>We’ve already done the work to render the page, and we’re trying to shed load, so why would I want to increase load by generating challenges and verifying responses? It annoys me when I click a seemingly popular blog post and immediately get challenged, when I’m 99.9% certain that somebody else clicked it two seconds before me. Why isn’t it in cache? We must have different objectives in what we’re trying to accomplish. Or who we’re trying to irritate.

+1000 I feel like so much bot detection (and fraud prevention against human actors, too) is so emotionally-driven. Some people hate these things so much, they're willing to cut off their nose to spite their face.

Sorry, what's the point of this blog? I hope people would write a quick abstract/summary in the first few lines and then go on elaborating. Or at least put that summary at the end, in old-fashioned way.

it's sad we've gotten to the point where mitigations against this have to be such a consideration when hosting a site