4 ms·

If your security is dependent on the ability of a bot to know which fields are available, why not go all the way? Make a canvas tag, draw the input fields, hand

by ttfkam 3y ago

If your security is dependent on the ability of a bot to know which fields are available, why not go all the way? Make a canvas tag, draw the input fields, handle the text input, and completely thwart those bots! /s

NoZebra120vClip 3y ago
In case you haven't heard, a very popular and effective way to foil spambots has been the inclusion of a hidden FORM field, which the user won't see and won't fill out. The bot dutifully fills out the field, sends an HTTP POST, and is busted for looking at the HTML source. Have a nice day.
- graftak 3y ago
  And it’s called a honeypot.
- ttfkam 3y ago
  Useful against the lone hacker. Far less useful against a botnet where the source IPs are both constantly changing and not necessarily a bad actor, just compromised. But sure. Security measures from 1998 have their place too, I guess.
pwdisswordfishc 3y ago
https://javascript.plainenglish.io/goodbye-html-hello-canvas-part-1-92f750961666 https://javascript.plainenglish.io/goodbye-html-hello-canvas...
eddd-ddde 3y ago
Print the password prompt and request the user to send the answer via fax!