botstop.io now shows every signal it uses. This article documents the two newest groups: 19 ways to recognize an automated or headless Chrome, nearly all traced to a DevTools protocol command, a launch switch or a headless build, and three probes that measure the hardware under the browser instead of asking it. Then I measure all of them on eleven days of real sign-ins, and half of what I had built falls apart.
Continue reading