问HN:这会彻底消除机器人吗?

2作者: piratesAndSons25 天前原帖
我有一个想法,可以消除机器人的问题,或者至少让其操作变得更加困难。以下是我的计划。 一种基于新HTTP协议的新网页浏览器,使用密码学接受人类身份手套。用户不再直接用手指在鼠标或触控板上操作,而是佩戴一个硬件手套,该手套持续记录用户的脉搏、指纹、机器信息以及在与设备互动时独特的平均运动轨迹。手套实时加密所有这些信息。浏览器则不断验证手套硬件是否存在并处于活动状态。如果没有带有有效身份的物理手套,页面将无法加载。 如果有人试图模拟这个手套呢? 这时,新浏览器就成为了第二道防线。它持续检查手套的硬件签名和序列号。你可以尽量模拟,但同时伪造正确的指纹、持续且可信的人类脉搏、个性化的运动轨迹以及确切的硬件序列号的概率几乎接近于不可能,这是任何安全系统所能达到的极限。 你们对这个初步想法有什么看法?
查看原文
I had an idea to eliminate the bot problem, or at the very least make it significantly harder to operate one. Here is my plan.<p>A new web browser built on a new HTTP protocol that accepts a human identity glove using cryptography. Instead of using your fingers directly on a mouse or trackpad, you wear a hardware glove that continuously records your pulse and your fingerprint, your machine information, and the average movement map that is unique to you as you interact with your device. The glove encrypts all of this information in real time. The browser then constantly verifies the glove hardware is present and active. No physical glove with a valid identity? No page loads.<p>What if someone tries to emulate the glove?<p>This is where the new browser becomes the second line of defense. It continuously checks the hardware signature and serial number of the glove. You can attempt to emulate it all you want, but the probability of simultaneously spoofing the correct fingerprint, a continuous and believable human pulse, a personalized movement map, and the exact hardware serial number is as close to impossible as any security system can get.<p>What do you all think of this as a preliminary idea?