3 ms·
You could just decrease the timestamp instead of actually waiting.
by walls 4y ago
You could just decrease the timestamp instead of actually waiting.
- naillo 4y agoI meant for general spammers who goes after tons of sites mostly blind. I agree it would not help for a targeted attack.
- JZerf 4y agoI'm already using this timestamp technique on my website and so far no bot operator has bothered trying to work around this. However even if some bot operator were to specifically target a website using this technique and try to decrease the timestamp, I believe you could still force a bot to wait by just changing the website to use something like a cryptographic nonce that includes a timestamp instead of just a simple timestamp that can be understood easily.