3 ms·

Interesting idea :) I don't think spambots are currently using Chromium or even running JavaScript. Using simple spamfilters in JavaScript still works fine on

• bsamuels 8y ago
  Most modern credential stuffers use headless browsers with all the bells and whistles, html5, javascript, etc. Login attempts are usually spread over a massive botnet of residential IPs as well, where they'll only use each IP for one or two login attempts before moving on to the next. It's a very fascinating problem space
  • Damogran6 8y ago
    In my experience, the botnet didn't upgrade their JVM...it was 18-24 months out of date. THAT was what we filtered on at the F5 to blunt the attack.
• golergka 8y ago
  Does it mean that you're breaking the experience for users who deliberately disable js by default? Can I ask you not to do that? Modern web is unusable if you let js on any webpage