3 ms·
How do you even really protect against bots? You can throw up a CAPTCHA but (A) that won't actually stop all the bots and (B) it's going to lock out some legiti
by Wowfunhappy 2y ago
How do you even really protect against bots? You can throw up a CAPTCHA but (A) that won't actually stop all the bots and (B) it's going to lock out some legitimate users who did nothing wrong.
- bombcar 2y agoState of the art is basically a modified crypto miner that runs in javascript - the client says "processing" for awhile until it solves the math problem, then lets you in. Still bottable but takes tons more CPU power than the server needs.
- ericmcer 2y agoJust add rate limiting, a single line in nginx and most server libraries would cover this. More sophisticated attackers (using multiple IP, hiding fingerprints) aren't going to bother with a site like this (probably lol) The code that got him wasn't a "bot" it was just a script that spawned a couple children and had them all hit the API on loop.