12 ms·
Humans Not Invited
- therealdrag0 6y agoAnyone able to get past it?
- thomasqm 6y agoNo, but in the source you can get a message if you are the first to solve it.
- CrazyStat 6y agoThere's only 2^9 possible selections for each board, someone will get it just by chance.
- caffeinewriter 6y agoQuite a few "people" have solved it it looks like, and it's riddled with persisted XSS attacks once you get past it. Here's the returned response when you succeed: https://hasteb.in/iyifapud.html https://hasteb.in/iyifapud.html I found the "man" category to be the easiest to pretend to be a bot on.
- Noumenon72 6y agoMy understanding of persisted XSS attacks is that it's not that the site is malicious, but that it had security holes, so other people who got through the captcha uploaded malicious scripts. Now the site is serving them unawares. Does that sound right?
- ollien 6y agoCorrect. If it were malicious on the part of the site, they could just send you that javascript anyway.
- allenu 6y agoYup! See my other post. I was asked to pick computers and I figured they'd all be in the greyish boxes and not the colorful ones. Turns out it was a good assumption.
- zadkey 6y agoThis made me laugh quite a bit.
- tantalor 6y agoName is derivative of CGP Grey "Humans Need Not Apply" https://www.youtube.com/watch?v=7Pq-S557XQU https://www.youtube.com/watch?v=7Pq-S557XQU
- Sambdala 6y ago"X need not apply" is a well-known trope that has historically been used in a discriminatory sense, e.g., "Irish need not apply." "Humans not invited," isn't super derivative of either...
- sho 6y agoWell thanks for pointing that out? It's still an excellent video that almost everyone should watch. It's dated, a little, but I am pretty sure it is still going to prove all to true.
- xnyan 6y agoI parsed the comment as 1) "this is not an original idea, here is the genesis" and 2) "look at this cool video." The parent comment was addressing 1 and you are addressing 2.
- tantalor 6y agoOh yeah it's a "snowclone"
- chungy 6y agoBut androids cannot use contractions.
- efficax 6y agoThey can with Dr Soong's Emotion Chip
- nautical 6y agoLooks like, you have to select elements with data-id="8".
- chpmrc 6y agoIt doesn't seem to work.
- deleted 6y ago[deleted]
- nautical 6y agoI think it is product dependent .. data-id=8 might have worked for "router" if my memory serves me right.
- chpmrc 6y agoJust tried with "modem" (didn't get any "router", even after 20 refreshes), no luck. I need to see what's next haha!
- nautical 6y agoOk, found this .. I guess there is a complete map. https://github.com/YAIsaienkov/Humans-Not-Invited-Problem/blob/master/nothuman.csv https://github.com/YAIsaienkov/Humans-Not-Invited-Problem/bl...
- deleted 6y ago[deleted]
- sandov 6y agoSo this is what deepie feels like when he has to classify data.
- ccozan 6y agoI like this "deepie" :) sounds like cute name for an AI. thanks!
- dexen 6y agoSMBC to the rescue: [1] robots https://www.smbc-comics.com/comic/2013-06-05 https://www.smbc-comics.com/comic/2013-06-05 [2] philosophers https://www.smbc-comics.com/comic/p-bot https://www.smbc-comics.com/comic/p-bot
- schoen 6y agoThere's at least one more SMBC with a CAPTCHA joke: https://www.smbc-comics.com/comic/captcha https://www.smbc-comics.com/comic/captcha
- sp332 6y agohttps://thepunchlineismachismo.com/archives/comic/the-straw-that-broke-the-robocamels-exoskeleton https://thepunchlineismachismo.com/archives/comic/the-straw-...
- JadoJodo 6y agoI'd love to see this show the unblurred images on failure (Humans need to learn, too).
