Update disclosure.html
This commit is contained in:
Cutieguwu
@@ -17,7 +17,277 @@
|
|||||||
<include src="includes/nav_quick_links.html" />
|
<include src="includes/nav_quick_links.html" />
|
||||||
</nav>
|
</nav>
|
||||||
<div class="pane_main">
|
<div class="pane_main">
|
||||||
<div class="main_body"><p>This page has not yet been filled out. Sorry!</p></div>
|
<div class="main_body">
|
||||||
|
<div class="header">
|
||||||
|
<h1 class="title">Disclosure</h1>
|
||||||
|
<p class="date">Last Edited: 01 August, 2025</p>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<div class="layout_row">
|
||||||
|
<div class="item website_security">
|
||||||
|
<h2 class="title">Website Security</h2>
|
||||||
|
<p>
|
||||||
|
This website uses a number of security features, most of which
|
||||||
|
are built into your browser, to protect my and your:
|
||||||
|
</p>
|
||||||
|
<ul>
|
||||||
|
<li>Infrastructure</li>
|
||||||
|
<li>Data, and</li>
|
||||||
|
<li>Experience</li>
|
||||||
|
</ul>
|
||||||
|
<p>
|
||||||
|
You can see some of the main methods that this website uses
|
||||||
|
below:
|
||||||
|
</p>
|
||||||
|
<div class="chunk_list">
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">Anubis</h3>
|
||||||
|
<span class="subtitle"
|
||||||
|
>AI Scraper Screening Utility</span
|
||||||
|
>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>
|
||||||
|
This website is protected by a screening utility
|
||||||
|
known as
|
||||||
|
<a href="https://anubis.techaro.lol/" class="italic"
|
||||||
|
>Anubis</a
|
||||||
|
>. You may also have heard of this program as
|
||||||
|
<span class="italic">BotStopper</span> for those who
|
||||||
|
purchase a commercial license because they somehow
|
||||||
|
can't live with a cute anime girl showing up on
|
||||||
|
their websites. UNESCO notably don't have a problem
|
||||||
|
with that, and proudly present an anime girl as of
|
||||||
|
writing this.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Despite what some fools at the FSF figure, Anubis IS
|
||||||
|
NOT malware. See:
|
||||||
|
<a
|
||||||
|
href="https://www.youtube.com/watch?v=YisGpdPjYM8"
|
||||||
|
class="italic"
|
||||||
|
>I Platformed A Linux "Cyber Criminal"</a
|
||||||
|
>. It does have
|
||||||
|
<span class="italic">similar</span> behaviour due to
|
||||||
|
its proof-of-work scheme, which asks your browser to
|
||||||
|
run a throwaway calculation in an effort to block or
|
||||||
|
dissuade AI scrapers. Many, if not nearly all
|
||||||
|
clients, are subject to screening based on various
|
||||||
|
filters around your browser's user agent string.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Additionally, if you have concerns about the
|
||||||
|
legality of my use of Anubis, please see
|
||||||
|
<a
|
||||||
|
href="https://github.com/TecharoHQ/anubis/issues/50"
|
||||||
|
>Anubis Issue #50</a
|
||||||
|
>
|
||||||
|
where concerns were looked into.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Now, if you have a moral issue with this project,
|
||||||
|
you may do one of two things (because adjusting your
|
||||||
|
UA will just make me block the UA, or add a complete
|
||||||
|
catch-all rule):
|
||||||
|
</p>
|
||||||
|
<ol>
|
||||||
|
<li>
|
||||||
|
Don't allow JavaScript to run. (Have fun making
|
||||||
|
this work)
|
||||||
|
</li>
|
||||||
|
<li>Just don't use my website.</li>
|
||||||
|
</ol>
|
||||||
|
<p>
|
||||||
|
If you experience issues with Anubis blocking you,
|
||||||
|
which presumably hasn't happened on your way to this
|
||||||
|
page, you can email me with details. DO NOT bother
|
||||||
|
the main project as it may be an issue with a
|
||||||
|
screening rule that I've invoked.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
If you do wish to raise an issue with the Anubis
|
||||||
|
dev(s), PLEASE DO NOT DO SOMETHING LIKE THIS:
|
||||||
|
</p>
|
||||||
|
<ul>
|
||||||
|
<li>
|
||||||
|
<a
|
||||||
|
href="https://github.com/TecharoHQ/anubis/issues/113"
|
||||||
|
>Anubis Issue #113</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
<li>
|
||||||
|
<a
|
||||||
|
href="https://github.com/TecharoHQ/anubis/discussions/114"
|
||||||
|
>Anubis Discussion #114</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
<li>
|
||||||
|
<a
|
||||||
|
href="https://github.com/TecharoHQ/anubis/discussions/117"
|
||||||
|
>Anubis Discussion #117</a
|
||||||
|
>
|
||||||
|
</li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">Content Security Policy (CSP)</h3>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>
|
||||||
|
This website, unlike a scary number of sites
|
||||||
|
(including google.com and microsoft.com as of
|
||||||
|
