Viewing profile — arbol

It's not enough to use latency alone as the other commentor said. You need to look for repeat behaviour at scale. It's ML model time once these basic signals fail you.

Prosopo could cut out a lot of the residential proxy nonsense for you. We integrate with lambda@Edge / cloudfront workers / server side and perform analytics to detect residential …

> The checks can be bypassed by hitting the Escape key five times.

If you're on a proxy network then you're detectable by TLS handshake timings, for example. You are right though that agent mouse and touch behaviour is almost inseperable from huma…

They talk about bringing these samples back to earth but don't mention how. Have they already planned how to get perseverance and its samples back?

It works both ways... We use prompts hidden in our bot detection system that are unreadable to humans but trigger additional payloads.

Tories were in governance from 2010 - 2024. And things didn't exactly improve.

> The site’s content happens to include an HTTP/2 endpoint that, when presented with an anonymous authorization token, behaves as a VPN server’s outer layer Is this not the fingerp…

What about the services that rent vps/compute for crypto?

Adblock??

When they realise their social media ban for children doesn't work

It's just a concept, not a real test. Captcha are already expensive at scale due to escalating checks when abuse is detected. You have to orchestrate and pay for residential proxie…

AI generated drivel

> coming from normal-user IP addresses This is the standard now for astroturfing online. Build up a profile over time with varied interactions, sometimes over years, and then sell …

So far its cost me $2.27 to submit a contact form 3 times - why is this better than a captcha solver with human solves at 1000 per $2? On your automation, your tool fed back to me …

It's not hard to setup JA4 monitoring and I think its valid as a coarse filter. There are various plugins for nginx/node. > I've seen people waste so much time with the whack a mol…

In combination with other signals JA4s are useful. You learn to spot obviously incorrect ones because Chrome always looks different from Safari which looks different to Firefox. Ca…

Is it not just a case of most of their clients being US based?

At the time, reCAPTCHA was the alternative and it was effectively working as a giant ad targeting data collection tool. I'm pretty sure Google have now back tracked from this. WebG…

I think we're talking about 2 different things. PoW is annoying for basic scrapers but it really doesn't affect enterprise grade bot operations with access to unlimited residential…

It's either that or you tie tickets to government ID like in France. If the arbitrage opportunity is more than the cost of automation then someone will exploit it.

You literally can't get rid of it without introducing government issued ID to buy any scarce freely accessible items

I'm no CF advocate but those random APIs are literally what differentiates people running Chrome on their computer versus a bot operation with a load of containers. Kubertnetes clu…

Yeah, this doesn't even begin to cut it

- behavioural fingerprinting - ja4 - IP rep - queue mechanism - card country to IP country checks - app attestation - custom metrics based on knowledge of past scalpers It's hard b…