Re:Running web sites makes me not want to
by viraptor on Thursday November 12, 2026 @01:24PM
(#50471795)
Unless you run full behaviour analysis, it's going to be hard to identify all bots from a normal access log. If you want more data, you can add JA4 hash to your logs that will surface huge amounts of things pretending to be the latest chrome.
[ Parent
| on HN ]
Re:Running web sites makes me not want to
by pixl97 on Thursday November 12, 2026 @02:39PM
(#50473018)
How long before bots just use the chrome crypto API to make connections?
Re:Running web sites makes me not want to
by viraptor on Thursday November 12, 2026 @02:49PM
(#50473165)
They already can. But they largely don't. We still get lots of really dumb requests that don't do basic hiding.
Re:Running web sites makes me not want to
by ninjalanternshk on Friday November 13, 2026 @06:57AM
(#50482248)
At scale it’s vastly more resource intensive than scripts, so it does stop the very cheapest layer of spammers, but not anyone in any way resourced or determined.