Ask HN:这能彻底消灭机器人吗?

2作者: piratesAndSons5 个月前
我有一个想法,可以解决机器人问题,或者至少让它们的操作难度大大增加。这是我的计划: 构建一个基于全新 HTTP 协议的新型网络浏览器,该浏览器接受使用加密技术的“身份识别手套”。你不再直接用手指操作鼠标或触控板,而是戴上一只硬件手套,它会持续记录你的脉搏、指纹、机器信息,以及你在与设备交互时独有的平均动作轨迹。手套会实时加密所有这些信息。然后,浏览器会不断验证手套硬件是否存在且处于活动状态。如果没有佩戴具有有效身份的手套?那就无法加载页面。 如果有人试图模拟这个手套呢? 这就是新浏览器的第二道防线。它会持续检查手套的硬件签名和序列号。你可以随意尝试模拟,但同时伪造正确的指纹、持续且可信的人类脉搏、个性化的动作轨迹以及确切的硬件序列号,其概率几乎等同于不可能,这已经接近任何安全系统所能达到的极限。 大家觉得这个初步的想法怎么样?
查看原文
I had an idea to eliminate the bot problem, or at the very least make it significantly harder to operate one. Here is my plan.<p>A new web browser built on a new HTTP protocol that accepts a human identity glove using cryptography. Instead of using your fingers directly on a mouse or trackpad, you wear a hardware glove that continuously records your pulse and your fingerprint, your machine information, and the average movement map that is unique to you as you interact with your device. The glove encrypts all of this information in real time. The browser then constantly verifies the glove hardware is present and active. No physical glove with a valid identity? No page loads.<p>What if someone tries to emulate the glove?<p>This is where the new browser becomes the second line of defense. It continuously checks the hardware signature and serial number of the glove. You can attempt to emulate it all you want, but the probability of simultaneously spoofing the correct fingerprint, a continuous and believable human pulse, a personalized movement map, and the exact hardware serial number is as close to impossible as any security system can get.<p>What do you all think of this as a preliminary idea?