The fix to this was shockingly simple. Add an input box with a standard name like "title" and then hide it with CSS. The bots would always provide a value for every input. If you saw a value for your hidden input you returned 200 but never added the post to your website.
I do work on a bot detection product, and I've seen some group chats where crackers are sharing notes about how they're evading detection tools. The more unnerving part is that the public groups are less serious, and there are certainly better private groups aiming at anything with a good financial reward.
If you've got a good enough bot and it's pre-qualified to spend money, then it can use the special "register as a bot" API and provide personal information and whatever else I want to understand that there is a "real human" behind the curtain. A credit card alone is not enough, they can be (trivially) stolen. The way I see it using agentic bots will ultimately require you to provide more personal details than an actual human would.
Recently used DDG browser it just cant get some sites to clear! Try the flame button. But still logged in after few browser data clearing.
Are company resorting to this kinda tactic to keep user remembered. Its a major booking for lodging site!!!
Qubes OS seems more and more attractive.
Usually my go to. The readme, source code and GitHub issues are great source of information, and the website itself is useful to test against.
edit:
For anything network fingerprinting related, especially censorship related I usually browse https://github.com/net4people/bbs/issues
Small typo here
