3 ms·

Can someone explain botguard? I'm not sure I get it.

• chii 12y ago
  my understanding (which may be wrong - please i welcome all corrections) is that an obfuscated piece of code that is somewhat randomized is generated on the signup page. If you ran it, it produced a token, which is submitted as part of the signup. If you didn't obtain a fresh piece of this script, but instead either reused, or tried to guess the token, then your signup still succeeds, but is marked as bad. Then, in an undetermined amount of time, a wave of bans would occur on all accounts that got marked as bad. This prevents signups via scripts, but does so via making signup scripts untrustworthy, and so no one would be willing to put money in for they cannot be sure that it actually works.
  • joelthelion 12y ago
    But what prevents you from requesting another token from Google?
    • chii 12y ago
      I suppose nothing does, except for the resources required to do so (i.e., you need to run your script in a browser, which means lots more overhead and resources).