Anubis rarely ever annoys me (I still prefer it over cloudflare’s Mitm) but this specific visit feels almost vindictive. It used half my CPU cores at full blast for three straight minutes.
It seems to be effective since I can’t really “bypass” it with extensions, so AI crawlers probably can’t either, but damn there really should be an option to complete a manual captcha or email the administrators to complain.
As I’m typing this the challenge is still running xD
I would assume the token is only good for a few page access.
E.g. 500 would mean that a person would see this extremely rarely, and still block a bot from crashing the site.
No it actually lasts for a long time. We have it on my Lemmy instance for https://old.lemmy.today/ and it’s generated once and lasts for many days, probably a week. I guess it’s configurable but if you generate it too often, your visitors will also be annoyed.