3 ms·

I wonder how effective the CloudFlare anti-scrapper protection is against this approach of breaking captchas. Also, I find it interesting that big websites don

• franciskim 10y ago
  I think I might have some trouble with some reCAPTCHA stuff, but there must be ways around it. I agree with you on your point about AWS.
• greglindahl 10y ago
  There are a fair number of people in China etc running personal VPNs on AWS.
• user5994461 10y ago
  There can be legitimate traffic coming from AWS, if not the site itself. It's especially true when the site provides an API and is meant to be integrated by people/companies. In which case, the AWS traffic is likely to include major and/or important and/or paying customers. You really don't want to block that. On the other hand, Tor is likely to be 90% evil. When in doubt, just block it. (That makes me think, I should run some proper stats and maybe publish a blog post about that. )
  • slig 10y ago
    > There can be legitimate traffic coming from AWS, if not the site itself. The traffic from the site itself, if it's hosted there, would come from the intranet IP address, right? Not the public facing one. > It's especially true when the site provides an API and is meant to be integrated by people/companies. In which case, the AWS traffic is likely to include major and/or important and/or paying customers. You really don't want to block that. Agreed, but it's fairly easy to block the AWS IP traffic on web endpoints and not on the API endpoints.