From Dev.to
Rate Limiting vs CAPTCHA: How to Detect LLM Driven Bot Traffic on a Login Page
A login page does not reveal whether an attacker used an LLM. A browser session that follows redirects, handles form changes, and submits plausible credentials could belong to a person, a conventional...