3 ms·
It's no easier for bots. They still have to answer the old OCR challenge or a computer vision problem.
by _cpancake 12y ago
It's no easier for bots. They still have to answer the old OCR challenge or a computer vision problem.
- homakov 12y agoUsing clickjacking we can get lots of valid tokens, no need to solve challenges.
- _cpancake 12y agoYou don't think Google will figure something out when a bunch of tokens from different IP addresses are all being used by one IP?
- homakov 12y agoIt can be helpful. There's (optional!) remoteip parameter server can use to send google IP address of current user. As in wordpress demo sometimes we can send requests with the browser.
- kuschku 12y agoAnd additionally it’s easy to just create empty Google accounts and then use them with the bots. Just create a few dozen accounts, use them with a few hundred bots, and you easily get full verification.
- warkdarrior 12y agoIt it naive to think that attackers have only one IP at their disposal.