10 ms·
Beating Google ReCaptcha and the funCaptcha using AWS Rekognition
- gruez 6y agoI wonder how good it's at solving the "hard" (with noise added, eg. https://i.imgur.com/jbf0Xfy.png https://i.imgur.com/jbf0Xfy.png) captchas. I went through the "past puzzles" zip, and they look easy, compared to the "hard" ones you get if you're on tor (or otherwise "shady" network) or the site owner has turned up the difficulty setting[1]. [1] https://stackoverflow.com/questions/23314528/how-to-reduce-recaptcha-difficulty-level https://stackoverflow.com/questions/23314528/how-to-reduce-r...
- Shared404 6y ago> compared to the "hard" ones you get if you're on tor (or otherwise "shady" network)[.] In my (limited) experience they serve you "hard" ones, and then continue serving you "hard" ones until you give up and go do something else.
- jaggirs 6y agoInteresting, Google technically has the power to ban whoever they want from any website that uses their captcha. All they have to do is give out impossible captcha's.
- jdhbbbhb 6y agoCan't you just add the same noise to you training set?
- nkingsy 6y agoStep 1: Use Captcha to get free AI training data. Step 2: Sell improved AI. Step 3: Add edge cases to the Captcha that your AI can't handle yet. Go to step 1.
- EGreg 6y agoCan someone please explain to me why smart people keep saying that we’ll just build software to detect deepfakes? When AlphaZero plays against itself it just gets better. Once that spread is so narrow, every deviation is in the range of possible error. And it can’t explain WHY a certain move is better or why the picture is a squirrel. And sometimes it can be wrong, but only on hilarious edge cases, in the rest we just “trust it” because we dont know one way or the other!! Once deepfakes have covered every possible thing that could give away the deepfake, what remains is dubious arguments as to WHY something is or is not a deepfake. It could be wrong or not, we would just “trust it”? I am saying that if there a range past the uncanny valley for adversarial AI then once the generative network is there, it’s game over. They can quickly generate any amount of speech said by anyone for example, and we will not know whether they said it or not. All audio and video evidence would be inadmissible without watermarks. And then we would have to trust whoever made the watermark. In short - mutually distrusting byzantine consensus or signing will be required for any claim.
- EGreg 6y agoExcept of course if they also are able to use AI to generate hash collisions in everybcryptographically secure hash algorithm, but I highly doubt THAT’ll ever happen :-)
- hansdieter1337 6y agosecurity by obscurity - The companies detecting deepfakes will certainly not publish their methods/networks.
- eeegnu 6y agoThey mention their own captcha system but don't really reference it anywhere as far as I can tell. I'd guess it'd be based on something like ARC (Abstract Reasoning Corpus), instead of object recognition which already have decent methods of solving if you can get enough data.
- hoerzu 6y agocouldn't find anything...
- knoebber 6y agoDoes it beat ReCaptcha v3?
- ozymandias2049 6y agoApparently yes.V3 is just the system used by V2 to give puzzle difficulty. I scored 0.7 for 40 hours on Vision API videos. https://www.youtube.com/watch?v=7tPcs06fgbg https://www.youtube.com/watch?v=7tPcs06fgbg Go to the channel for the other 3.
- zikohh 6y agoThank you for the link, I could t find it!!!!
- except 6y agoreCAPTCHA v3 is supposed to be frictionless so there would be no use for this as the user does not need to solve anything.
- knoebber 6y agoThe user solves the puzzle by behaving like a human.
- jacquesm 6y agoAt some point Captcha's will be easier to solve with software than by people. Hopefully by then we can retire them completely. The onus for proving that a visitor is not a bot should be on the server side, not on the humans.
- idunno246 6y agogoogle is already trying to retire them. v3 has no challenges, they just generate a score completely transparent to the end user
- CryptoBanker 6y agoand yet can still be bypassed by captcha solving services
- ronsor 6y ago"Transparent" until Google doesn't trust you for some insane reason. Now I can be denied access because of an opaque score, with no way to get around it. Yay, progress!
- idunno246 6y agohah yea, their sales pitch here left a bit to be desired. Once a user gets a low score a recaptcha implementer should make a cell phone number collection system to have their own trust system based on that...
- eggsnbacon1 6y agoyup. Setting some tor privacy extensions in Firefox already locks you out of Google login. Yay!
- axaxs 6y agoI'd imagine they may already be. I've been having a -lot- of issues with captchas lately. It's not my eyes getting worse, they seem to be getting both more esoteric, and the letters all crammed together. Is that cl, cI, ol, oI, or d? It often takes me multiple attempts.
- ilovefood 6y agoWoah, I never seen something like this done with bash and command line utilities. Thanks for sharing, made me find xdotool which is exactly what I neede to replace SikuliX. I can't comment on the project since I didn't test it but wow, only this example https://bitbucket.org/Pirates-of-Silicon-Hills/voightkampff/src/7b01ceabbe198a2905bd9445ff3bfece51735bed/main_visionAPI.sh#lines-806 https://bitbucket.org/Pirates-of-Silicon-Hills/voightkampff/... made me think why didn't OP use a scripting language and went with Bash? (Python?) Don't get me wrong, the Bash level is strong with this one :)
- WaxProlix 6y agoSikuli has the benefit of being fairly cross-platform, so scripts written for X will also work in Windows and in theory other more esoteric window manager environments. It also has the ability to identify visual cues, which this doesn't seem to do.
