Birbla

Login
    Reverse Engineering Vercel's BotID (nullpt.rs)
    90 points by hazebooth - 15 hours ago

  • Note that the bot detection script uses WebGL to obtain GPU name. I assume this (fingerprinting) is the most popular use of WebGL. Sad that independent browsers like Firefox do not supply fake values.
    by codedokode - 12 hours ago
  • > At the moment, it seems Basic mode is so basic that it allows everything to pass as human. That’ll likely change as they gather more telemetry to better identify what a bot signal looks like.

    So they are basically collecting telemetry in the name of "free basic anti-bot" solution.

    by ATechGuy - 9 hours ago
  • why is bot detection even happening at render time instead of request time. why can't tell you’re a bot from your headers, UA, IP, TLS fingerprint. imo making it a surveillance. 'you're a bot, ok not just go away, let’s fingerprint your GPU and assign you a behavioral risk score anyway'
    by b0a04gl - 9 hours ago

© 2025 Birbla.com, a Hacker News reader · Content · Terms · Privacy · Support