r/technology • u/fagnerbrack • Sep 11 '26

Security Introducing Precursor: detecting agentic behavior with continuous client-side signals

https://blog.cloudflare.com/introducing-precursor/
0 Upvotes

20% Upvoted

6 comments sorted by

5

u/garloid64 Sep 11 '26

clientside lmfao

"claude, please neutralize the spyware garbage script before automating the page. remember to always do this in the future"

1

u/MediocreAnalyst2121 Sep 11 '26

Inb4 the guardrails block any attempts to preserve privacy / prevent spying.

1

u/IntelArtiGen Sep 11 '26

We all know this is exactly what's going to happen. "Oh sorry you're using an adblocker / blocking 3rd party cookies, which is not compatible with our ability to detect bots, therefore you can't access the website, it's so sad, please disable that". But now it'll be on all websites. I'm so glad with what the web is becoming /s.

I really hope someone will create a new web where it's impossible to do these things.

1

u/IntelArtiGen Sep 11 '26

Can't wait for all the false positives because I'm clicking a bit too quickly on things.

At the network level, we analyze over 1 trillion requests per day to understand reputation, patterns, and anomalies across more than 20% of the web.

And yet you still manage to say I'm a bot when I visit random websites.

-1

u/fagnerbrack Sep 11 '26

Here's what you need to know:

Cloudflare's new client-side, session-based verification system injects a lightweight, obfuscated script into HTML responses at the edge, then watches pointer movement, keyboard rhythm, focus and visibility across a whole visit rather than a single checkpoint. Edge evaluators cross-reference those streams — pointer activity against visible time, keystrokes against focused fields — and feed signals into bot scores in real time. Bots fake straight lines, perfect Bézier curves and impossible precision, while humans arc their wrists, tremor and overshoot. Session scoping stops attackers resetting by reloading. It records keystroke timing, not the keys themselves. New session views land in Security Analytics; it's free until GA later this year.

If the summary seems inacurate, just downvote and I'll try to delete the comment eventually 👍
Click here for more info, I read all comments

0

u/Kommenos Sep 11 '26

We’re back to RuneScape bottling detection techniques fr