4 ms·
> That said, if I had a botnet I'd just figure out what domains belonged to WhiteOPs and null-route them. That and bots that don't execute javascript would be
by ryan-c 12y ago
> That said, if I had a botnet I'd just figure out what domains belonged to WhiteOPs and null-route them.
That and bots that don't execute javascript would be a problem, yes. Our clients can account for that by comparing their traffic numbers with ours.
(full disclosure: I work at White Ops on the 'botprinting' team)
- thibauts 12y agoI'd be very interested in knowing more about how the technology works. It's pretty difficult to assess it without more information. Specifically it feels like the good old software protection conundrum where you have to give the keys along with the lock. How do you prevent a bot operator to send the right signal (or not send it) to the (whichever) measuring party ?
- paulgb 12y agoHere's a short explanation of spider.io's approach that might interest you: https://www.youtube.com/watch?v=RSWhvNdjAAE https://www.youtube.com/watch?v=RSWhvNdjAAE
- thibauts 12y agoOk so the library performs a kind of timing attack to detect whether it runs in a legitimate browser or not, and phones home { bot: true }. I make a bot that detects the script on the page and sends { bot: false }. You could try to obfuscate the signal by sending the raw collected browser behavior data but I still could reverse engineer its format or replay data from a legitimate session. I still don't understand how this could possibily work.