News for hackers. Stuff that matters.

A comment on Cloudflare Turnstile requiring fingerprintable WebGL. Parent comment

Re:Cloudflare Turnstile requiring fingerprintable WebGL by GoblinSlayer on Monday June 01, 2026 @04:14AM (#48353961)
Why not? PoW challenge doesn't whitelist botnets. If the dumb scraper makes only get requests and doesn't solve the challenge, it doesn't matter how it connects, even if it's a perfectly hidden tor exit node.
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by brookst on Monday June 01, 2026 @09:01AM (#48356272)
Because the work would be done by the compromised residential device. No bothnet owner is going to care if their 100,000 rooted routers have to do a little more work. It’s still “free” from their perspective.
[ Parent | on HN ]
Re:Cloudflare Turnstile requiring fingerprintable WebGL by GoblinSlayer on Tuesday June 02, 2026 @12:33PM (#48372521)
If botnet owner allows RCE, the botnet will just change the owner.
[ Parent | on HN ]