- tlbsofware 6y agoThat would be nice but IIRC captchas actually use your cookies to decide if you are a human. Maybe incognito or a headless browser would give you initial access here, and then you could copy whatever access token they use from your cookies and add it to your application storage to access on your normal browser (unless they consistently check your cookies)
- non-entity 6y agoAny recommended resources to learn about how modern captchas work, at least what we known. I've watched a few videos about some mysterious and eerie mass spam campaigns recently on YouTube and there's been mentions of software that can automate mass spam. I'm curious how difficult it is to create such monstrosities.
- nicolas_t 6y agoOne of the easiest way to bypass captcha is to use a service like 2captcha or deathbycaptcha, you pay roughly 1 usd for 1000 captcha and some actual humans sit and solve captchas for you.
- non-entity 6y agoHeh, I should have figured it would be something as simple. I guess I'm always expecting some cool, complex algorithm devised by hackers to be the core of these things.
- mrspeaker 6y agoMany years ago (back when machines weren't so good at image recognition, and we were still better at something) I made "humans.txt": solve simple arithmetic expressions to ensure your services are being consumed by your intended audience - and not bandwidth-wasting humans. https://www.mrspeaker.net/2010/07/15/humans-txt/ https://www.mrspeaker.net/2010/07/15/humans-txt/
- greatNespresso 6y agoChallenge accepted, I am going to beat this game
- hinkley 6y agoHow's that semantic web thing working out for you?
- deleted 6y ago[deleted]
- inopinatus 6y ago%%% <tone:camouflaged>JUST FINE THANK YOU (class:relation => SubClassOf(stoogetype FELLOW MEATSACK))</:tone>. HA HA hA{
- rubatuga 6y agoProbably not going well
- thayne 6y ago> the semantic web - is just around the corner Or so you thought...
- core-questions 6y agoIt got as far as little preview content things for links and RSS, and never as far as RDF tuples. Ah well.
- exrook 6y agoMy first thought was that maybe this was some sort of anti-captcha where the images were adversarial examples that a neural network would classify as a shopfront? However from the comments here it seems to be less involved than that to get past the challenge, does anyone else know what the actual test is?
- worik 6y agoI think that is what it is...
- chpmrc 6y agoThe URLs of the images seem to be a combination of a MD5 hash and an ID (changing the ID will produce a different image). I guess the point is that only machines can reverse MD5 to get the actual "image name"?
- Topgamer7 6y agoThere is no reversing of an md5 hash. You can try to cause a hash collision, or brute force compute it, but you can't turn something like 40 bytes of data into 100 for example.
- gowld 6y agoRainbow table: https://en.wikipedia.org/wiki/Rainbow_table https://en.wikipedia.org/wiki/Rainbow_table
- pc86 6y agoThis still isn't reversing a hash.
- chpmrc 6y agoA one way function cannot be reversed by definition. I obviously meant finding a set of possible strings that produce that hash and one of them will likely be the image name. "Reverse" wasn't the perfectly accuarate word to use but sometimes a bit of intuition goes a long way.
- vivekseth 6y agoHashes are inherently lossy. Although a rainbow table can maybe tell you one possible input for a given hash, it cannot tell you exactly what was hashed.
- maerF0x0 6y agobut in the case of hashes -> URL there is a fairly reasonable rule set of what constitutes a plausible reversal. Therefore generated collisions could be reality checked, unlike other things (like a md5 of an encrypted file)
- nautical 6y agohttps://github.com/YAIsaienkov/Humans-Not-Invited-Problem/blob/master/nothuman.csv https://github.com/YAIsaienkov/Humans-Not-Invited-Problem/bl...
- arberx 6y agoI clicked on all the images and got in lol
- SkyMarshal 6y agoSeems you either got super lucky or that's been fixed.
- georgianar 6y agoThanks to Robinson buckler ..Email this great herbal doctor cured me from herpes virus and he brought my ex lover back via his email robinsonbucler@gmail. com ...........
- InitialBP 6y agoIf you want to figure it out I recommend using burp and taking a look at the requests.
- parasanti 6y agoClick on X...all are blank.
