I was asked, can you tell if EWB is talking to a human or a bot.

There are a couple of ways to detect humans.

Chrome/Edge you can use an API which detects these browsers and the operating system name and verison.  It's pretty foolproof but doesn't work with safari, firefox, etc.

Otherwise, you can look at the User Agent string, but it can be faked.  Look at window.navigator.useragent but don't trust it.

Captchas can really determine if it's a bot.  You can use my Nice Captcha to do that, but you need a Google account to do it.  It uses mousemovements and other reliable predictors.  People move slowly to zero in on the click button, whereas computers are much faster, and other heuristics.

You can also do Google logins, but that only works if it's a google account.  See my nice example, under authenticate.  It will tell you the real identity of the calling person if they have a GMail account, even passing you their name and picture.

Failing that, you can provide a simple turing test, ask a random question get a valid answer and you know it's either a person or a smart bot.

Erick
EWB Programming Books and Nice Component Library
See my EWB BLOG posts, at:
http://www.erickengelke.com