• Voroxpete@sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    There’s a lot of misunderstanding in this thread about how captchas work.

    What modern captchas examine isn’t actually your ability to solve the puzzle… It’s how you solve it. Things like mouse movements and how you type are big factors. So a bot would process for a moment, and then basically copy and paste in the answer, whereas as a human is going to type at a normal pace, often with pauses as they double check the details. Same goes for the click the tiles challenges. A bot will work through systematically, a human will bounce around, and their timings will be very different.

    • Lets_Eat_Grandma@lemm.ee
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      Captchas have largely been solvable by machines at a rate higher than humans for a long, long time.

      It is very easy to train a model to behave like humans do by simply having a sample of human inputs.

      Here is an article from august 2023 covering how much better machines are than humans at accomplishing captchas of many flavors. Sauce

  • ZwoofBlaf@sh.itjust.works
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    Yeah captchas are done. Soon they will be easier to figure out for AI than for humans.

    This is why Sam Altman is doing his worldcoin thingy with the iris scanners. His idea: One iris (well, two…) is one real human. I’m sure this will be abused though and I absolutely vehemently don’t trust him with my biometrics so no way I will join that.

    I think what we should do is just get used to the fact that the internet now consists of humans and AIs. Learn to take things with a grain of salt.

  • Zeppo@sh.itjust.works
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    This is why a lot of sites have moved to something more complex than text, like the weird “rotate this to match” stuff that LinkedIn uses.

  • tiredofsametab@kbin.run
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    I wonder how that works on a Japanese captcha. I know people have had issues shortly after moving but not knowing the language at all yet trying to set some things up.

  • MindTraveller@lemmy.ca
    link
    fedilink
    arrow-up
    0
    ·
    4 months ago

    Some disabled people have trouble with captchas, so these days you can download an extension where a robot solves the captcha for you.

  • nucleative@lemmy.world
    link
    fedilink
    English
    arrow-up
    0
    ·
    4 months ago

    There’s a program called Xevil that can solve even HCaptcha reliably, and it can solve these first gen captions by the thousands per second. It’s been solving Google’s v3 recaptchas for a long time already too.

    People who write automation tools (unfortunately, usually seo spammers and web scrapers) have been using these apps for a long time.

    Captchas haven’t been effective at protecting important websites for years, they just keep the script kiddies away who can’t afford the tools.

    • edgesmash@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      edit-2
      4 months ago

      Captchas haven’t been effective at protecting important websites for years, they just keep the script kiddies away who can’t afford the tools.

      To be fair, keeping the script kiddies away has some good value. Whether that value outweighs all the wasted time and impact to sight/hearing impaired people is another discussion.

    • lud@lemm.ee
      link
      fedilink
      English
      arrow-up
      0
      ·
      4 months ago

      ?

      Lots of websites force capchas when on a VPN they don’t even have to be provided by Google. Rarbg for example forced a terrible captcha which I usually solved by using OCR with the OCR tool in powertoys. They letters were barely edited or fucked up at all.

        • no_name_dev_from_hell@programming.dev
          link
          fedilink
          arrow-up
          0
          ·
          4 months ago

          It’s extremely bad if you come from a country like mine, Iran, where we have to use VPNs religiously in order to circumvent censorship and it has become painful to Google anything especially when you’re not logged into your Google account.

        • johannesvanderwhales@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          4 months ago

          They appear to have degrees of blacklist. Usually when this happens if I get a new ip it resolved the issue.

          Note that VPN users share IPs with other users and many of the people using the same IP may very well actually be doing malicious things. Not everyone uses VPNs for just “privacy”.

        • Quack@lemm.ee
          link
          fedilink
          arrow-up
          0
          ·
          4 months ago

          If you use the audio captcha it’s done it just one go. That’s been my experience at least after having been stuck in one too many endless loops with pictures.

    • problematicPanther@lemmy.world
      link
      fedilink
      arrow-up
      0
      ·
      4 months ago

      it’s the recaptchas that they should have trouble with. since it’s not just about finding the right picture, it’s also about the time between clicks, the way the mouse moves, etc.

      • MonkderDritte@feddit.de
        link
        fedilink
        arrow-up
        0
        ·
        edit-2
        4 months ago

        reCaptcha never works for me. Probably something with thirdpartyisolation.enabled. Can’t snoop all the history and stuff.

        • problematicPanther@lemmy.world
          link
          fedilink
          arrow-up
          0
          ·
          4 months ago

          but us humans aren’t truly random, we probably behave in similar ways to each other, but also have individual ‘fingerprints’. like the time it takes between keystrokes, or the length of time we spend holding the button on the mouse down while clicking. we could probably come up with a way of identifying someone based only on that kind of data. what was i talking about?

          • snooggums@midwest.social
            link
            fedilink
            English
            arrow-up
            0
            ·
            4 months ago

            Not without enough context to know what time of day, if the person is ill, or a ton of other things that would make someone respond differently at different points in time.

            The anti bot stuff is going to be looking for too much consistency, which is hard look for on its own before trying to look for some kind of ‘fingerprint’

      • lad@programming.dev
        link
        fedilink
        English
        arrow-up
        0
        ·
        4 months ago

        Yeah, and a couple of people I know who were consistently reported to be robots because they’ve been shown captcha too much and as a result solved it too well. Which in turn led to more captcha and improved solving speed. Well, you see the problem, I guess