writing) has a CSP configured. This helps prevent or
|
||||||
|
mitigate a number of possible attacks including
|
||||||
|
cross-site scripting and clickjacking.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Further Reading:
|
||||||
|
<a
|
||||||
|
href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP"
|
||||||
|
>https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP</a
|
||||||
|
>
|
||||||
|
</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">
|
||||||
|
HTTP Strict Transport Security (HSTS)
|
||||||
|
</h3>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>
|
||||||
|
This website has a HSTS policy which indicates to
|
||||||
|
your browser to use a secure connection when
|
||||||
|
connecting.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Additionally, the server will force redirect ALL
|
||||||
|
connections over to HTTPS for any browsers which do
|
||||||
|
not use this header or have a HTTPS-only mode
|
||||||
|
enabled.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Further Reading:
|
||||||
|
<a
|
||||||
|
href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security"
|
||||||
|
>https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Strict-Transport-Security</a
|
||||||
|
>
|
||||||
|
</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">Other Security Headers</h3>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>Some include:</p>
|
||||||
|
<ul>
|
||||||
|
<li>X-Content-Type-Options</li>
|
||||||
|
<li>X-Frame-Options</li>
|
||||||
|
<li>X-XSS-Protection</li>
|
||||||
|
<li>Permissions-Policy</li>
|
||||||
|
<li>Referrer-Policy</li>
|
||||||
|
</ul>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">Security.txt</h3>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>
|
||||||
|
This file offers information to security researchers
|
||||||
|
to silently report any issues they find so that I
|
||||||
|
can resolve them.
|
||||||
|
</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="item cookies">
|
||||||
|
<h2 class="title">Cookies</h2>
|
||||||
|
<p>
|
||||||
|
This website only leaves cookies that are required for the
|
||||||
|
website's functioning. I do not place any trackers on your
|
||||||
|
system.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Note: I cannot say what cookies may be left by services that I
|
||||||
|
host (such as Gitea and Web Check). For more details, please see
|
||||||
|
those projects' documentation.
|
||||||
|
</p>
|
||||||
|
<p>You can see all cookies that this website uses below:</p>
|
||||||
|
<div class="chunk_list">
|
||||||
|
<div class="chunk">
|
||||||
|
<div class="header">
|
||||||
|
<div>
|
||||||
|
<h3 class="name">Anubis</h3>
|
||||||
|
<span class="subtitle"
|
||||||
|
>AI Scraper Screening Utility</span
|
||||||
|
>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
<div class="body">
|
||||||
|
<p>
|
||||||
|
This website does utilize a cookie. This cookie is
|
||||||
|
made by Anubis to keep your system from having to
|
||||||
|
pass the proof-of-work check every time you request
|
||||||
|
a resource from this site.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
THEORETICALLY, this cookie, as with any JavaScript
|
||||||
|
cookie,
|
||||||
|
<span class="italic">can</span> be used to track
|
||||||
|
you.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
HOWEVER, I do not use it for tracking, Anubis does
|
||||||
|
not use it for tracking, and there is no evidence
|
||||||
|
that 3rd parties are abusing the cookie. There are
|
||||||
|
far more attractive targets.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
IF this becomes an issue, until the lead
|
||||||
|
developer(s) and/or community can find a solution,
|
||||||
|
Anubis will be reconfigured to send out challenges
|
||||||
|
even more frequently, and an advisory notice to wipe
|
||||||
|
your browser cookies at the end of your session will
|
||||||
|
be made.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
Under the current configuration, Anubis' cookies are
|
||||||
|
valid for 24h. This does not mean that the cookie is
|
||||||
|
necessarily gone from your system.
|
||||||
|
</p>
|
||||||
|
<p>
|
||||||
|
<a
|
||||||
|
href="https://github.com/TecharoHQ/anubis/issues/50"
|
||||||
|
>Anubis Issue #50</a
|
||||||
|
>
|
||||||
|
briefly looked into the possibility of abuse via the
|
||||||
|
cookie.
|
||||||
|
</p>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
|
</div>
|
||||||
<include src="includes/tailer.html" />
|
<include src="includes/tailer.html" />
|
||||||
</div>
|
</div>
|
||||||
<div class="pane_spacer">
|
<div class="pane_spacer">
|
||||||
|
|||||||
Reference in New Issue
Block a user