[sudb]

Cool product launch, though it feels a little weird to me that Cloudflare sells agentic products alongside this new service that seems designed to block agentic usage of the web?

I expect there's much more going on than just mouse path detection but I can imagine that this is already tricky for touchscreens and for people using non-traditional mouse inputs (the thinkpad nub comes to mind - but it would also be bad optics to accidentally block people using accessibility mouse tools as bot users, though then this becomes a loophole for agentic browsing!)

In general though I think this is almost definitely a good thing to reduce agentic bot abuse & spam.

[skybrian]

It’s less weird if you think there’s a difference between good bots and bad bots. They can provide services for good bots to use while helping people keep out the bad ones.

If a bot is simulating mouse movement but doing it badly then that’s a strong signal of shenanigans. A good bot will obey robots.txt and do nothing to hide that it’s a bot.

[pryelluw]

Who gets to decide what is a good bot?

[pythonaut_16]

Presumably the site owner with Cloudflare providing enforcement.

Generally isn't a good bot one that respects robots.txt and is respectful of the site's resources by not being spammy?

[wnevets]

by checking which follow robots.txt?

[wmf]

According to their plan, the good bots pay for scraping.

[overfeed]

> Who gets to decide what is a good bot?

Paying Cloudflare's tolls => good bot.

[nullpoint420]

Cloudflare, apparently.

[mark212]

no, their customers. Why do you assume that people who run websites are clueless and lack agency in this?

[nullpoint420]

inb4 "we're updating our Terms of Service - all Cloudflare-based scrapers will now automatically be enrolled to scrape your cached websites"

and they'll explain how it's great because it's only reading the cached versions, not hitting upstream.

[tccole]

Me… obviously

[mcmcmc]

The problem is they have a strong incentive to consider any bot they get paid to host as a good bot, and they can bully competitors by declaring bots they host as bad bots

[skybrian]

Arguments based on incentives can prove anything. We could just as easily say they have incentives to provide tools to both sides and let them fight it out.

It would be like Gmail automatically whitelisting email from other Gmail accounts or blacklisting email from competitors. Why should Google do that? Their customers are mostly strangers to each other and they want spam filters that work well.

[mcmcmc]

> It would be like Gmail automatically whitelisting email from other Gmail accounts or blacklisting email from competitors. Why should Google do that? Their customers are mostly strangers to each other and they want spam filters that work well.

Crazy to post this when Google basically does do that with Gmail addresses. They may shove it into your “other” folder but they do absolutely nothing to stop free Gmail accounts from spamming and phishing. Gmail spam is the biggest threat by volume I’ve seen in years of managing email security for clients

[skybrian]

Huh, I've never seen that.

[nozzlegear]

> Cool product launch, though it feels a little weird to me that Cloudflare sells agentic products alongside this new service that seems designed to block agentic usage of the web?

Feels a little bit like the mob selling "protection" to shop keepers.