Amazon Web Services

Between October 15 and 16, one AWS address made 26,429 requests across nearly all 18,926 projects on Open3DLab, SFMLab and SmutBase, then downloaded 1,027 files from 712 of them. Roblox never answered two emails, and the site's claim that this was AI training data is its own inference.

Hacker News argued about the site's own licensing, then about how to block the next crawler.

The catch: the scan only sees who answers the DNS query, the front CDN, not where the data actually lives. Cloudflare 'wins' every market precisely because it's the proxy, not the host.

So one reader re-ran the question against 50,000 API subdomains with the CDN fronts stripped out and got the reverse answer: Europe leans on OVH and Hetzner more than AWS. Another, claiming access to better data, said the numbers are off by roughly half.

The pitch is a single confidential reporting channel, a security response team, real funding, and “maintainer of last resort” coverage for abandoned packages. The signatories include AWS, Anthropic, Google, Microsoft, OpenAI, JPMorgan and IBM.

That roster is exactly the problem for readers: a project that “favors centralization and corporate circles” signed by the companies many blame for the strain on open source — and which employs no engineers of its own to do the fixing.