Stop Using reCAPTCHA – It's Not a Real Captcha(na0341.bearblog.dev)
na0341.bearblog.dev
Stop Using reCAPTCHA – It's Not a Real Captcha
https://na0341.bearblog.dev/info/stop-using-recaptcha/
16 comments
I think Google stopped using such data long time ago. They have been showing hydrants, buses, crosswalks for ages. It's a solved problem to detect them.
Pretty sure it's a small set of images of each type as well. It's probably easier for a dumb heuristics-based bot to beat it than it is for most people.
It's been proven (https://ics.uci.edu/2023/08/10/new-scientist-bots-are-better...). At this point, we should only respond to queries from users who have failed the captcha.
Right. It says select tiles with cars, bikes or buses and I fail because I recognized one far away. Traffic lights and stairs, if a tile has just a tiny bit of the thing, does that count? I don't think they train on this, they've got their answers and they just want people to feel dumb, I guess.
Got second hand anxiety the other day seeing someone logging into their fb account (I guess with a chrome private window?) and they had to solve like 3 round of reCAPTCHAs to finally be able to... get into a fb login page over again, do another 3 or so reCAPTCHAs and finally get into their fb. I don't think they were doing them wrong
Coincidentally today, I have formed a weird theory about reCaptcha. I created a fake facebook account recently. And every time I try to login, I'm getting verify you are human screen that is Google's recaptcha. And I was solving recaptcha for 8-9 times on some occasions. I think the number of times I have to submit in one session went up after couple of days of Facebook usage. My theory is that, Facebook tags many accounts to be fake internally and instead of banning, they use these accounts for data farming including collecting data through Google's recaptcha (but incentive is not aligned as it would help it's competitor unless there is some payback model). This is anecdotal and 99% I'm wrong. But if I'm on the other side with the incentive to use data, it is definitely one I would try to capitalize on.
I don't know about hCaptcha, I tried it out when testing stuff for a websites checkout flow (had card testing spam issues), and they are about the most difficult to solve captchas I've ever done.
I guess there's a low friction mode only available on the $139/mo plan.
I guess there's a low friction mode only available on the $139/mo plan.
> they are about the most difficult to solve captchas I've ever done
Sounds like something a robot would say. Joking aside, I'd rather do a captcha that involves slightly more cognitive effort, rather than get trapped in a reCaptcha loop because I didn't select every last segment of a bicycle.
Sounds like something a robot would say. Joking aside, I'd rather do a captcha that involves slightly more cognitive effort, rather than get trapped in a reCaptcha loop because I didn't select every last segment of a bicycle.
True, I've been using Turnstile for now and it's nice because it generally doesn't even need the interactive challenge.
>In Reality, Google's ReCaptcha is a Free LLM¹ Training Solution FOR Google to get Data from Millions of Users Constantly.
Maybe over a decade ago. As it stands now, it's just a surveillance apparatus.
Maybe over a decade ago. As it stands now, it's just a surveillance apparatus.
No, please do keep using them if you use any requiring puzzles (like hCaptcha) at all. It’s the easiest captcha to solve automatically, with many extensions available.
It reads like it's written by a person having a stroke in real time. Really weird formatting, punctuation, structure all over the place. Asinine claims.
I hate the messenger despite loosely agreeing with the message, I guess.
I hate the messenger despite loosely agreeing with the message, I guess.
The author is German, so I'll cut them some slack on their English prose. And I think I prefer seeing their actual voice rather than pressing it through an LLM filter.
But I agree the claims are kinda incoherent, and that's unforgivable.
But I agree the claims are kinda incoherent, and that's unforgivable.
You could probably make a decent bot resistant captcha by just asking the user to type a slur