Hacker News new | past | comments | ask | show | jobs | submit login

What stops people from just botting the captcha tokens? More captcha's?



The Privacy Pass server uses key rotation to make the tokens expire after a certain period of time. The documentation also hints at other measures including rate limiting and using a web application firewall:

https://github.com/privacypass/challenge-bypass-extension/bl...




Join us for AI Startup School this June 16-17 in San Francisco!

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: