News for hackers. Stuff that matters.

A comment on Nike.com's robots.txt. Parent comment

Re:Nike.com's robots.txt by wizzwizz4 on Friday February 11, 2022 @08:47AM (#30301415)
:-|

I wish I had a good solution to this. Cloudflare to mitigate DDOS attacks has somewhat of a “baby with the bathwater” vibe (considering how much of a pain it is if you can't pass the CAPTCHA, or if you're on Tor), but I can't think of an alternative.

[ Parent | on HN ]
Re:Nike.com's robots.txt by marginalia_nu on Friday February 11, 2022 @08:50AM (#30301439)
:-| indeed.

I've considered having a naked endpoint with a rate limiter that, when it hits some ceiling (dunno, sustained load of 2 RPS or so), offers the alternatives of going through an unlimited cloudflared domain, or waiting until the bots give up. But that might be annoying too.

[ Parent | on HN ]
Re:Nike.com's robots.txt by wizzwizz4 on Friday February 11, 2022 @09:08AM (#30301631)
You could try to push forward the frontier of accessible CAPTCHAs. You just need some tasks that basically all humans can do, but barely and bots can, that don't rely on vision, hearing, emotional response or cultural knowledge. Should be easy, right?
[ Parent | on HN ]