3 ms·
I mentioned quite a few alternatives to ReCAPTCHA that often work in situations like yours here: https://nearcyan.com/you-probably-dont-need-recaptcha/ https://
by ve55 6y ago
I mentioned quite a few alternatives to ReCAPTCHA that often work in situations like yours here: https://nearcyan.com/you-probably-dont-need-recaptcha/ https://nearcyan.com/you-probably-dont-need-recaptcha/
Some of the best solutions include very minimal/quick captchas, or simple checks for things like javascript
- ev1 6y agoThanks for the article! In this case, this is custom spam from someone that has spent a few hours looking at the network tab in devtools. The bad actor is running headless browsers after we started doing basic cookie and JS checks; we added some additional JS checks for basic things like whether it's a 800x600 window or similar - this stopped the spam for a few days until he figured it out.
- ve55 6y agoThat's good, at least if they're not too skilled sometimes the ratio of time spent playing cat vs. mouse with them isn't too bad, since it takes them a long time to bypass measures. You could also look into things on other layers rather than the application level, for example, maybe the IPs they're using all come from similar VPN providers or services?
- rad_gruchalski 6y agoWhy not sending all the data you need to the server and do checks on the server? They can’t see what you do on the server.