4 ms·
Brave PoW captcha maybe? Because it requires no input/interaction from the user.
by Saris 2y ago
Brave PoW captcha maybe? Because it requires no input/interaction from the user.
- jknoepfler 2y agoI don't understand why POW solutions aren't more popular.
- Saris 2y agoI'd never heard of them before getting them while using Brave search sometimes, I'm not sure I entirely understand how they work and differentiate between a bot and human.
- xelamonster 2y agoThey don't differentiate. They just make it too expensive to be worth paying for the resources required to carry out a spam attack at any meaningful scale.
- Saris 2y agoOh that makes sense, neat way of doing it. Basically adds a delay while also costing CPU resources.
- CodesInChaos 2y agoI don't think there is any PoW that results in acceptable performance for the user (especially on mobile) while also making the cost for an attacker high enough to deter them. Even renting the compute on AWS, it only costs $0.01 per minute for the equivalent of a decent desktop computer (c8g.4xlarge). While an attacker will likely either use a botnet, or hardware better suited for solving the PoW than the hardware the user is using. Though CAPTCHAs don't really work well anymore either, since solving services are quite cheap. Recaptcha is nowadays primarily based on other factors, like IP reputation, susceptibility to google tracking, and behavioral scoring.
- marginalia_nu 2y agoMost people engage with web content on relatively low powered machines. If you tune them to be tolerable on a 4 year old mid-range android device, there isn't much cost incurred on a threadripper.