Er, sorry, to clarify, what I meant was that docker is not required; it's just the main config example I have right now. the JSON equivalent is:
https://git.sequentialread.com/forest/pow-bot-deterrent-rp/src/branch/main/config.json.example
altho it may be out of date w/ the latest changes.
Sorry about the docker-only config example. It also supports a json file for config. You just need to be able to compile the go code for OpenBSD; that shouldn't be too hard.
I bet Anubis might be easier to use for now as its more popular and mine is more of a work-in-progress / hack. I made my own because I wanted this as a "captcha" before LLMs and Anubis existed, and also because I wanted to use a memory-hard hash function like Scrypt or Argon because I figured that would inflict a lot more pain on bots in the situation where the bot operators eventually decided to bite the bullet and just solve the PoW challenge.
@davepolaschek For a demo of the pow-bot-deterrent-rp, see one of the source code files on that repo, like:
Still has some issues on privacy browsers which don't allow WebAssembly. Anubis doesn't have the same issue because it uses SHA256 via WebCrypto for now.
I've been working on an email-based alternative for browsers that don't do webworkers / web assembly but still in the proof of concept stage.
@notplants Well, having a group is not magic and someone still has to fix the bug and figure out why it happened. But having more users than just one person helps a lot, I think. And of course, having multiple people working on hosting it helps a ton.
@stefano So is everyone else?..
Anyone operating a public git forge server has known about this for a long time... Anubis or pow-bot-deterrent have become a requirement.
Also, fuck cloudflare
@Violinknitter I know this fellow is missing a fin, but jeez.
Clearly this whole automatic fish detection system needs work.
@vkc Would you feel better about it if there was also an option to log in via SSH?
https://queercoded.xyz/2025-08-02/html-day.html
Pls boost!
Feel the HTML Energy August 2nd 1-4pm @ Bde Maka Ska lake shore where it meets W 31st St.
Matrix room admins & server operators should probably note that a server upgrade and a room upgrade to v12 will essentially be required next Tuesday: https://matrix.org/blog/2025/07/security-predisclosure/ 👀
QueerCoded 1-3PM at Queermunity
<p>QueerMunity, Saturday, July 19 at 01:00 PM CDT</p><p><strong>Learn to Code</strong> workshop created by Margo and Forest from <a href="https://cyberia.club/" target="_blank">Cyberia Computer Club</a> / <a href="https://layerze.ro/" target="_blank">Layer Zero</a> in the Twin Cities of Minnesota.</p><ul><li><p>Learn to Code</p></li><li><p>Find Community</p></li><li><p>Get to Know your Computer</p></li><li><p>Build your own Website / Software</p></li></ul><p>Hosted twice a month at <a href="https://www.queermunitymn.com/" target="_blank">Queermunity</a>.</p><ul><li><p>3036 Hennepin Ave, Minneapolis, MN 55408</p></li></ul><p>QueerCoded will require face masks for in-person workshops, it's a good idea to reduce airborne infection risk!</p><p>Please bring your favorite mask, but if you don't have one, we will be providing vertical strap surgical masks at Queermunity.</p><p>The workshop is drop-in friendly. You don't have to attend every session.</p>
https://calendar.layerze.ro/event/queercoded-1-3pm-at-queermunity
@jwildeboer I was arguing that
because being able to directly accept a TCP connection is still step one for a lot of use cases,
All the work that went into making the network and devices faster doesn't help all that much; what good is a fast network if no one can connect to each other in the first place?
We can make great "local first" apps, but since everyone is still in "NAT jail", we still need servers. Having a server helps a ton, even if you're trying to build an app that's offline-only most of the time.
For apps that don't need to be able to accept connections; yes the unhosted idea works great. But I care about federation, publishing, etc, I think they are really important and worth designing for.
@jwildeboer what did we learn?
As far as I know, people still aren't likely to fully ditch email, the https/web stack is still the only game in town, IPv6 is still always 10 years away, etc... I don't think any of the fundamentals have changed since then.
I am a web technologist who is interested in supporting and building enjoyable ways for individuals, organizations, and communities to set up and maintain their own server infrastructure, including the hardware part.
I am currently working full time as an SRE 😫, but I am also heavily involved with Cyberia Computer Club and Layer Zero