Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

From my experience, it's a completely different problem.

For 99% of websites there is no serious behavioral analysis, and when there it's easily bypassable.

It's as simple as:

wait some random time between 500 and 3000ms before clicking and always make the clicks randomly slightly off from the center of the element

wait for some random time between 50 and 200ms between keystrokes

use ghost-cursor to make realistic movements using bezier curves

Most of the time you get spotted because of some obscure value in some random part of the browser or request headers isn't what it's supposed to be, not because your actions aren't realistic



Or, save yourself the hassle of pretending to be using a mouse, by pretending to be using a touchscreen.


well it's also pretty hard to simulate a phone, even a lot harder than a browser imo

for example I'm pretty sure the GPU/canvas fingerprint can't be faked




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: