Fighting API Bots with Cloudflare’s Invisible Turnstile
There’s a “hidden” API on HIBP. Well, it’s not “hidden” insofar as it’s easily discoverable if you watch the network traffic from the client, but it’s not meant to be called directly, rather only via the web app.
Continue reading Fighting API Bots with Cloudflare’s Invisible Turnstile
