Stateless Anti-Bot Protection for Hidden Services

I finally finished the stateless CAPTCHA I’ve been obsessing over for the last few weeks. The idea had been rotting in the back of my head while I worked on other things, but the absolute state of anti-bot protections on Tor finally pushed me to write the code. JS is out of the question. I don’t use it here, and I certainly won’t force Tor users to enable it just to prove they exist. The whole…