226 Followers
223 Following
430 Posts

Web developer for projects for a better world.

This is a work account. Plenty of Drupal, PHP, web community and dev, and projects.
Personal account @ekes

Drupalhttps://drupal.org/u/ekes
Githubhttps://github.com/ekes
Gitlabhttps://gitlab.com/ekes

Status: 9M hits from AI crawlers, <0.1% human.
---

My first server was Apache on Suse Linux, in yr 2000. I've since deployed numerous webservers, many high traffic

Never guessed I'd one day be deploying a web project almost entirely for bots.

This is a view under the hood; the web is now more bot than human.

Our ideas, expressions, work, are being stolen for simulation & profit by a handful of companies, & at a scale comparable to deep-sea trawling.

It is our moral imperative to fight back.

RE: https://en.osm.town/@harry_wood/116562324497918231

So are the (Local Authority) Custodians of the address data able to license it? Shouldn't it be Open Data? I have to say I'm pleased The Netherlands has fallen on the correct side of this one (look at the addresses in OSM in NL).

I'm not sure people realise, but trying to review code rather than doing it myself requires much more cognitive power, especially when my trust of the job getting done properly is extremely low.

Yes one must start somewhere, but I've got *extremely* boring tasks of auditing certain engine APIs that are accessible to basically anyone and nobody wants to do it.
When this would actually be more impactful than following my "lead", especially if it comes out of nowhere and not ask me if I want help.

RE: https://mastodon.bsd.cafe/@stefano/116396440868847302

It's not like heavily upfront funded corporations haven't been known to be unreliable in the past. When the crunch comes capital wants to be paid.

And these particular corporations have already shown themselves not to be the most consistently ethical.

I'm sure there were reasons till a year ago we were pushing for things like more Open Source, and lower resource usage. What were they again?

@coldclimate Setting aside the important ethical and environmental considerations, what worries me is the dependency that is being created around these tools. My fear is that we will reach a point where only a very small number of companies can decide to raise prices or shut down services, and no one (or almost no one) will be able to do much of anything anymore. Once those skills are lost, it will be virtually impossible to recover them. Open Source models, although evolving, are not yet even close to the usability of the latest closed models, and there is little interest in their development (information I've been getting from developers). The conditions for a perfect storm.
We are aware of the outages yesterday and this morning, and have been working to find more resilient solutions. We have seen an increasing pattern of massively distributed scraping via residential IPs in ways that neither our Fastly CDN WAF/DDOS protection nor Human Security bot detection have been able to mitigate.

"I used AI. It worked. I hated it." by @mttaggart https://taggart-tech.com/reckoning/

This is a really good blogpost. And I"m sure it'll make some people unhappy to read whether they're pro or anti genAI. What's good about @mttaggart's blogpost is he talks honestly about how using Claude Code did actually solve the problem he set out to do. It needed various guardrails, but they were possible to set up, and the project worked. But the post is also completely clear and honest about how miserable it was:

- It removed the joy from the process
- If you aim to do the right thing and carefully evaluate the output, your job ends up eventually becoming "tapping the Y key"
- Ramifications on people learning things
- Plenty of other ethical analysis
- And the nagging wonder whether to use it next time, despite it being miserable.

I think this is important, because it *is* true that these tools are getting to the point where they can accomplish a lot of tasks, but the caveat space is very large (cotd)

I used AI. It worked. I hated it.

I used Claude Code to build a tool I needed. It worked great, but I was miserable. I need to reckon with what it means.

Oh no! It's the test enviroment live!

You can register with it https://acc.ovpay.nl/ which is where a search sent me to. It'll send you emails. It has their valid DigiCert Inc SSL certificate*.

The live environment in https://www.ovpay.nl/ which doesn't have the mixed NL / EN and test alerts.

Remember folks. htaccess that staging environment, or/and redirect folks to you production environment if you change or update.

* Although on both the Certificate is only domain not org identifying.

Oh no! It's the test enviroment live!

You can register with it https://acc.ovpay.nl/ which is where a search sent me to. It'll send you emails. It has their valid DigiCert Inc SSL certificate*.

The live environment in https://www.ovpay.nl/ which doesn't have the mixed NL / EN and test alerts.

Remember folks. htaccess that staging environment, or/and redirect folks to you production environment if you change or update.

* Although on both the Certificate is only domain not org identifying.

Going into production with the test alert messages still operational ✅

["Dit is er aan de hand" means like "This is the problem"]