Alex Spring

Founder: @driverdotdev Prev: 2x exits in web infra

[Alex Spring @_alexspring]

https://t.co/rhGJtNJnPe

[Alex Spring @_alexspring]

Reddit is following trend: Block web scraping and automation at any cost

What this means:
> Public data APIs killed
> Remaining APIs pushed to auth + limits
> Agents/bots must use Devvit (Reddit's dev platform)

[Alex Spring @_alexspring]

@brenden_stahle gta money printer

[Alex Spring @_alexspring]

@usekernel Nice work. Sounds like you need one of these next

[Alex Spring @_alexspring]

@saarth_ @sixtyfourai @henry0284928382 better be cooking

[Alex Spring @_alexspring]

@mil000 @saarth_ @sixtyfourai lmao

[Alex Spring @_alexspring]

@0x1_0xyd3 I think we're still early on seeing antibots in prod requiring key attestation. It has been mocked up by some, but Google seems to be one of the first indicating things are moving this direction.

I'd say 6-12 months before others start implementing variations.

[Alex Spring @_alexspring]

Scraping the web is about to require buying phones.

Antibots want to know if it's a real device, not a real browser. Google's recaptcha QR code is the canary.

Patched chromium dies. No more web agents, no more automation.

The next moat is real phones and arm servers.

[Alex Spring @_alexspring]

@parzival1213 This has nothing to do with hardware key attestation

[Alex Spring @_alexspring]

@montanaflynn We use Framer for our landing page. They're doing the same.

https://t.co/fLueLgPRYE

[Alex Spring @_alexspring]

This $200 Android box has better stealth than any browser infra provider.

Don’t pay a browser service $500/mo to fake hardware on EC2 instances.

[Alex Spring @_alexspring]

@korymath I'm in Toronto

[Alex Spring @_alexspring]

@N104AP Good to know, thanks for sharing.

What site are you reproducing the on?

It's still early rollout. Wouldn't surprise me if Play Integrity integrated in future.

[Alex Spring @_alexspring]

@DCubbins Yea, it's backed by Play Integrity.

https://t.co/YlK2bV4eHs

[Alex Spring @_alexspring]

Google's next evolution of reCAPTCHA is QR codes.

An effort to block web infra companies. It will be interesting to see if they tie in Play Integrity.

[Alex Spring @_alexspring]

@robin_blix I agree. Likely more for scalping.

[Alex Spring @_alexspring]

@robin_blix Payments fraud

[Alex Spring @_alexspring]

@ArieWindmill I've seen discussions mentioning it on https://t.co/iGv3Ql0M7F, but I haven't been able to reproduce yet.

That QR code on the image is valid as well.

[Alex Spring @_alexspring]

@BlakjakTheGamer It requires a mobile device connected to Google Play Services. It is backed by Play Integrity.

https://t.co/YlK2bV4eHs

[Alex Spring @_alexspring]

@FullStackNate @strajk_ Likely App Attest.

https://t.co/0mdigyerKw

[Alex Spring @_alexspring]

@strajk_ It's likely backed by Play Integrity. Meaning you'll need an Android device with Google certified attestation keys.

[Alex Spring @_alexspring]

@jawschamp Yep, we're pushing an update soon. Rotating Android infra with full Play Integrity passes.

Hope to share our findings. It's expanded upon: https://t.co/W2kjLtzYzC

[Alex Spring @_alexspring]

https://t.co/9Bej2o5BF0

[Alex Spring @_alexspring]

@Shpigford @browserbase Saving you many headaches
https://t.co/mZVangdQaA

[Alex Spring @_alexspring]

https://t.co/rhGJtNJnPe