4 ms·
That's only because they're using weak authentication. If they required users to use something like WebAuthn, the bot problems would be significantly easier to
by bdamm 5y ago
That's only because they're using weak authentication. If they required users to use something like WebAuthn, the bot problems would be significantly easier to deal with.
- drivebycomment 5y agoTrue, but that would significantly increase the barrier for contributions, especially at the long tail. As always, it's a trade-off, not a black-or-white situation.
- mimsee 5y agoHow come? Last I checked there was a devtool to create virtual authenticators. Unless there’s a way for wikipedia to permit only certain vendors like Yubico, akin to browsers trusting certain CAs, I don’t see how one couldn’t make a bot register thousands of accounts with virtual authenticators.
- bdamm 5y agoYes, assertion for manufacturing source is part of WebAuthn.