6 ms·
But how do you distinguish an abnormal traffic spike (HN hug-of-death) vs a botnet? Cloudflare’s solution is a CAPTCHA, but are there better options?
by colejohnson66 5y ago
But how do you distinguish an abnormal traffic spike (HN hug-of-death) vs a botnet? Cloudflare’s solution is a CAPTCHA, but are there better options?
- aj3 5y agoGenerally you don't. Just be prepared to scale resources and handle everyone.
- smasher164 5y agoAn attack-resistant trust metric? Although I haven’t seen them used against denial of service attacks.
- jgrahamc 5y agoCloudflare's solution is not a CAPTCHA. We have a ton of stuff going on that detects bots. CAPTCHAs are a small part of the tools we use. https://blog.cloudflare.com/cloudflare-bot-management-machine-learning-and-more/ https://blog.cloudflare.com/cloudflare-bot-management-machin...
- colejohnson66 5y agoSorry. I didn’t mean to imply that you don’t have anything but CAPTCHAs. My wording could’ve been better.
- geitir 5y agoDo you have a scraper that looks for mentions of Cloudflare or did you just happen upon this?
- jgrahamc 5y agoYeah. I use something like this: https://github.com/jgrahamc/hncomments https://github.com/jgrahamc/hncomments Although I really need to commit the final version as that one isn't quite what I use.
- mleonhard 5y agoCloudflare uses CAPTCHA to drive away proxy users. Privacy conflicts with Cloudflare's endgame of profiling every Internet user and then monetizing that data.