[jazzyjackson]

Google and Cloudflare both are not just looking at entropy of mouse movements, that was cracked years ago, they are fingerprinting you and correlating your session with all your activity cross domains to score your botlike behavior.

[potamic]

I doubt they are doing it. You just have to get on a VPN to and see yourself being flooded with captchas despite browsing the web like a normal human and solving dozens of captchas along the way.

[alightsoul]

I guess that raises the bot score given that the vpn IP is a data Center IP and thus in a lot of ban lists

[acdha]

Also some of the free VPN apps support themselves by proxying this kind of traffic:

https://www.kaspersky.com/blog/what-is-wrong-with-free-vpn-s...

[alightsoul]

Which also involves detecting entropy across sites I guess

[crote]

How is that not a massive GDPR violation?

[inigyou]

You can just break the law, if you don't get caught, especially if you're rich.

[alightsoul]

They can just not do it in Europe and keep doing it everywhere else

[tremon]

Profiling visitor traffic to protect against abuse is a legitimate use case, even for GDPR. It's only a violation if that usage is not disclosed in the ToS.