有些软件工程师的职业就是打败运动鞋机器人。
所以我们最好弄清楚他们在搞什么鬼。
"所谓知己知彼 百战不殆"
孙子兵法
你知道什么最麻烦吗？
验证码
它们之所以存在，是因为机器人也很麻烦。
两者都在互相进行这种自动化军备竞赛，无休止地比拼对方的能力--因为对方是个讨厌鬼。
如果你了解对手，就能为自己定位，避免验证码和其他僵尸缓解措施。
让我们看看采取了哪些措施来击败运动鞋机器人，以及对付它们的最佳方法。
如何打败运动鞋机器人 #1：验证码
验证码旨在过滤机器人。
早期版本提示您的谜题对人类来说（应该）很简单，而对机器人来说几乎不可能解决。
更先进的验证码（如 Google reCaptcha version 3）可评估网站流量并为访客分配风险分数。
风险分数基本上从 1 到 10，或者说从绝对是机器人到绝对是人类。因此，网站管理员可以设置自定义阈值，以阻止用户或启动额外的谜题来证明其人类核心。
触发验证码的最常见机器人行为是
- Surpassing the number of requests possible for human activity. Websites monitor traffic and assume the limits of human activity. If your bot exceeds those limits, it will be tested by captcha.
- The use of direct links to check-out. Bots get a huge head-start on other buyers if they use a direct link to go to the check-out page. But many websites have caught on and prompt captchas for anyone who doesn’t follow the normal buyer’s journey.
- Botting on older versions of browsers. Some bots stop working after browser updates and a lazy, yet surprisingly common solution is to just not update. That in itself won’t encourage a website to ban you, but you can expect more captchas.
- Leaving browser fingerprints. The more unique your fingerprint, the more easy it is to single you out. You can’t help leaving a trace on the internet, but you can get your fingerprints look like pretty generic.
对策：扮演人类
简而言之，如果你引起了足够的怀疑，就会触发验证码。因此，你必须让网站相信你是一个 "安全 "的访问者。
- Mask your IP with a proxy. The best proxies to mask your IP address are rotating residential proxies. Not only do residential proxies make you look like any other real human user, they rotate and change your IP address very often. That way, you appear as a different human user each time you send a request.
- One-click captchas. If you have a low-risk score with Google, you’ll only have to solve one-click captchas most of the time. You can cultivate risk-scores by farming gmail accounts. We’ll get deeper into it another time, but for now check out some farming and automation tools like AYCD or Kodai Essentials.
- 明智选择机器人。好的机器人会尽可能地模仿人类浏览--足以让网站监控人员确信你的活动不是自动的。请记住，有些机器人需要手动调整，以延迟请求并修改自动化，从而与人类的能力相匹配。
Sometimes, captchas are a standard greeting for all visitors, without exception. In this case, there are some bots that allow you to solve captcha puzzles directly through their interface. An example is Nike shoe bots.
如果您能很好地管理验证码，它们就不会成为太大的障碍。尽管验证码的目的是为了打败偷跑机器人，但它们实际上可以为您带来优势，因为它们会拖慢其他人的速度。
如何打败运动鞋机器人 #2：排队
队列可以错开流量，防止网站过载。它们就像虚拟候车室，对于运动鞋机器人来说，要绕过它们有点困难。
Bot intervention applications like Queue-it, will direct website visitors to a virtual waiting room. After some time passes, occupants can then continue to shop.
其中一些候机室有额外的筛选协议，有些甚至会随机选择入住者继续购买。这就消除了机器人或其他任何人可能拥有的许多优势。
不用说，这又是一件麻烦事。
对策：贵宾通行证
- Bypass queue. Bots are still faster to cop once they do leave the queue line, but there isn’t much else you can do. However, some bots have queue bypasses built into them, or acquire bypasses for a limited number of sneaker drops.
For example, Cybersole bot can exclusively bypass queues for Footlocker in Europe. So depending on where you want to cop, you’ll need to find out whether there’s a queue, and if there is – what bot can bypass it. - Pose as Googlebot. Long story short, queue lines won’t send google bots (aka google spiders) to a waiting room. Websites depend on them to catalogue their new content, including their product listings. So to avoid offending the spiders, websites treat them like VIPs and let them pass through. I found this article about bypassing queues to try out for yourself.
如何打败运动鞋机器人 #3：浏览器指纹识别
简而言之，浏览器指纹识别就是数据收集。但它收集的不是个人信息，而是关于你的数据：
- 浏览器和操作系统
- 屏幕分辨率和色彩深度
- 语言、时区和字体
- 插件和任何应用程序，如广告拦截器
- 其他行为趋势
有趣的是如何利用这些数据。随着时间的推移，数字指纹会形成用户档案，类似于用于广告定向的买家档案。这样，网站就可以向不同的用户展示不同的页面或产品。
众所周知，在线零售商会引导机器人选择不同的价格，限制其库存选择，甚至设置陷阱。
对策：混入并使用代理服务器
A completely hidden fingerprint is not possible, but a boring fingerprint is. Your main objective is to appear to be like the average user with no qualities to write home about. The best way to do this is to use residential proxies and blend in.
好吧，代理很简单，但如何融入其中呢？
The easy way. Control your browser fingerprint with a virtual browser management system like Multilogin. It allows you to store and load different digital fingerprints when you need to. For example, when using a sneaker bot.
如何打败运动鞋机器人 #4：震荡下落和寻宝游戏
运动鞋零售商想出了一些非常有创意的办法来缩小机器人和人类买家之间的差距。
所谓 "惊爆"，是指球鞋发售前几乎没有任何通知，或者在正式发售日数周至数月后，趁人不备重新补货。一些球鞋爱好者会盯着他们的 SNKR 应用程序，希望自己是第一批被震惊的人之一。厨艺群里也会有小道消息。
打败运动鞋机器人的最好办法就是将它们完全排除在外。耐克和阿迪达斯等运动鞋零售商已经成功地尝试了亲临现场发布和寻宝游戏式发布。
对策：玩得好，先生
反机器人会永远埋葬运动鞋机器人吗？
可能不会。
If humans can make it, then humans can break it – as long as there’s $ufficient incentive to do so.
换句话说，如果让机器人开发者继续惹是生非有利可图，他们就会这么做。
所以，请抓紧你们的屁股。
