Also i can confirm that LynxChan has better protection compared to ViChan(which is just a pile of shitcode nobody ever bothered to refactor).

Picrel, Left is what it takes to spam LynxChan, right is ViChan

I'm just playing the role of a gray hat. I didn't say a single fucking word against the guy spreading a script to spam lynxchan around. If people are going to trust a broken protection, I won't hesitate in showing it's cracks.

 

If a system can be automatically spammed, the fault is on the system.

Wait is there a a public script to spam lynxchan?

Right.

Yeah, but there's nothing special to it. LynxChan is not meant to be obfuscated.

No-js policy makes it harder to implement good anti-bot protection without cloudflare(which kinda defeats the purpose of no-js anyway)

You can't do much that isn't just obfuscation with js, tho.

You can make complicated evolving handshake and confirmation sequences apply it to js fingerprinting capabilities with some machine learning and it makes it pretty hard to crack.

Distil network is a commercial example of such techniques. As well as cf but cf is not that advanced.

But as an open source project i dont think its an option, maybe if you make closed source module for it or something, but its entirely different story.

So you either make the code proprietary or people can easily replicate the handshake. Am I missing something here?

Yeah almost, see >>90865

But at least you can stack layers of protection to make it harder to crack, even being open source.

I follow the maze mentality.

If all you are building is a maze that is perfectly traversable, you might as well not build anything at all. You are just stacking your time building it against the attacker traversing it. And once the attacker figures it out, your time was simply wasted.

You just raising entry level. And once its high enough people will only be able to solve it after dedicating time and money. And even if they do they wont share their work with public. But overall i think you right, let cloudflare do its thing and better spend time improving end user experience.

Test