Quote from: Holdaaja on April 19, 2016, 05:07:21 PM

Quote from: BitcoinFuture99 on April 19, 2016, 03:43:14 PM

I already suggested faucet box owner to provide some thing to owner to check before the faucet box payouts to users to supervise if there is any bot attack from some IPs addresses to avoid sending payout to those.

But from reply of faucet box owner made me realise that actually users are important for faucet box not the owner.

More bots = more money in the faucets = more 2.5% commission for Faucetbox.com

We're not that short-sighted

.

Bots were discussed many and many times here already. It's easy to say that security of our script suck, but hey, that's a market for you right here right now. Make something better and start selling it.

The real problem is that it's the CAPTCHA job to keep bots out. When CAPTCHA fails there's not much we can do. You can say that naming honeypot field as "honeypot" is wrong, but that doesn't change anything. Even if it would be a random field name every time, bots can work this around. It's just a matter of what's profitable for them.

Your custom faucets may not be affected by bots, but that's not because your security is much better. It's just that your faucets are different and it's not profitable for bots to implement support for things you do differently. But if we change something in Faucet in a BOX, hundreds of faucets have that change and then it's worth for bots to invest some time in working around this.

We truly believe that the best way is:

1. encouraging people to do their own scripts. Not only diversity will help with bots, but also it will make it more pleasant to users.
2. automatic identification of networks with services like http://getipintel.net/ . We're working on making NastyHosts.com competitive here (right now it only stops a small fraction of bots, mainly Tor and AWS)

If you want to verify users by email, by phone number or you want to manually review each payout, no problem, you can easily implement that in your script and make it better for everyone.

EDIT:
As for reviewing IP addresses by FaucetBOX.com team, we tried that via NastyHosts.com. Unfortunately thousands of addresses per hour is too much for a manual review.