Comment by zb3

3 years ago

But the solution for this is a rate limit, not captcha. The real reason they care about "human traffic" is because bots don't buy stuff.

Rate limits do all of bupkis against a botnet. It's not possible to assume that each one IP or connection is one person. The crux that all of these initiatives like remote attestation are trying to solve is that as it is, one person may command tens of thousands of connections, and from a server-standpoint, there's really not much you can do to allocate resources fairly.

you're the first person to say anything about Captcha? The guy who started this argument needing some way to sort out human traffic operates a free service and is complaining the bot traffic makes it hard to offer a free service since bots cost money.

  • By captcha I meant "telling computers and humans apart", not necessarily a particular implementation.

    Why are you focusing on bot traffic? Doesn't human traffic also cost money? Who operates bots and why?

    • The problem is allocating resources fairly. A single human may operate tens of thousands of bots, and thus use disproportionate amount of resources, possibly all of them.