Gregory's ServerYou see the point of this a lot in API design, where a company is like "okay we made an API but we limited it a bunch because we are scared about cheaters/bots/scrapers/whatever", while the things they limit are things a user clicking links can do in 2 seconds.
|
14 comments
 And I think this is an under-discussed part of automation because it's associated with spammers and such, but they're only one possible user of this. By making it better known it can get used for more legitimate uses The basic philosophy of adversarial automation is that the software/website is the enemy. I'm talking less like "you're in a constant arms race with the people maintaining the official API as they try to stop your spamming" and more like "Your lab depends on this program from 1996 and there's no updates and no way to automate it" and the answer is really that of course you can automate it. Stick it in a VM, OCR the screens, inject your own DLLs, puppet the keyboard and mouse! my point is that every program, every website, DOES expose an API, you just need to know how to best use that API. That API being "the access they provide for humans" For websites this is forms and links. For desktop applications this is buttons and windows and keyboards. And I think (in part because it's affiliated with Bad Actors like spammers), a lot of programmers don't consider all their options in these areas. And that's really a shame. Computers should be used to automate things. We spend way too much time dealing with shitty sites and shitty programs because we have no choice and think we can't automate them away. well, that's wrong. We can absolutely automate them, it just takes a little more work and some different strategies I think of this as a short term vs long term thinking sort of problem. Like, a lot of programmers are stuck in the "should" part of thinking about programs and sites. Yes, the program SHOULD be open source, so you can just fix the UI. Yes, the website SHOULD have an extensive API so you can easily automate it. and if you want to automate it today, your only options are to be adversarial about it. It's the enemy, you pretend to be a human user and automate the interactions with the app/site. It's the only way. |
like, if your API doesn't provide me a follow_user() call, but the user can follow anyone by clicking one link?
Your lack of a follow_user() call is not going to stop me. I'm just going to click the link, automatically.
Having an API 1.0 doesn't mean API 0 goes away.