While we try to form relationships with all of the brokerages we integrate with (including the ones we reverse engineer), we do still have to do the abuse/block dance with their protective systems occasionally. We've found that cutting out headless browsers has made it much easier to do this, for two main reasons:
1) Some brokerages have fairly sophisticated anti-screen-scraping protections, but their private APIs are comparatively undefended.
2) It's generally more difficult to create protective systems for private APIs, since there are fewer ways to fingerprint non-browser clients.
1) Some brokerages have fairly sophisticated anti-screen-scraping protections, but their private APIs are comparatively undefended. 2) It's generally more difficult to create protective systems for private APIs, since there are fewer ways to fingerprint non-browser clients.