CAPTCHAs are officially useless and im losing my mind I…
0 reactions
CAPTCHAs are officially useless and im losing my mind
I just spent the last 3 days dealing with a massive bot attack on a client's registration endpoint and honestly, I think the era of software-based bot protection is just over
we have reCaptcha v3 running, strict rate limiting, custom WAF rules, and these bots are still sailing right through. modern vision models solve those stupid "click the crosswalk" image captchas faster and more accurately than I can. and the advanced scripts just mimic human mouse movements and delays perfectly now. you literally can't tell the difference in the logs
it's getting so bad that I was actually reading up on zero-knowledge identity protocols last night out of sheer desperation. like diving into the dev docs for that Orb hardware... the idea of having to rely on local biometric hashing just to output a cryptographic proof of personhood sounded completely insane to me a year ago. but looking at my database filling up with synthetic garbage today, hardware verification actually feels like the only viable way forward. software just cant catch software anymore
how are you guys handling bot traffic lately? beacuse playing whack-a-mole with IP blocks and ASN bans is exhausting and my clients are getting pissed about spam that I literally cant stop. is there any decent middleware left that actually works or are we just doomed to build biometric walled gardens now
#technology #programming #dev
source
I just spent the last 3 days dealing with a massive bot attack on a client's registration endpoint and honestly, I think the era of software-based bot protection is just over
we have reCaptcha v3 running, strict rate limiting, custom WAF rules, and these bots are still sailing right through. modern vision models solve those stupid "click the crosswalk" image captchas faster and more accurately than I can. and the advanced scripts just mimic human mouse movements and delays perfectly now. you literally can't tell the difference in the logs
it's getting so bad that I was actually reading up on zero-knowledge identity protocols last night out of sheer desperation. like diving into the dev docs for that Orb hardware... the idea of having to rely on local biometric hashing just to output a cryptographic proof of personhood sounded completely insane to me a year ago. but looking at my database filling up with synthetic garbage today, hardware verification actually feels like the only viable way forward. software just cant catch software anymore
how are you guys handling bot traffic lately? beacuse playing whack-a-mole with IP blocks and ASN bans is exhausting and my clients are getting pissed about spam that I literally cant stop. is there any decent middleware left that actually works or are we just doomed to build biometric walled gardens now
#technology #programming #dev
source
| 2,000 mlx | |
| 4 | |
| 0 |