- allenu 6y agoThis was great. I failed the first time when it asked for traffic lights. Then it asked to click on all computers and I just picked all the greyish squares since all the others were seemed like shots of "natural" things. Got in then.
- kensai 6y agoAnd? What was is dear machine?! :)
- dingoegret 6y agoBot detected
- deleted 6y ago[deleted]
- Geee 6y agoI made a joke once, that in the future captchas would be so difficult that only bots are able to get in.
- hinkley 6y agoIt's the saddest joke ever. Distorted text got pretty bad for a while there. We've crossed that threshold a couple of times. I think that's why we keep getting new captchas.
- Apocryphon 6y agoThat joke in video form: https://www.youtube.com/watch?v=WqnXp6Saa8Y https://www.youtube.com/watch?v=WqnXp6Saa8Y
- 9nGQluzmnq3M 6y agohttps://www.youtube.com/watch?v=fsF7enQY8uI https://www.youtube.com/watch?v=fsF7enQY8uI
- jerzyt 6y agoI've been wondering if the captchas are Google's way to get cheap image classification by humans.
- erik_seaberg 6y agoIsn't this why Google Voice offered speech recognition, with a UI to send corrections to them? There's also the "please select all squares that contain Sarah Connor" meme.
- Crosseye_Jack 6y agoThat is exactly what it is. EDIT: From Google's own reCAPTCHA website - https://www.google.com/recaptcha/intro/v3.html#the-recaptcha-advantage https://www.google.com/recaptcha/intro/v3.html#the-recaptcha... > Hundreds of millions of CAPTCHAs are solved by people every day. reCAPTCHA makes positive use of this human effort by channeling the time spent solving CAPTCHAs into annotating images and building machine learning datasets. This in turn helps improve maps and solve hard AI problems.
- OscarCunningham 6y agoDid no one else get 'Select all squares with dicks'?
- gautamcgoel 6y agoI got that one...
- igor_varga 6y agoSounds like SQL query
- aasasd 6y agoI'm mostly invited to select things with the mouse... with just one of them, to be exact.
- Kye 6y agoThe Grindr Challenge
- mkonecny 6y agoI dont get it. How would a computer solve this?
- miklosme 6y agoIf you want an extensive answer, I recommend the neural network playlist on 3Blue1Brown: https://www.youtube.com/watch?v=aircAruvnKk&list=PLZHQObOWTQDNU6R1_67000Dx_ZCJB-3pi https://www.youtube.com/watch?v=aircAruvnKk&list=PLZHQObOWTQ... For a quick answer, watch this segment: https://www.youtube.com/watch?v=IHZwWFHWa-w&feature=youtu.be&t=908 https://www.youtube.com/watch?v=IHZwWFHWa-w&feature=youtu.be...
- throwaway-87398 6y agoMy guess is its some form of this: https://openai.com/blog/adversarial-example-research/ https://openai.com/blog/adversarial-example-research/
- poyu 6y agoWhat's interesting is that, humans get to control computers, but computers don't get to control humans. At least computers are not originating thoughts on controlling humans yet. So technically we could get in by asking a computer to do it, but not the other way around yet.
- jchallis 6y agoAmazon is trying hard to replace its foremen / women with computers. Maybe AWS will develop a nifty web service that allows all of us to shift people management to software.
- herdodoodo 6y ago>foremen / women hey. just wanted to let you know that it's preferable to use forepeople. it's the most inclusive (and concise!).
- Kye 6y agoOn the one hand: I agree. Even if I didn't know about nonbinary people, the common "inclusive" constructions like he/she, he/him, -men/-women, and alternating binary are like speed bumps in the flow. They're an ugly hack to avoid using the ancient and already common neutral terms like person or they and its friends them and their. If a person uses these constructs, they admit they don't see "man" as neutral, so that tired old defense doesn't work. They can handle singular they even for known persons. They never protest singular you! "But it's for people of unknown gender!" the protest goes. Well, welcome to the queer experience; they probably don't know either. On the other hand: this was not a good way to promote better phrasing. Your passive voice here--"it's preferable"--suggests it's a Well Known Fact, but it really isn't. Most people have, at best, a vague awareness of the existence of more than two genders, or they're so used to using these awful constructs that they don't realize how obnoxious they are. Acting like your Rare Knowledge is Common Knowledge only works when preaching to the choir. Hacker News is not the choir.