- ozymandias2049 6y agoSikuli is not fast enough. I have know about it since it was developed at MIT because I was there in 2010
- ozymandias2049 6y agoIt was my first time working with Bash. My focus is algorithms and I use C++.
- make3 6y ago(as a deep learning researcher) just wanted to let you know that PhDs in AI are in Python, and that all AI papers are in Python
- deleted 6y ago[deleted]
- deleted 6y ago[deleted]
- clairity 6y agowhile neat, it's a boon to spammers and other nefarious actors who can use these techniques to further get around captcha... concerning to say the least. if we want to defeat time-wasting and privacy-invading captcha and the murky ethics aren't a concern, then we should go to every e-commerce site that employs them, with full crap-blocking privacy mode on, load up on products/services, and then abandon our carts at the captcha. maybe we can have botnet operators take this idea and run with it, despite the murky ethics.
- ocdtrekkie 6y agoI am perfectly fine with rendering CAPTCHAs absolutely useless for bot prevention if it expedites websites finally getting rid of the absolute pox that is reCAPTCHA.
- johnward 6y agoYeah. Text captcha/Recaptcha can be solved by spammers. The more advanced the more cpu time it burns up but it still does little to stop them. It just makes it super inconvenient for me to solve. Sometimes they aren't even human readable.
- moooo99 6y agoIn the worst case, there are people in poor countries solving those chaptas for relatively little money. Probably not worth for everyone, but when operating a botnet on a large scale, thats probably a pretty attractive option as well.
- Normille 6y ago>we should go to every e-commerce site that employs them, with full crap-blocking privacy mode on, load up on products/services, and then abandon our carts at the captcha. I've been doing that for years [well, not the shopping trolley bit] on websites which throw fullscreen modal announcements in my face. The second it happens, I click off that website. I dream that the webmasters in question will have some advanced stats setup that tells them that, as soon as they digitally shat in my face I abandoned their sites. But, unfortunately I know it's an empty gesture. https://stiobhart.net/2015-05-04-overlays-new-popups/ https://stiobhart.net/2015-05-04-overlays-new-popups/
- dylan604 6y agoAre we saying that the Google image recognition is inferior to Amazon's with this?
- Hitton 6y agoInteresting. Two things that I found interesting: 1) ip addresses he uses have probably really good reputation, because even with rather bad image recognition ability it still lets him in. 2) surprisingly enough google's captcha apparently doesn't consider mouse movements at all - the bot selects images rapidly one immediately after another and always clicks in the same place of image.
- comboy 6y agoIf I were Google, I would let it pass (at least where it's not in my own services, not in crucial places), and use that obviously simple heuristic for machine learning so that distinction between human and robot can be taught using many other available variables. Well, I wouldn't really do that if I were Google. But I think it could be happening.
- gnopgnip 6y agoGoogle doesn't pass or fail, it gives a score and leaves it up to the site operator.
- comboy 6y agos/let it pass/give lower score Although I admit my idea looks less probable this way. It's still less ridiculous to me that not using keyboard or mouse data. But on the other hand they may be afraid of people screaming "Google is sending your keystrokes to their servers" etc.
- saagarjha 6y agoThey only did that so they could shift the blame/responsibility of making the classification to website operators instead of themselves.
- chris_va 6y agoIt's a library for web developers... Is it so terrible to return a float instead of a bool?
- sktguha 6y agoDid you beat recaptcha v3 also ?
- ozymandias2049 6y agoSee videos for Vision API. Score over 0.7 for 40 hours
- yters 6y agowhat we need is an unbeatable captcha
- echelon 6y agoPay a micro transaction to perform an action. In the end it's more about cost.
- deleted 6y ago[deleted]
- spullara 6y agoI remember a Yahoo hackday from around 2009 where one of the teams created a captcha that required you to match photos to tags. Another team made a program that could look at a photo and assign tags. Mutually assured destruction.
- normanmatrix 6y agoLo and behold the wonder that is adversarial AI - 11 years later we can automate this. My guess is that Google is quite happy about open source Recaptcha solvers. Delicious fodder for improving the adversary.
- spullara 6y agoThere were both automated 11 years ago using Flickr data.
- deleted 6y ago[deleted]
- ozymandias2049 6y agoMedia Inquiries: pirates.of.silicon.hills@gmail.com
- hinkley 6y agoIs there really no way to passively collect enough data from the user agent to determine the likelihood that an actual human was involved? I suppose there are a bunch of privacy and corner cases that would mess that up (for instance, composing a reply in a text editor and pasting it would be indistinguishable from a bot). Has anyone tried? Are there write-ups I could read about?
- pknerd 6y agoDoes it work with Invisible Captcha? I do not think so.
- jaflo 6y agoWhat is the Project Touch-Captcha (두 터치) mentioned in the readme?
- ozymandias2049 6y agoI will announce in a couple days