Hacker News Reader

Comment by namelost | Hacker News Reader

> It does things like track where the mouse is moving on the page, whether someone is copying and pasting information into the fields, whether they’re making typos, how fast they’re typing, and many other factors. By analyzing customer behavioral patterns, Bolt says it has a better shot at stopping fraud than just asking for the billing address.

Smells like bullshit, how is any of this meant to distinguish a mildly sophisticated fraudster from browser autofill?

View on HN

CEO of Bolt here. Browser autofill is a very detectable pattern, amongst hundreds of other patterns that all become elements of a broader fraud model. This broader fraud model doesn't only incorporate behavioral features, but literally hundreds of other features around order details, personal details, shipping info.

May smell like BS (a lot of companies in this space are full of BS). But, we spent 3 years building a world-class data ingestion & ML engine which we'll describe more in future blog posts. And our case studies (https://bolt.com/case-studies) with more to come demonstrate the type of results we're able to achieve.

How do you handle browsers with javascript turned off? This invasion of privacy is exactly why it's turned off.

Thats a super edge case tbh.

Honest question - do many modern checkouts work with JS turned off? Purely assuming here, but I would have thought that most checkouts are baked into web apps anyway these days, with the exception of some small vendors?

Why would they try to cater to the .001% that turn off javascript?

Because their tracking of mouse movements and timings will get them on the list of any self respecting tracking blocker. Then the basic html version will be necessary for a much bigger audience.

Smells like machine learning to me...

Yes, absolutely.

Also, there are companies that already do this, such as Iovation: https://www.iovation.com/

Reply on news.ycombinator.com