this post was submitted on 30 May 2024
1100 points (98.8% liked)

Funny

6561 readers
105 users here now

General rules:

Exceptions may be made at the discretion of the mods.

founded 1 year ago
MODERATORS
 
top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 6 points 3 months ago

I seem to recall OpenAI saying they guarded against captcha solving...

[–] [email protected] 11 points 3 months ago

It got it wrong. That's a lowercase "p."

[–] [email protected] 13 points 3 months ago (1 children)

There's a lot of misunderstanding in this thread about how captchas work.

What modern captchas examine isn't actually your ability to solve the puzzle... It's how you solve it. Things like mouse movements and how you type are big factors. So a bot would process for a moment, and then basically copy and paste in the answer, whereas as a human is going to type at a normal pace, often with pauses as they double check the details. Same goes for the click the tiles challenges. A bot will work through systematically, a human will bounce around, and their timings will be very different.

[–] [email protected] 12 points 3 months ago

Captchas have largely been solvable by machines at a rate higher than humans for a long, long time.

It is very easy to train a model to behave like humans do by simply having a sample of human inputs.

Here is an article from august 2023 covering how much better machines are than humans at accomplishing captchas of many flavors. Sauce

[–] [email protected] 14 points 3 months ago (2 children)

The "puzzle" isn't the test, the test uses your browser history, mouse activity, etc to identify you as human (or not). The puzzle is used to generate training data for ML models.

[–] [email protected] 4 points 3 months ago

Lol, well maybe not your browser history. That would be bad.

[–] [email protected] 4 points 3 months ago (1 children)

Sure with a modern captcha framework that would be true. In this case, this looks like something that was custom rolled for their site so its pretty unlikely.

[–] [email protected] 2 points 3 months ago

Oh, true, I didn't look too close.

[–] [email protected] 4 points 3 months ago

I'm just saying, but captcha had a purpose. It still kind of does. Whether solved by a person or by an AI.

I'm pretty sure that for a good while there it was using captcha to help its text recognition more accurately determine what words were from scans of books that were imported en masse to Google books as images of pages. We're talking about books published before computers were used to write them. The text recognition algorithm had an idea of what the letters should be, but didn't have a high enough confidence in the result, so it was sent through captcha to get a consensus from humans.

The humans answering the captcha would just verify whether it was one of a small list of possible matches, and in doing so, train the machine vision algorithm to better detect the letter in the future.

That's what I heard at least. IDK. I just live here (on the internet).

[–] [email protected] 36 points 3 months ago (1 children)

Captchas are used by google as weapon now, if you dare to use a VPN and adblocker.

[–] [email protected] 5 points 3 months ago (1 children)

?

Lots of websites force capchas when on a VPN they don't even have to be provided by Google. Rarbg for example forced a terrible captcha which I usually solved by using OCR with the OCR tool in powertoys. They letters were barely edited or fucked up at all.

[–] [email protected] 21 points 3 months ago (4 children)

Google now keeps you often in endless loop until you disable your VPN. This was never this bad.

[–] [email protected] 4 points 3 months ago

It's extremely bad if you come from a country like mine, Iran, where we have to use VPNs religiously in order to circumvent censorship and it has become painful to Google anything especially when you're not logged into your Google account.

[–] [email protected] 4 points 3 months ago

They appear to have degrees of blacklist. Usually when this happens if I get a new ip it resolved the issue.

Note that VPN users share IPs with other users and many of the people using the same IP may very well actually be doing malicious things. Not everyone uses VPNs for just "privacy".

[–] [email protected] 2 points 3 months ago* (last edited 3 months ago) (1 children)

If you use the audio captcha it's done in just one go. That's been my experience at least after having been stuck in one too many endless loops with pictures.

[–] [email protected] 1 points 3 months ago (1 children)

Yeah I've completely switched to audio.

[–] [email protected] 2 points 3 months ago

I just switched to duckduckgo, that seems to have fixed it

[–] [email protected] 0 points 3 months ago

Ah alright. I never use Google search.

[–] [email protected] 38 points 3 months ago (2 children)

There's a program called Xevil that can solve even HCaptcha reliably, and it can solve these first gen captions by the thousands per second. It's been solving Google's v3 recaptchas for a long time already too.

People who write automation tools (unfortunately, usually seo spammers and web scrapers) have been using these apps for a long time.

Captchas haven't been effective at protecting important websites for years, they just keep the script kiddies away who can't afford the tools.

[–] [email protected] 2 points 3 months ago

Decades not just years

[–] [email protected] 14 points 3 months ago* (last edited 3 months ago)

Captchas haven't been effective at protecting important websites for years, they just keep the script kiddies away who can't afford the tools.

To be fair, keeping the script kiddies away has some good value. Whether that value outweighs all the wasted time and impact to sight/hearing impaired people is another discussion.

load more comments
view more: next ›