this post was submitted on 03 Dec 2023
643 points (97.9% liked)

Technology

59424 readers
2804 users here now

This is a most excellent place for technology news and articles.


Our Rules


  1. Follow the lemmy.world rules.
  2. Only tech related content.
  3. Be excellent to each another!
  4. Mod approved content bots can post up to 10 articles per day.
  5. Threads asking for personal tech support may be deleted.
  6. Politics threads may be removed.
  7. No memes allowed as posts, OK to post as comments.
  8. Only approved bots from the list below, to ask if your bot can be added please contact us.
  9. Check for duplicates before posting, duplicates may be removed

Approved Bots


founded 1 year ago
MODERATORS
 

New study finds bots and fraud farms responsible for 73% of web traffic::undefined

(page 2) 45 comments
sorted by: hot top controversial new old
[–] [email protected] 4 points 11 months ago
[–] [email protected] 0 points 11 months ago (1 children)

Wonder what the engineering solution to this could look like..

Thinking something like a zero trust model being required for all web requests.. Like the target address would need to receive a validated identity token from some third party but that token couldn't contain identifying info about the requester. Likewise, the validating third party would need to verify the identity of the requester without having knowledge of the target address.

Then that raises more questions like who would we all be comfortable trusting as a verifier and what data would we use for that validation? The validation system and the data used to validate would need to be provided for free too to account for low income people so no subscription services or hardware MFA keys. Also who counts as an identity to be validated?

What do enforcement mechanisms look like if this does get built? Are the validators entirely passive or do they actively participate in the process? Like do we have rate limits imposed by the validation engine or do we just leave that to the target address/organization to impose themselves? What happens if someone is banned from a site? Does the site notify the validators to drop requests earlier in the lifetime of a request? Do individuals get a lower request quota than corporations? Would you have to form a company just to prototype a new tool/product?

If someone seriously wanted to work on this I'd jump on the opportunity to work with them. It sounds like a fascinating project.

load more comments (1 replies)
load more comments
view more: ‹ prev next ›