botstop.io now shows every signal it uses. This article documents the two newest groups: 19 ways to recognize an automated or headless Chrome, found by running 30,217 web-platform-tests in four differently started Chromes, and three probes that measure the hardware under the browser instead of asking it. Then I measure all of them on eleven days of real sign-ins, and half of what I had built falls apart.

Continue reading