121–130 of 170 posts
Cool product launch, though it feels a little weird to me that Cloudflare sells agentic products alongside this new service that seems designed to block agentic usage of the web? I expect there's much more going on than just mouse path detection but I can imagine that this is already tricky for touchscreens and for people using non-traditional mouse inputs (the thinkpad nub comes to mind - but it would also be bad op…
I can’t wait for Cloudflare to decide my musical-rhythm enhanced typing and extraordinarily rapid and repeatable-pattern captcha clicking are somehow machine signifiers just like Google does: If I complete Google captchas at full speed it decides I’m a robot and challenges me endlessly, once 29 times in a row in two minutes or something. That’s what I get for having excellent spatial reflexes and mouse-clicker practi…
Precursor is a client-side, session-based verification system, built with privacy in mind, that uses dynamically injected JavaScript to continuously collect behavioral signals as visitors interact with your application.
Earlier quoted context omitted.
> There is nothing stopping a bot from moving their cursor like a human. Sure, we could write a library that slows the bot down and makes it move the cursor in procedurally-generated curves with a certain degree of noise added... but its all extra work, and it all slows the bots down. Presumably they wouldn't reveal that part of the secret sauce if it was all of the secret sauce
Acting like a human is something scapers already do. Using residential proxies, using latest Chrome user agents, not moving/typing as fast, etc. This is just 1 more layer, moving mouse naturally.
I'm not sure if I'm talking about the scrapers or Cloudflare at this point. Probably both. Probably the same pool of forced laborers.
I have been noticing a lot of Cloudflare false positives where it keeps spinning on my sessions never actually redirecting me to the underlying page. If they keep just vibe coding and releasing a new solution every day, I am afraid it will be reflected in their services quality.
I get flagged way more often on Starlink then I did on my local ISP fiber.
As a real user who uses an Ultimate Hacking Keyboard with the mouse layer, this frustrates me immensely. Yes I'm a corner case, but this is likely to make certain website not work for me because my lines are perfectly straight and my arcs zig-zag much like a bot might. Considering the keyboard/mouse layer feels like an advancement to me, this feels like tech that will lock in the "old" way of doing things. I really d…
Earlier quoted context omitted.
Beating this would require a large amount of sophistication, not a small amount. Basic machine learning clustering will expose bots mouse+keyboard+touch behavior and discriminate them from humans. It will also likely discriminate against anyone with a disability and therefore using affordances like eye tracking. Just imagine how different a person with only one hand would look compared to a “typical” user!! This shou…
We used to say the same sorts of things about LLM prose, music, and image generation. Now just a few years later it can be very difficult to know for sure if something is made by AI or a human. There are still tells, but they are much more subtle and harder to spot, and models are still improving. Mimicing human mouse movement won't be any more of a challenge.
Because of this, perfectly mimicking humans is not a good goal for a bot (as it is the case for AI in music), because they would become very inefficient, at least latency wise (throughput could be engineered around by scraping many unrelated webpages in parallel).
I can’t wait for Cloudflare to decide my musical-rhythm enhanced typing and extraordinarily rapid and repeatable-pattern captcha clicking are somehow machine signifiers just like Google does: If I complete Google captchas at full speed it decides I’m a robot and challenges me endlessly, once 29 times in a row in two minutes or something. That’s what I get for having excellent spatial reflexes and mouse-clicker practi…
You also screwed up by using Firefox. That's the #1 method Google uses to prove someone is a bot. If you are't participating in the Google panopticon, you are suspect.
Earlier quoted context omitted.
Beating this would require a large amount of sophistication, not a small amount. Basic machine learning clustering will expose bots mouse+keyboard+touch behavior and discriminate them from humans. It will also likely discriminate against anyone with a disability and therefore using affordances like eye tracking. Just imagine how different a person with only one hand would look compared to a “typical” user!! This shou…
> It is super difficult to mimic all of these signals in a way that would cluster the same as typical humans. Not really, beat ML with ML. I won't disclose how to do it, because who knows who might read this, but you can easily do it with a model trained for that purpose.