Re:Cloudflare Turnstile requiring fingerprintable WebGL
by phoronixrly on Sunday May 31, 2026 @11:43AM
(#48346632)
How does proof of work stop bots?
[ Parent
| on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by stephantul on Sunday May 31, 2026 @11:46AM
(#48346661)
Because it destroys the economics of scraping. It’s too expensive with proof of work, or at least not as economically viable
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by gruez on Sunday May 31, 2026 @11:52AM
(#48346713)
Depends on what type of scraping you're trying to stop. For the dumb scrapers that would try to scrape every page on a git forge (for which there are a bazillion pages for a modest project, because of how the site works), yeah it might deter them enough to stop. For anything high value (eg. reddit comments or retail prices), 10s of cpu time isn't going to stop them.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by pmontra on Sunday May 31, 2026 @11:59AM
(#48346769)
It will not scare away bots but 10 seconds of wait (CPU or only a sleep) will turn away many real users. "This site is so slow, I'll use something else." A kind of reverse captcha.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by Hnrobert42 on Sunday May 31, 2026 @12:33PM
(#48347090)
Maybe, the proof of work can run in the background.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by btown on Sunday May 31, 2026 @01:28PM
(#48347601)
Or it can run as part of a checkout wizard's "verifying your browser and processing your payment, don't close your tab" step.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by mattstir on Sunday May 31, 2026 @11:29PM
(#48352307)
At which point it exists solely to punish real human users? What scraper bot is going through checkout?
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by BenjiWiebe on Monday June 01, 2026 @01:37PM
(#48360055)
The credit card tester bots go through the checkout process.
PoW wouldn't be a big issue for them though since their volume is much lower.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by stephantul on Sunday May 31, 2026 @01:03PM
(#48347359)
Sure, the whole premise is exactly that proof of work reduces the value of scraping, while having negligible impact on users. If the data is so valuable that bot operators are willing to pay 10s of cpu, then other measures are necessary.
Nevertheless even for these high value cases, you can still argue that it disincentivizes the business model, it becomes less efficient.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by thayne on Sunday May 31, 2026 @01:44PM
(#48347796)
If it's high value, there isn't really much you can do that will be completely effective. Traditional captchas can often be beaten by AI, or by "captcha farms" where impoverished people are paid pennies to complete captchas. Fingerprinting can be beaten by using a full browser to make the requests. Basically anything you do is just a matter of making it more expensive for bots to access it.
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by arbol on Sunday May 31, 2026 @03:46PM
(#48349076)
Beating fingerprinting and beating traditional captcha is far more expensive than solving pow. Pow doesn't stop anyone, not even the most novice bot operators
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by tobyhinloopen on Monday June 01, 2026 @01:25AM
(#48352948)
You can just download all of Reddit from torrent sites
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by arbol on Sunday May 31, 2026 @03:44PM
(#48349057)
Except it doesn't
Re:Cloudflare Turnstile requiring fingerprintable WebGL
by ranger_danger on Sunday May 31, 2026 @07:43PM
(#48350969)
5W load for 2 seconds is 0.002Wh, I think we'll be fine