4 ms·
The goal isn't to make things harder for bots, it's to make things easier for users.
by _cpancake 12y ago
The goal isn't to make things harder for bots, it's to make things easier for users.
- homakov 12y agothey made it easier for users and for bots :)
- _cpancake 12y agoIt's no easier for bots. They still have to answer the old OCR challenge or a computer vision problem.
- homakov 12y agoUsing clickjacking we can get lots of valid tokens, no need to solve challenges.
- _cpancake 12y agoYou don't think Google will figure something out when a bunch of tokens from different IP addresses are all being used by one IP?
- homakov 12y agoIt can be helpful. There's (optional!) remoteip parameter server can use to send google IP address of current user. As in wordpress demo sometimes we can send requests with the browser.
- kuschku 12y agoAnd additionally it’s easy to just create empty Google accounts and then use them with the bots. Just create a few dozen accounts, use them with a few hundred bots, and you easily get full verification.
- warkdarrior 12y agoIt it naive to think that attackers have only one IP at their disposal.