Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That is true for crawling bots which hit simple web forms. Also using some JavaScript kills most of them. Although such methods won't work with targeted bot attack.


> Although such methods won't work with targeted bot attack

Neither will Captcha


I would say in my experience CSRF-protection has proven very effective at even preventing targeted password brute-force.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: