A thought exercise, good for security engineers, threat modeling, introverted get-togethers...

Information on my 2021 OWASP Global AppSec US talk 'How to Thwart Malicious Automation and Kick Bot Butt for $0'.

Despite what vendors will tell you, defending against malicious automation and 'bots' takes a multi-pronged approach.

Before the now-infamous Parler social network's disappearance, we assessed their 'roll-your-own' CAPTCHA.

Walking through how to clock 4 in-client bot detectors like Google reCAPTCHA and Akamai Bot Management SDK.