←back to thread

131 points timshell | 1 comments | | HN request time: 0.207s | source
Show context
qoez ◴[] No.44378354[source]
I totally assumed typing cadence and mouse behaviour was incorperated into bot detection for years before this already, interesting.
replies(5): >>44378493 #>>44378607 #>>44378715 #>>44378901 #>>44379408 #
timshell ◴[] No.44378901[source]
That's definitely been the marketing. The point of Section 1 is to refute that point
replies(1): >>44380851 #
1. lucb1e ◴[] No.44380851[source]
I had a security manager at a big bank (one of my first clients) tell straight to my face that the website decides whether to let me in before I even start typing the password(-equivalent) and that the password is just a formality not to scare people. Near as I could tell, he believed it himself

Marketing indeed. He had me doubting for a while what magic they weren't sharing with the rest of us to avoid countermeasures being developed, but I know better now (working in infosec, seeing what these systems catch, don't catch, and bycatch)