logoalt Hacker News

OutOfHere • today at 9:18 PM • 2 replies • view on HN

Yes, I think captchas are the wrong solution. They annoy all clients, humans included.

IP+subnet based throttling on the other hand is a perfectly working solution, optionally with a proof-of-work or login requirement for intensive POST requests only. Why is it a problem if only a few requests per day are made per home IP? Just how bad and inefficient is the web server?

Bots are not a second class client. They were here before AI, and they, like AI, work for humans. For the most part, they're not trolling the web autonomously.


Replies

kator • today at 9:20 PM

IP blocking doesn't work for bots, they use residential IP addresses and make only one or two requests per IP.

[1] Proposed Amendment to the Telephone Consumer Protection Act of 1991 (2026-05-08) - https://www.karlbunch.com/random/website-protection-act/

➕ show 1 reply
rdevilla • today at 9:50 PM

[dead]