zlacker

[return to "Apple already shipped attestation on the web, and we barely noticed"]
1. captai+a8[view] [source] 2023-07-25 14:43:11
>>pimter+(OP)
Remember AllAdvantage? That was a service around the turn of the century that showed you ads on your desktop and paid you for it. But only if you were actively using the PC. People used mouse wigglers to fake it and there was a little arms race.

This tech would be their wet dream. You could tell if a request is from a real browser or from a script. You could disable attestation if an untrusted driver is used (to simulate inputs) or the web browser is automated otherwise. Really disturbing tech.

◧◩
2. kccqzy+HK[view] [source] 2023-07-25 16:53:32
>>captai+a8
> You could tell if a request is from a real browser or from a script.

Today websites already know if the request is from a real browser or not just by integrating with reCAPTCHA or hCAPTCHA. This is just taking a very popular category of security product and tightly integrating it with the browser itself.

Today, you can take a philosophical stance and categorically refuse to use any website that uses reCAPTCHA/hCAPTCHA. Tomorrow you can take a philosophical stance and refuse to use any website that uses PAT.

[go to top]