User Agent Identification

[HairyHun]

Beside the user agent piece of code, what are the methods a server identify a human person on a normal browser vs a script running somewhere automated ( event if it's from a desktop app )

Anyone familiar with craigslist's safeguard systems against non-standard-human usage?

Thanks
HH

 

[nickCR]

You can look at ip, number of request, request per seconds, etc. You need to look at the interaccion pattern and see if they are clicking buttons in the same spot or the like. You can also use hidden fields and form tokens etc.