Hacker News new | ask | show | jobs
by chacham15 4851 days ago
This method is well known and there are ways of making this more difficult. For example, servers add a hidden request cookie which is a random number embedded in the page that the user is coming from. This forces you to actually parse the page. Then they can move it to javascript making it even more difficult.
1 comments

I would just like to point out that not all sites do the following (and I'm unsure if OKC does), but watch out for tripwires as chacham15 said. Some sites that I've had the misfortune of "getting to know" use insignificant or blank inputs as a form of detecting unauthorized access.

One rule I follow is to: Retrieve, Analyse and Regurgitate Everything.

By inputs do you mean CAPTCHAs or something else?