• 63 Posts
  • 909 Comments
Joined 2 years ago
cake
Cake day: June 2nd, 2023

help-circle
  • The insane part is that since the website is powered by WordPress, the scrapers could access all the posts in a single JSON file.

    I was also exasperated by the fucking scrapers reading the same fucking page 20 times a second on posts that didn’t get new content from a decade ago so I migrated my blog to Hugo and I was completely shocked to discover that by default every WordPress blog comes with an unauthenticated api that allows literally everyone to get the whole blog content in JSON files. Why the fuck are you wasting my server power to scrape the HTML if you can get a easy JSON??? Take that fucking JSON and subscribe to the RSS for getting the next post that will be published the next decade. If you refresh that fucking URL 1000 times a day you will get the same fucking stuff, not a new magical article

    I mitigated the issue with Wordfence by setting a rule like “more than 2 pages requested within a second = ip banned for a year”

    Now, why would WordPress include an unauthenticated api that allows everyone to do a full unauthorized copy of the site in literally seconds is beyond me. There’s no valid reason to have it public without any authentication. That API shit doesn’t make sense, why by default a website should accept user signups from bots via API





















  • I work in a e-commerce and the amount of people that forgets the street number is insane.

    We send email to ask clarification: no response (probably filtered by the artificial stupidity classification in Gmail, everyone only reads the main category)

    We call them to ask clarification: nobody picks up because they assume it’s telemarketing

    I blame the Google chrome auto fill, because it fills the whole form automatically instead of line by line like on Firefox, so people assume that it’s filled correctly while instead the browser decided to omit the street number