XPost: alt.windows7.general, alt.computer.workshop   
   From: V@nguard.LH   
      
   "J. P. Gilliver"  wrote:   
      
   > On 2025/12/25 2:29:9, VanguardLH wrote:   
   >> "J. P. Gilliver"  wrote:   
   >>   
   >>> On 2025/12/24 17:4:43, VanguardLH wrote:   
   >>>> "J. P. Gilliver"  wrote:   
   >>>>   
   >>>>> ... on some others I get the "please wait while we check you're a   
   >>>>> human", or similar wording, from cloudflare, which then connects me   
   >>>>> to those sites after a few seconds.   
   >>>>   
   >>>> Those, even if only a checkbox you click, are looking for behaviors   
   >>>> (events) exhibited by humans visiting a web site versus bots or web   
   >>>> crawlers trying to harvest content, or zombied hosts attempting DDOS   
   >>>> (Distributed Denial of Service) attacks.  The site assaults their good   
   >>>> visitors with anti-bot/DDOS/webcrawl filtering.   
   >>>>   
   >>>> Their CAPTCHA could be a simple checkbox you click, and they'll notice   
   >>>> it takes you time to move your mouse to click on it versus a bot that   
   >>>> instantly clicks on the checkbox.  Could be "match the tiles" on some   
   >>>> common theme, like all tiles with bicycles, or you drag a tile to fill   
   >>>> in a jigsaw picture, or you solve a math formula.  The site assaults you   
   >>>> with interferrence trying to protect themself from bots, web crawlers,   
   >>>> and DDOS (Distributed Denial of Service) attacks.  They're hoping to   
   >>>> protect their site to keep it responsive to real visitors by   
   >>>> interferring with accessing the site by bots, but it is interferrence to   
   >>>> their good visitors, too.  In effect, it is a weak form of requiring all   
   >>>> visitors to login before the site delivers its content.   
   >>>   
   >>> Sometimes they're a "pick the pictures" (often with an American word,   
   >>> like "crosswalk"), sometimes they're just a tickbox (where yes, they can   
   >>> track your mouse); sometimes, they don't require you to do _anything_,   
   >>> they just "decide" you're human after a few seconds. Not sure how they   
   >>> can use your action - or lack thereof! - to decide how human you are.   
   >>   
   >> A bot would likely immediately click on the checkbox instead of take   
   >> time to recognize it was there to move the mouse over to it and click on   
   >> the checkbox.  Unlikely you would happen to have the mouse pointer at   
   >> the spot on the screen where the checkbox shows up to instantly click on   
   >> it when it appeared.  There's probably a slew of heuristics to determine   
   >> if events generated by a web page were human sourced or scripted.   
   >   
   > You're missing the point - sometimes there _isn't_ such a checkbox that   
   > has to be clicked.   
      
   Yeah, that one I don't know what the site is trying to accomplish other   
   than something similar to greylisting for e-mail.   
      
   https://en.wikipedia.org/wiki/Greylisting_(email)   
      
   For bots of webcrawlers, maybe they won't wait for the non-challenging   
   timetout.  The site makes you wait, bots don't wait, so they go away.   
   The result is you get stalled on your visit, but usually not always.   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)