and scraping.

[1] https://www.census.gov/data/developers.html

Re:Only Google is really allowed to crawl the web by mulmen on Friday March 26, 2021 @02:21PM (#26595217)
But Google, Yahoo and Bing are also monetizing the data. Why are they allowed to provide “benefits” but “scrapers” are not? Why is it wrong to monetize public data?
Re:Only Google is really allowed to crawl the web by ricardo81 on Friday March 26, 2021 @02:18PM (#26595185)
Having data in the right format as a download or via an API would be the best way to go for public data.

If people have to 'scrape' that data from a public resource, I'd say they're presenting the data in the wrong way.

Re:Only Google is really allowed to crawl the web by indymike on Friday March 26, 2021 @03:44PM (#26596117)
I used to run a fairly large job ad scraping operation. Our scraped data was used by many US state and federal job sites. "Scraping" is just using software to load a page and extracting content. "Crawling" is just load a page, find hyperlinks (hmm... a kind of content), and then crawling those links. Crawling is just a kind of scraping.
Re:Only Google is really allowed to crawl the web by adolph on Friday March 26, 2021 @12:52PM (#26594269)
Is it legal for a government entity to issue a robots.txt like that? Maybe the line between use and abuse hasn't been delinated as well as it needs to be.
Re:Only Google is really allowed to crawl the web by vageli on Friday March 26, 2021 @01:05PM (#26594430)
Is failure to honor a robots.txt a crime? Or rather, would it be unlawful to spoof a user agent to access this publicly available data? After the linkedin [0] case it seems reasonable to think not.

[0]: https://www.eff.org/deeplinks/2019/09/victory-ruling-hiq-v-l...

Re:Only Google is really allowed to crawl the web by Spivak on Friday March 26, 2021 @02:02PM (#26595042)
Spoofing user-agents hasn't worked in a long time for anything but small operations because search engines publish specific IP ranges their scrapers use.
Re:Only Google is really allowed to crawl the web by cryptonector on Saturday March 27, 2021 @01:07AM (#26600076)
The CFAA is so broad and broadly interpreted that I would assume that failure to honor any any site's robots.txt file may incur criminal liability if the U.S. government can claim American jurisdiction (e.g., because the site's owners are U.S. persons or a U.S. corporation, or because the site's servers are located in the U.S.).
Re:Only Google is really allowed to crawl the web by bigwavedave on Friday March 26, 2021 @01:02PM (#26594394)
> Is it legal for a government entity to issue a robots.txt like that?

I may be wrong (this isn't my area), but I was under the impression that robots.txt was just an unofficial convention? I'm not saying people should ignore robots.txt, but are there legal ramifications if ignored? I'm not asking about techniques sites use to discourage crawlers/scrapers, I'm specifically wondering if robots.txt has any legal weight.

Re:Only Google is really allowed to crawl the web by banana_giraffe on Friday March 26, 2021 @11:02PM (#26599535)
Yep, it's defined at https://www.robotstxt.org/

Looks like Google is trying to turn it into an RFC though.

Re:Only Google is really allowed to crawl the web by gnramires on Friday March 26, 2021 @12:22PM (#26593936)
Perhaps there could be some kind of 'Crawler consortium'?

Under this consortium, website owners would be allowed to either allow all crawlers (approved by the consortium) or none at all (that is, none that is in the consortium, i.e. you could allow a specific researcher or something to crawl your website on a case-by-case basis).

This consortium would be composed of the search engines (Google, MS, other industry members), as well as government appointed individuals and relevant NGOs (electronic frontier foundation, etc?). There would be an approval process that simply requires your crawl to be ethical and respect bandwidth usage. Violations of ethics or bandwidth limits could imply temporary or permanent suspension. The consortium could have some bargain or regulatory measures to prevent website owners from ignoring those competitive and fairness provisions.

Re:Only Google is really allowed to crawl the web by dragonwriter on Friday March 26, 2021 @12:25PM (#26593957)
> Perhaps there could be some kind of 'Crawler consortium'?

An industry-wide agreement not to compete for commercially valuable access to suppliers of data?

Comprised of companies that are current (and in some cases perennial) focusses of antitrust attention?

I think there might be a problem with that plan.

Re:Only Google is really allowed to crawl the web by neolog on Friday March 26, 2021 @02:40PM (#26595407)
I don't see the problem. If a bunch of non-google companies pooled resources to make a crawl, that would reduce market concentration, not increase it.
Re:Only Google is really allowed to crawl the web by gnramires on Friday March 26, 2021 @12:34PM (#26594063)
Well, yes, and a common solution to anti-trust cases, that I know of, is some kind of industry self-regulation. In this case I wouldn't trust the industry only to self-regulate; hence, they should at invite (while keeping a minority but not insignificant position) governments and civil society (ngos and other organizations) to participate.

Could you better describe your objections?

Re:Only Google is really allowed to crawl the web by TheAdamAndChe on Friday March 26, 2021 @12:19PM (#26593880)
Are there any actual repercussions for just ignoring robots.txt?
Re:Only Google is really allowed to crawl the web by asciident on Friday March 26, 2021 @01:24PM (#26594663)
There is if you are doing it for work. For example, your company could get sued if you are found using that data and ignoring the ToS. If you are a public figure, you could get your name tarnished as doing something unethical or the media may call it "hacking". If you are rereleasing the data then you risk getting a takedown notice.
Re:Only Google is really allowed to crawl the web by eertami on Friday March 26, 2021 @09:32PM (#26599034)
robots.txt is not a terms of service. Even if it was, it wouldn't be enforceable for a public website. You would need to prove that a web crawler is maliciously causing disruption to your service, and that is not easy.
Re:Only Google is really allowed to crawl the web by asciident on Friday March 26, 2021 @10:26PM (#26599315)
All it takes is your company execs or lawyers to be afraid of a stern letter, and ask you to cancel your project. If you're violating their robots.txt, you're probably violating their terms of service that's hidden somewhere. And your company doesn't want to risk having to pay hundreds of thousands to fight a court case. There's also venues besides courts for them to attack you, like contacting the publishers or hosting platforms for your derivative works. It's a chilling effect.

And I'm not making this up. This kind of stuff has happened to me many times.

Re:Only Google is really allowed to crawl the web by 5560675260 on Friday March 26, 2021 @12:39PM (#26594122)
Your crawler's IP might get banned, eventually.
Re:Only Google is really allowed to crawl the web by the_dege on Friday March 26, 2021 @12:54PM (#26594298)
Sometimes website admins will also try to report your ips to the service provider as a source of attacks (even if not true).
Re:Only Google is really allowed to crawl the web by DocTomoe on Friday March 26, 2021 @05:37PM (#26597258)
Given how often I've had misbehaving crawlers slow own servers in the early 2000s, I do not see how a crawler that disobeys robots.txt is not an attempted attack.