So... they're saying it should be up to the browser to prove that the user is a human?
That seems like a terrible idea to me..what's to stop an automated browser from just saying yes, I'm totally a human ?
There isn't. This article is laughable because there is an astronomical amount of bot traffic that masquerades as legitimate human traffic. Things like puppeteer extra stealth and residential proxies have made it easier to hide a bots presence on the web.
Also, the tracking they allude to via fingerprinting would very much be the same whether it's a human solving a captcha or a seamless process where your browser solves one.
If they manage to standardize an attestation API, they can swiftly kill off that possibility, as well as the possibility of any new successful operating systems / device manufacturers via the natural user growth that benefited the current hegemons.
So... they're saying it should be up to the browser to prove that the user is a human?
That seems like a terrible idea to me..what's to stop an automated browser from just saying yes, I'm totally a human ?
There isn't. This article is laughable because there is an astronomical amount of bot traffic that masquerades as legitimate human traffic. Things like puppeteer extra stealth and residential proxies have made it easier to hide a bots presence on the web. Also, the tracking they allude to via fingerprinting would very much be the same whether it's a human solving a captcha or a seamless process where your browser solves one.
If they manage to standardize an attestation API, they can swiftly kill off that possibility, as well as the possibility of any new successful operating systems / device manufacturers via the natural user growth that benefited the current hegemons.