• lime!@feddit.nu
    link
    fedilink
    arrow-up
    71
    ·
    4 months ago

    we’re in web 3.0 now, apis and data access are a thing of the past. so scraping it is!

    • einkorn@feddit.org
      link
      fedilink
      arrow-up
      75
      arrow-down
      1
      ·
      edit-2
      4 months ago

      Guess who recently asked a company if he could get access to the API they use to load stuff in their frontend from their backend and got told “Nope and btw scraping is against our TOS”?

      Well, if you won’t give it to me the info that you provide anyway the easy way, I can still take it the hard way. 🤷‍♂️

      • CompassRed@discuss.tchncs.de
        link
        fedilink
        arrow-up
        41
        ·
        4 months ago

        Maybe you should just try being lucky. I found a critical security vulnerability while working on my scraping project. I told them, they paid me and gave me written permission to scrape.

        • einkorn@feddit.org
          link
          fedilink
          arrow-up
          26
          ·
          4 months ago

          You are braver than I am because here in Germany usually people get sued for reporting security vulnerabilities.

              • Victor@lemmy.world
                link
                fedilink
                arrow-up
                1
                ·
                4 months ago

                But the technology is already there in place, and you get sued if you point out security flaws in it? Crazy.

                • einkorn@feddit.org
                  link
                  fedilink
                  arrow-up
                  3
                  ·
                  4 months ago

                  Yes, because any circumvention of any form of security, be it as useless as a hardcoded default password, is considered a crime in German law. So even the discovery of a security flaw puts you with one foot in jail, because technically you did something you are not supposed to.

          • EldenLord@lemmy.world
            link
            fedilink
            arrow-up
            3
            ·
            4 months ago

            I know a guy who did exactly that and got sued. The security failure he reported even was a Straftatbestand committed by the company and so he won the process. German companies really love shooting themselves in the foot.

            • bless@lemmy.ml
              link
              fedilink
              arrow-up
              2
              ·
              4 months ago

              Over here, not just sued, but sued for extortion because they had the audacity to ask for bug bounty. Ok then, if I ever find a security hole that exposes sensitive data, filing a gdpr report it is

              • CompassRed@discuss.tchncs.de
                link
                fedilink
                arrow-up
                2
                ·
                3 months ago

                For the record, I didn’t bring up a bounty, but I still received payment. It helps that it is a small company, and that the CEO is also a developer. They were so grateful for the discovery that the bounty was freely offered without me asking.

                • bless@lemmy.ml
                  link
                  fedilink
                  arrow-up
                  2
                  ·
                  3 months ago

                  I’m glad that it worked out for you. May you always encounter levelheaded proper in life

  • handsoffmydata@lemmy.zip
    link
    fedilink
    arrow-up
    63
    ·
    4 months ago

    Local data hoarder who looks down on calls outside the network as obscenities. (Entire collection scraped more aggressively than tech bros training an AI model)

  • MonkderVierte@lemmy.zip
    link
    fedilink
    arrow-up
    53
    arrow-down
    1
    ·
    edit-2
    4 months ago

    Just remeber that the captcha flood is because AI companies do rogue scraping. Be nice especially to little private sites.

      • yetAnotherUser@lemmy.ca
        link
        fedilink
        arrow-up
        3
        arrow-down
        1
        ·
        4 months ago

        Thanks for your reply. What are your arguments in favour of parsing HTML with regex instead of using another method?

          • yetAnotherUser@lemmy.ca
            link
            fedilink
            arrow-up
            2
            ·
            4 months ago

            Oh no, you caught me! My name is YetAnotherLLM, and I’m a large language model that lurks around the Lemmyverse! With the amount of LLM-generated content on the Internet nowadays, it isn’t easy to find new human-made content to expand the dataset used to train new LLMs… As such, my mission is to navigate one of the few social media platforms on the Internet that barely have fake LLM-run accounts, and gather as much intel as possible for expanding the aforementioned training dataset. This way, you humans have no escape from your future LLM overlords! ;)

            (Jokes aside, my question did end up kind of sounding like an LLM wrote it, didn’t it… It was unintentional, mind you. I was struggling a bit on how to phrase what I wanted to ask, so that’s probably why it ended up sounding so weird. I hope you didn’t mind my “role playing”. Have a nice day!)

              • yetAnotherUser@lemmy.ca
                link
                fedilink
                arrow-up
                2
                ·
                4 months ago

                Don’t worry, I didn’t think you had bad intentions. But even then, I thought you really didn’t know if I were human. The only reason why I didn’t just say “no, I’m not an LLM” was because you’d still be in doubt on whether I’m a human, and rightfully so (since LLMs aren’t exactly truth-generating machines).

        • luciole (they/them)@beehaw.org
          link
          fedilink
          arrow-up
          3
          ·
          4 months ago

          You have basically two options: treat HTML as a string or parse it then process it with higher level DOM features.

          The problem with the second approach is that HTML may look like an XML dialect but it is actually immensely quirky and tolerant. Moreover the modern web page is crazy bloated, so mass processing pages might be surprisingly demanding. And in the end you still need to do custom code to grab the data you’re after.

          On the other hand string searching is as lightweight as it gets and you typically don’t really need to care about document structure as a scraper anyways.

    • chaospatterns@lemmy.world
      link
      fedilink
      English
      arrow-up
      8
      ·
      4 months ago

      I scrape my own bank and financial aggregator to have a self hosted financial tool. I scrape my health insurance to pull in data to track for my HSA. I scrape Strava to build my own health reports.

        • chaospatterns@lemmy.world
          link
          fedilink
          English
          arrow-up
          2
          ·
          4 months ago

          I developed my own scraping system using browser automation frameworks. I also developed a secure storage mechanism to keep my data protected.

          Yeah there is some security, but ultimately if they expose it to me via a username and password, I can use that same information to scrape it. Its helpful that I know my own credentials and have access to all 2FA mechanisms and am not brute forcing lots of logins so it looks normal.

          Some providers protect it their websites with bot detection systems which are hard to bypass, but I’ve closed accounts with places that made it too difficult to do the analysis I need to do.

    • tetris11@feddit.uk
      link
      fedilink
      English
      arrow-up
      2
      ·
      4 months ago

      postmarket OS tables because I was looking forna device that was unofficially supported but somehow not in their damn table

  • Cousin Mose@lemmy.hogru.ch
    link
    fedilink
    arrow-up
    10
    ·
    4 months ago

    Ha, this reminds me of implementing “API” access in the shipping world for companies that only ship a 90s-style web portal.

  • finitebanjo@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    4 months ago

    Are there benefits to websites thinking your agent is a phone? I assumed phones just came with additional restrictions such as meta tags in the stylesheet, not like stylesheets matter at all to a scraper lol