Hacker News: BottingRocks

New comment by BottingRocks in "Cloudflare Turnstile solver library (no headless browser required)"

BottingRocks — Sat, 31 Oct 2026 01:09:22 +0000

Did you ever get one of those cybersecurity incidents from Claude while working on this project. By the way, great job man this is a remarkably well done project. I'm glad you are getting more traction here you deserve it. Well done man!

New comment by BottingRocks in "ShapeSecurity's JavaScript VM: Part 3"

BottingRocks — Wed, 31 Jan 2024 05:04:29 +0000

This is Part 3 of my series of reversing ShapeSecurity's VM. I have a few more to go. This will only talk about the VM and not the signals and if you need to catch up ready part 1 and 2 that are posted on my blog.

ShapeSecurity's JavaScript VM: Part 3

BottingRocks — Wed, 31 Jan 2024 05:04:29 +0000

Article URL: https://www.botting.rocks/shapesecuritys-javascript-vm-part-3/

Comments URL: https://news.ycombinator.com/item?id=39200175

Points: 9

# Comments: 1

New comment by BottingRocks in "ShapeSecurity's JavaScript VM: Part 1"

BottingRocks — Wed, 24 Jan 2024 07:18:02 +0000

Thanks I appreciated so much. This project took many months for me to do as I had no guidance or proper knowledge on how to approach the problem.

New comment by BottingRocks in "ShapeSecurity's JavaScript VM: Part 2"

BottingRocks — Wed, 24 Jan 2024 07:14:06 +0000

This is part 2 of the series: ShapeSecurity's VM.

There will be many more parts to come guys stay tuned.

ShapeSecurity's JavaScript VM: Part 2

BottingRocks — Wed, 24 Jan 2024 07:14:06 +0000

Article URL: https://www.botting.rocks/shapesecuritys-javascript-vm-part-2/

Comments URL: https://news.ycombinator.com/item?id=39114511

Points: 12

# Comments: 1

New comment by BottingRocks in "Show HN: Roundtable – Survey fraud and bot detection API"

BottingRocks — Fri, 19 Jan 2024 21:42:37 +0000

Here is some of the feedback. In terms of bot protection you would get a 1/10. Perhaps, a 2/10 on a good day.

First, your payload is being sent using base64 encoded using the default alphabet. You only need a simple atob() to decrypt your payload.

Second of all, your bot detection script is very readable making the job of the attacker relatively easy to reverse.

Third, but not least, you do not have enough signals/fingerprints which means that your false positives are going to sky-rocket.

Bots are not dumb, they are programmed by real humans, your site is extremely easy to reverse. You need to add more obfuscation, more signals, better client-side protection in order to quality for real "bot detection".

Source: I reverse antibots for fun and profit, is literally all I've been doing for the past 2 years straight.

New comment by BottingRocks in "Flattr is closing down (2023)"

BottingRocks — Thu, 18 Jan 2024 17:28:21 +0000

I believe that in the last couple of years the line between donation and begging has been blurred.

You have things on the extreme side like people begging on tiktok live doing shoutouts to every viewer that donates a significant gift.On the IRL side you also have people donating to the craziest streamers doing the most outrageous stuff outside. Then you also have super donations on Youtube on live podcasts.

When donations are incorporated on a social app it fosters an environment that makes donating acceptable and fun. Hardly anyone is going to trust their debit card/credit card details to a random site, but the masses will trust buying credits/donations/subscriptions through tiktok,youtube, twitch, patreon etc.

New comment by BottingRocks in "ShapeSecurity's JavaScript VM: Part 1"

BottingRocks — Wed, 17 Jan 2024 05:09:38 +0000

A series into ShapeSecurity's VM

ShapeSecurity's JavaScript VM: Part 1

BottingRocks — Wed, 17 Jan 2024 05:09:38 +0000

Article URL: https://www.botting.rocks/shapesecuritys-javascript-vm-part-1/

Comments URL: https://news.ycombinator.com/item?id=39023545

Points: 2

# Comments: 3