4 ms·

Bot blocking through obscurity

• lbhdc 1y ago
  That's really the only option available here, right? The goal is to keep sites low friction for end users while stopping bots. Requiring an account with some moderation would stop the majority of bots, but it would add a lot of friction for your human users.
  • brookst 1y ago
    The other option is proof of work. Make clients use JS to do expensive calculations that aren’t a big deal for single clients, but get expensive at scale. Not ideal, but another tool to potentially use.
• tovej 1y ago
  I like it, make the bot developers play whack-a-mole. Of course, you're going to have to verify each custom puzzle aren't you.