this post was submitted on 24 Aug 2024
392 points (97.1% liked)

Asklemmy

48243 readers
334 users here now

A loosely moderated place to ask open-ended questions

Search asklemmy πŸ”

If your post meets the following criteria, it's welcome here!

  1. Open-ended question
  2. Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
  3. Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
  4. Not ad nauseam inducing: please make sure it is a question that would be new to most members
  5. An actual topic of discussion

Looking for support?

Looking for a community?

~Icon~ ~by~ ~@Double_[email protected]~

founded 6 years ago
MODERATORS
 

The simplicity of it is logic defying. It used to be that you had to find crosswalks or move puzzle pieces or type blurred letters and numbers, but NOW all the sudden I can just click a box and HEY!, I'm human?

That's hardly the Turing Test I'd expected.

top 50 comments
sorted by: hot top controversial new old
[–] [email protected] 25 points 9 months ago (2 children)

Cloudflare knows almost everything done from your IP address because they're used by the majority of websites. And some websites are using a cloudflare signed TLS certificate so if cloudflare wants, can see the content of the communication instead of an encrypted package

So they know if you have a human behavior (visiting many different websites at human speed and having rests during sleeping time) or if you have a bot behavior (sending millions of requests to the same endpoint at superhuman speeds)

[–] [email protected] 4 points 9 months ago (1 children)

I'd argue that the certificate authority does not have the ability to decrypt your communication because of the nature of private and public key mechanism during the whole TLS certificate procedure. You do not send your web servers private key to cloudflare when requesting a certificate.

That would actually be pretty wild...

Other then that you're probably right.

[–] [email protected] 2 points 9 months ago (1 children)

There's a default setting that allows unencrypted communication between the server and cloudflare. So they receive unencrypted data, sign with their certificate. Or send with self signed certificate, they decrypt and reencrypt. Or for some reason can download and import on the server their own internal use certificate.

[–] [email protected] 2 points 9 months ago

You're right, forgot that you can just not encrypt on your servers end and use cloudflare to do that for you, especially when used as CDN

[–] [email protected] 4 points 9 months ago
[–] [email protected] 44 points 9 months ago (1 children)

These type of β€œcaptchas” look at your browsing behavior. It is sort of a β€œtrade secret” of what it looks for, but it might be screen resolution, mouse behavior, cookies, OS, time to click, etc. Anything a website has access to that would look different from a bot.

[–] [email protected] 7 points 9 months ago (2 children)

Yes, and it gives you (or the bot), a score.

If you don't meet the score, is highly likely that you are a bot.

You can have a superficial an yet interesting read on the topic on the Google re-captch dev docs.

[–] [email protected] 1 points 9 months ago

Is it bad that I've failed the score multiple times?

[–] [email protected] 3 points 9 months ago

It is likely you are a bot, and then you get one it these regular captchas and the that will increase your score if you succeed.*

[–] [email protected] 15 points 9 months ago (2 children)

I'm pretty sure I'm a robot since they often force me to select the motorcycle from a picture that is just one motor cycle. If I select every part of it I fail every time. Same thing with street lights and fire plugs.

[–] [email protected] 1 points 9 months ago

"this is not CAPTCHA! It's just clicking, with style"

[–] [email protected] 4 points 9 months ago* (last edited 9 months ago) (1 children)

I often wonder if that's a fail or just some tech sitting in a room saying "Now do THIS!" and pressing refresh over and over.

[–] [email protected] 1 points 9 months ago
[–] [email protected] 3 points 9 months ago (1 children)

This all humans will be good for in the future, until they atrophy and become a mere appendage of machinegod.

[–] [email protected] 1 points 9 months ago (1 children)

I saw the movie. Unhappy ending.

[–] [email protected] 2 points 9 months ago

Which movie is that ? While waiting your reply I asked chatgpt

Please write movie script where humans continue to evolve in an environment where their reproduction and evolution is mediated entirely by the solvibg of captchas. They have become one with machinegod, just a vestigial appendage so scratch an itch that the machine cannot satisfy any other way.

https://chatgpt.com/share/fae8c7fc-df78-462e-9922-9d976a182bd8

[–] [email protected] 15 points 9 months ago (1 children)

Beats me. I have a script that clicks all those boxes for me.

[–] [email protected] 2 points 9 months ago
[–] [email protected] 29 points 9 months ago (1 children)

it also sees your mouse movements on your way to that box.

[–] [email protected] 3 points 9 months ago (1 children)
[–] [email protected] 27 points 9 months ago (1 children)

Then it smells you from the microphone on your phone

[–] [email protected] 3 points 9 months ago

Damn, I thought I was being stealthy by farting silently like an assassin...

load more comments
view more: next β€Ί