• Dr. Moose@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    edit-2
    3 months ago

    I work in bot protection and it’s a sound idea but doesn’t really work in practice. As long as there’s more than 1$ of value to be gained it’s worth it for the bot makers.

    This also makes it so that botting is only accesible to select few actors that have the required resources i.e. russian troll farms or large bot networks from china, in turn this increases their value. This is very good for them.

    Reality is that the only way to stop bots is to constantly change up the detection system. This is called a “cat and mouse” sort of problem and it really is the only way to do it. The attacker always has to catch up and it can be trivial that takes them couple of hours to do but it also reveals behavior patterns for marking bot accounts. This actually works really well in practice but requires a lot of dev resources and many companies low-key like bots which is another thread entirely.

      • Dr. Moose@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        3 months ago

        develop systems that can identify unwanted users like bots, spammers, people who abuse the product and break ToS etc. Most bad actors are very dumb but fighting this at scale is actually very interesting. Also most bots (like 90%) are just scrapers (data collectors) especially when it comes to Twitter which has absurd API pricings but cost almost nothing to scrape lol

        • jeffw@lemmy.world
          cake
          OP
          link
          fedilink
          English
          arrow-up
          1
          ·
          3 months ago

          Oh my god I’m a fuckin idiot. Granted, I’ve had a couple drinks tonight but I thought you were protecting bots… not protecting against them lol

          • Dr. Moose@lemmy.world
            link
            fedilink
            English
            arrow-up
            1
            ·
            3 months ago

            Hey man it gets me employed and I even get to work on foss on work hours sometimes. Thanks! :)

      • Dr. Moose@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        edit-2
        3 months ago

        As Kungen already answered - stats! You can sell bot traffic as real traffic which inflates your numbers.

        For stuff like social media, bots increase engagement too. Many new products and networks actually generate a lot of fake content to attract organic growth. I.e. if bot likes your comment you’re likely to engage more. If it likes your product review you’re likely to review more stuff etc.

        Tracking bots can also generate reverse analytics. For example if you know that your competitors are scraping fishing equipment data from your store it could mean they’re working on a competing fishing related product.

        Lastly, you can feed fake data to bots to manipulate competitors. This is somewhat illegal (no real legal precedent yet afaik though its a clear intent to harm other businesses) but it can really powerful in the wrong hands.

        Edit: worth nothing that a lot of bot traffic is good. Sometimes you want to be scraped as it is a form of organic engagement and increases the value of your data and often backlinks growth (e.g. indexers like Google etc)