Hacker News new | ask | show | jobs
by superkuh 14 days ago
Anubis does support the no-JS HTTP meta-redirect proof of work but few know about it and fewer enable it. And it may not block everything.
2 comments
wasmperson 14 days ago
I indeed did not know about this. There seem to be some caveats:

https://anubis.techaro.lol/docs/admin/configuration/challeng...

I guess for the meta refresh challenge it's less "proof of work" and more "proof of patience".

link
xena 14 days ago
The meta refresh challenge actually uses time as the proof! It makes sure you wait for at least 75% of the time the administrator configured and adds client side smear to ensure that browser temporal randomization doesn't trigger a false failure.
link
perching_aix 14 days ago
Does it still need a cookie though? Another thing I have disabled by default.
link