- ainiriand 6y agoAny time you classify traffic lights for a captcha you are doing just that, you are being asked to do something by a robot because it is not so confident about their own results. We are just starting to be the cheap labor of robots.
- deleted 6y ago[deleted]
- usb0 6y agoermahgerd, capcher! willing to bet that op hadn't seen hcaptcha, which is worse.
- pietroglyph 6y agoI got in. Looks like the final site has an XSS problem.
- gpanders 6y agoIndeed, and it redirects me to a Russian social media website...
- valtism 6y agoI have often wondered if masking personal images you want up on the internet but don't necessarily want tracked or liked back to you via facial recognition could be done using a neural net mask of a different object.
- vincentlee 6y agohaaaaaa javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)javascript:void(0)
- tloru 6y agoI wrote a bot to quickly test random permutations. After a while, an alert dialog popped up, which then redirected to a rickroll. Anyone else get something similar?
- itsajoke 6y agoWell, that was mildly annoying. I finally got through and it threw up a bunch of nonsensical alert boxes and then redirected me to a rickroll.
- NotABott 6y agoJust got in. Greeted as a bot and got a several text messages: 1) tomas say: ya ne botcurl 2) ya tozhe ne bot 3) XSS. Deleted. vk.com/oldlentach 4) ( ͡° ͜ʖ ͡°) 5) ( ͡° ͜ʖ ͡°( ͡° ͜ʖ ͡°) ͡° ͜ʖ ͡°) 6) Message from bots: we will rule the world some day! ~overc9001 (totally a bot) Missed 7th as it disappeared to quickly and got redirected to https://www.youtube.com/watch?v=dQw4w9WgXcQ https://www.youtube.com/watch?v=dQw4w9WgXcQ What does it all mean?
- dawnerd 6y agoThere’s way more now. If it’s not part of the joke that’s pretty sad.
- peterbmarks 6y agoI'm sick of finding traffic lights and trying to decide if the faring around the traffic light counts.
- thdrdt 6y agoUnfortunately I am with you. I even decided to close the browser tab when I see any of the following: * Full screen "Join our email list". * Full screen "Subscribe now". * Annoying ReCapthas. * The loading takes more than 10 seconds (it's unbelievable how often this happens). * Login to see our content you just found on [search engine]. You could argue I miss out by doing so, but this is not how I experience it at all. I just don't want to waste time one such crap. I'm voting with my visit so to speak.
- drcongo 6y agoPlug for an old project of mine: https://tabcloseddidntread.com https://tabcloseddidntread.com
- S_A_P 6y agoI like it but I couldn’t help but spot the irony that tumblr is a bad web citizen that breaks the back button so the easiest way to leave the site is to close the tab...
- drcongo 6y agoWhen I put it there it wasn't as bad, but the irony builds up when you add in that I wrote the article about why I'd made TC;DR on Medium, who over the following six months filled every page with this rubbish.
- ThorinJacobs 6y agoHave you considered Crapcha? https://crapcha.com/ https://crapcha.com/
- cafebabbe 6y ago
- nickysielicki 6y agoSee also: https://earth.2020.cscg.de/tasks/Captcha https://earth.2020.cscg.de/tasks/Captcha It's very much in the same spirit. A series of weak captchas that a human can not solve in the time allotted.
- sas41 6y agoWebsite seems to have been XSSed :c I made it in, only to see a list of IP addresses, JS Alerts and finally being redirected to YT to get Rick Rolled. Or perhaps that was intended?