undefined | Better HN

0 pointsefilife5mo ago0 comments

I don't think that mouse movement analysis is used anywhere. But it was reportedly used 10 years ago by Google's captcha. This is a client side check than can trivially be bypassed

0 comments

mrguyorama5mo ago

The majority of attackers are unsophisticated and just deploying scripts they found or tools they bought on russian forums against whatever endpoint they can find.

The simple tools still work remarkably well.

There are very very effective services for bot detection that still rely heavily on keyboard and mouse behavior.

CaptainOfCoit5mo ago

> But it was reportedly used 10 years ago by Google's captcha.

It sucks so bad. If I solve the captchas by moving the mouse too quickly, Google asks me to try again. If I'm deliberately slow and erratic with my movements as I click on pictures, it almost always lets me through on the first click. Been manually A/B testing this for years and remains true today.

efilifeOP5mo ago

I've been doing this for many years and not even once tried to solve a captcha at my normal speed. Will have to check myself.

j / k navigate · click thread line to collapse