arbol

4 ms·

31.
by arbol 4mo ago
You literally can't get rid of it without introducing government issued ID to buy any scarce freely accessible items
32.
by arbol 4mo ago
I'm no CF advocate but those random APIs are literally what differentiates people running Chrome on their computer versus a bot operation with a load of containers. Kubertnetes clusters don't have GPUs. This is why it's used
33.
by arbol 4mo ago
Yeah, this doesn't even begin to cut it
34.
by arbol 4mo ago
- behavioural fingerprinting - ja4 - IP rep - queue mechanism - card country to IP country checks - app attestation - custom metrics based on knowledge of past scalpers It's hard but it's not impossible. You can make it very incon
35.
by arbol 4mo ago
LAN parties?!
36.
by arbol 4mo ago
Or the regulated agents standard that cloudflare is conveniently going to steward alongside Google...
37.
by arbol 4mo ago
It doesn't. It slows them down. To stop bots you need to employ the full suite of tools, fingerprinting, IP rep, behavioural analysis. Anubis will slow down your basic scrapers that try to crawl the entire web but it is useless again
38.
by arbol 4mo ago
Beating fingerprinting and beating traditional captcha is far more expensive than solving pow. Pow doesn't stop anyone, not even the most novice bot operators
39.
by arbol 4mo ago
Except it doesn't
40.
by arbol 4mo ago
PoW doesn't stop bots.. It's an annoyance at most. A rate limiter and nothing more
41.
by arbol 4mo ago
Behavioural requires interaction. Fingerprinting is instantaneous and cloudflare runs on page load for lots of sites
42.
by arbol 4mo ago
Thanks! We don't penalise privacy browsers or VPN by default. We score JS signals browser side in constantly rotating obfuscated code. This avoids us having to send up the actual data whilst making it difficult to fake the dynamic chal
43.
by arbol 4mo ago
Proper bot operators already run long-lived sessions in order to avoid detection. So this inflicts additional financial penalities on basic bots (brute force) but not the more advanced ones, as they're already paying it.
44.
by arbol 4mo ago
Tin hat folk say Cloudflare is CIA. I dunno
45.
by arbol 4mo ago
Exploiters might get around them in isolation but they are easily caught at scale due to the opportunity cost being less than the cost of creating unique behaviour over many containers.
46.
by arbol 4mo ago
They already have. Claude and OpenAI are not trying to write captcha-defying AI agents. These tests wouldn't hold up as well against proper bot operators who mimic user behaviour. However, the signals are still valid as part of a large
47.
by arbol 5mo ago
This doesn't stop the bots - it just makes them hold a private key in their headless browser.
48.
by arbol 5mo ago
when you block temp mails they just switch to gmail/live/outlook/hotmail
49.
by arbol 5mo ago
Are you referring to m-pesa?
50.
by arbol 6mo ago
Very cool signup!
51.
by arbol 6mo ago
This isn't true anymore.. GitHub are rate limiting people on pro and pro+ pretty hard
52.
GitHub Copilot rate limits Pro Users(github.com)
13 points by arbol 6mo ago|8 comments
53.
by arbol 6mo ago
GitHub have finally wised up that you could run Copilot on a cron and use almost unlimited tokens. They have since made the product unusable by enforcing extremely strict rate limits, annoying many paid customers.
54.
Show HN: Curation: Share Podcast Recommendations(curation-509629088134.us-west1.run.app)
2 points by arbol 6mo ago|0 comments
55.
by arbol 6mo ago
Twitter should default to xcancel links
56.
by arbol 7mo ago
The AI companies are using virtually unlimited "clean" residential IPs so this is not a valid strategy.
57.
by arbol 7mo ago
Nice. A similar win I've found is documentating process flows with mermaid diagrams (.mmd). I would imagine it would work well when combined with your approach.
58.
by arbol 8mo ago
So is this shared memory as in RAM or a markdown file that they update with their statuses?
59.
by arbol 8mo ago
This doesn't make any sense. To overwhelm proof of stake you need to have a majority of the crypto. To overwhelm proof of work, you need to have a majority of mining power. AI agents have neither of these. AI native Blockchains inheren
60.
by arbol 8mo ago
Just generate accounts until you get the phrases you want. You'll only manage a few characters due to the compute involved

More ›