News for hackers. Stuff that matters.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by gruez on Sunday May 31, 2026 @11:52AM (#48346713)
Depends on what type of scraping you're trying to stop. For the dumb scrapers that would try to scrape every page on a git forge (for which there are a bazillion pages for a modest project, because of how the site works), yeah it might deter them enough to stop. For anything high value (eg. reddit comments or retail prices), 10s of cpu time isn't going to stop them.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by pmontra on Sunday May 31, 2026 @11:59AM (#48346769)
It will not scare away bots but 10 seconds of wait (CPU or only a sleep) will turn away many real users. "This site is so slow, I'll use something else." A kind of reverse captcha.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by Hnrobert42 on Sunday May 31, 2026 @12:33PM (#48347090)
Maybe, the proof of work can run in the background.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by btown on Sunday May 31, 2026 @01:28PM (#48347601)
Or it can run as part of a checkout wizard's "verifying your browser and processing your payment, don't close your tab" step.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by mattstir on Sunday May 31, 2026 @11:29PM (#48352307)
At which point it exists solely to punish real human users? What scraper bot is going through checkout?
Re:Cloudflare Turnstile requiring fingerprintable WebGL by BenjiWiebe on Monday June 01, 2026 @01:37PM (#48360055)
The credit card tester bots go through the checkout process.

PoW wouldn't be a big issue for them though since their volume is much lower.

Re:Cloudflare Turnstile requiring fingerprintable WebGL by stephantul on Sunday May 31, 2026 @01:03PM (#48347359)
Sure, the whole premise is exactly that proof of work reduces the value of scraping, while having negligible impact on users. If the data is so valuable that bot operators are willing to pay 10s of cpu, then other measures are necessary.

Nevertheless even for these high value cases, you can still argue that it disincentivizes the business model, it becomes less efficient.

Re:Cloudflare Turnstile requiring fingerprintable WebGL by thayne on Sunday May 31, 2026 @01:44PM (#48347796)
If it's high value, there isn't really much you can do that will be completely effective. Traditional captchas can often be beaten by AI, or by "captcha farms" where impoverished people are paid pennies to complete captchas. Fingerprinting can be beaten by using a full browser to make the requests. Basically anything you do is just a matter of making it more expensive for bots to access it.
Re:Cloudflare Turnstile requiring fingerprintable WebGL by arbol on Sunday May 31, 2026 @03:46PM (#48349076)
Beating fingerprinting and beating traditional captcha is far more expensive than solving pow. Pow doesn't stop anyone, not even the most novice bot operators
Re:Cloudflare Turnstile requiring fingerprintable WebGL by tobyhinloopen on Monday June 01, 2026 @01:25AM (#48352948)
You can just download all of Reddit from torrent sites