CloudflareのCAPTCHAを使ってユーザ体験を下げず不正利用を排除する / Cloudflare's captcha case study that does not degrade ux

by https://speakerdeck.com/linyows

Slide 1

Slide 1 text

.FFUVQ'VLVPLB7PM $MPVEGMBSFͷ$"15$)"Λ࢖ͬͯ ϢʔβମݧΛԼ͛ͣෆਖ਼ར༻Λഉআ͢Δ 5PNPIJTB0EB(.01FQBCP *OD

Slide 2

Slide 2 text

.FFUVQ'VLVPLB7PM 5PNPIJTB0EB (.0ϖύϘϗεςΟϯάࣄۀ෦ 4FOJPS&OHJOFFSJOH-FBE !MJOZPXT

Slide 3

Slide 3 text

.FFUVQ'VLVPLB7PM എܠͱ՝୊ ϗεςΟϯάࣄۀऀʹ͸ҎԼͷܧଓతͳෆਖ਼ར༻͕͋Δɻ ⚫︎ ϑΟογϯάαΠτͷઃஔ ⚪︎ લஈʹ$%/͕͋ͬͯΦϦδϯ͕Ӆṭ͞ΕͨΓ͢Δ ⚫︎ ϑΟογϯάϝʔϧͷେྔૹ৴ ⚪︎ ྉۚͷࢧ෷͍Λ͠ͳ͍ͱૹΕͳ͍ ⚫︎ ΫϨδοτΧʔυͷେྔτϥϯβΫγϣϯ ⚪︎ ୯ҰΞΧ΢ϯτͰͳ͘ෳ਺ΞΧ΢ϯτʹΑΔʢ୯ҰΞΧ΢ϯτͰ͋Ε͹ܾࡁ୅ߦۀऀͷػೳʹ ΑΔ੍ݶ͕Մೳʣ

Slide 4

Slide 4 text

.FFUVQ'VLVPLB7PM 🧑💻 💳 "DDPVOU" "DDPVOU# ʜʜ 1BZNFOU1MBUGPSN 💳 💳 💳 💳 💳 💳 ❌

Slide 5

Slide 5 text

⚠͍ΘΏΔ$"15$)"Λ࢖ͬͯ ෳ਺ΞΧ΢ϯτͷಈత࡞੒ΛͰ͖ͳ͍Α͏ʹ͢Δ

Slide 6

Slide 6 text

.FFUVQ'VLVPLB7PM $"15$)"ͱ͸ $"15$)"͸νϟϨϯδϨεϙϯεܕ ςετͷҰछͰɺԠ౴ऀ͕ίϯϐϡʔλ Ͱͳ͍͜ͱΛ֬ೝ͢ΔͨΊʹ࢖ΘΕΔɻ ҎԼɺ༗໊ͳSF$"15$)"ͷྫɻ $IBMMFOHF $IBMMFOHF 🧑💻

Slide 7

Slide 7 text

.FFUVQ'VLVPLB7PM ֤$"15$)"ͷൺֱ ͪ͜Β͸ࣾ಺ධՁͰ༻͍ͨ΋ͷͰ͕͢ɺߴ͍௿͍ͷධՁ͕ᐆດͳͷͰׂѪ͠·͢ɻ ✔︎ ✔︎

Slide 8

Slide 8 text

.FFUVQ'VLVPLB7PM 5VSOTUJMFͷ࢓૊Έ ಺෦ͷ࢓૊Έʹ͍ͭͯެ։͞Ε͍ͯΔ৘ใͱͯ͠͸ҎԼɻ ⚫︎ ϢʔβʔνϟϨϯδΛ͠ͳ͍ ⚫︎ ૢ࡞ෆཁͳҰ࿈ͷখ͞ͳ+BWB4DSJQUͰ1SPPGPG8PSL΍1SPPGPG4QBDFͷνϟϨϯδ࣮ߦ ⚫︎ ػցֶशϞσϧΛ࢖ͬͯϢʔβͷڞ௨఺͔Βܭࢉͷ೉қ౓Λௐ੔͢Δ ⚫︎ ϓϥΠϕʔτΞΫηετʔΫϯʢݕূ͸σόΠε͕ݞ୅ΘΓʣΛར༻͠ɺ$PPLJFΛ୳ͨ͠Γɺ $PPLJFΛ࢖ͬͯ৘ใऩूͨ͠Γ͠ͳ͍

Slide 9

Slide 9 text

No content

Slide 10

Slide 10 text

'SPOUFOE #BDLFOE $MPVE fl BSF

Slide 11

Slide 11 text

ΜͰɺͲ͏ͩͬͨͷ͔ʁ🧐

Slide 12

Slide 12 text

.FFUVQ'VLVPLB7PM ಋೖޮՌ ʹϦϦʔεͦ͠ͷޙ΋ൃੜ͍ͯ͠Δ͕͕ଓ͍͍ͯΔɻ

Slide 13

Slide 13 text

.FFUVQ'VLVPLB7PM ⚫︎ ϢʔβʔମݧΛԼ͛ͳ͍$"15$)"ΛಋೖͰ͖ͨ ⚫︎ ಋೖޙʹಛผͳӡ༻΋ͳ͍ɺτϥϒϧͳ͠ ⚫︎ ࠓͷͱ͜Ζແྉ ⚫︎ ෆਖ਼ར༻਺ͷݮগͱͷҼՌؔ܎͕ෆ໌ͳͷͰࠓ͸༷ࢠݟঢ়ଶ ·ͱΊ $MPVE fl BSF5VSOTUJMFΊͪΌྑ͍Ͱ͢ɻ