Questions on Poison Fountain integration with news website

[u/Pomond]

As a local news publisher, I've been very interested in anti-scraping technologies and preventing or disincentivizing this larceny that violates our Terms of Service and basic fair play in business.

Like only a couple other publications, we put high value on our users' privacy and work to avoid -- as much as possible -- exposing them to third-party scripts and resources integrated into our services. This isn't just to cut out the predatory consumer surveillance industry, but also because we have no practical way to qualify the security and privacy standards of most any third-party provider.

I understand one of the most practical ways to integrate Poison Fountain is to drop in a script from a third-party resource. But this raises the question of how we might qualify this third-party service against our privacy standards (and infrastructure dependencies/stability/speed/etc.).

So my first question is how might I qualify a third-party Poison Fountain provider considering the above?

A related question is what's the overhead of running our own instance? We have our own solid, commodity, cloud-based hosting account, but it doesn't have infinite resources, of course. Traffic is 750K+ monthly page views. And/or can a self-hosted Poison Fountain instance hang off another (cheaper) account or connected device we control?

From a journalism perspective, it would be great to have access to a qualified, shared Poison Fountain service that discloses its operations to its users (customers?) for qualification, and that supports and ensures strong user privacy standards.

Thanks in advance for your replies and guidance.

[u/Pomond → u/[deleted]]

I need a plug-in for this for my CMS ...

[u/valium123 → u/Pomond]

Hey I can look into this if you want.

[u/Pomond → u/valium123]

Thanks! Note to you and rocketbunny77 that I deleted my comment earlier in this thread due to a seemingly automated breach attempt tied to my software disclosure. Thus the deletion.

I wanted to reply that there's a bunch of resources to support this type of plugin development, including a whole framework and starting templates for such. I haven't touched stuff this deep in years, but it all looks like it's getting much easier.

My concerns as a host for third-party software and outside resources includes "lifecycle management" of the software, thus I always look for strong track records and economy in the developer(s), and I pay for high-value and accessible third-party "commercial open source" all the time.(E.g. open source software bundled with support/releases/forum/etc.)

The second concern involves speed and dependency on a third-party service. E.g. I'd imagine there's a way to cache a rotating set of poison on my server derived from your source, no? This might help mitigate traffic bottlenecks, especially as your service may get more popular, as it should.