4 ms·

CAPTCHAs don't work. At least for humans. It's fairly easy to write a script with current technology even for an average "hacker" to solve them. But on the oth

CAPTCHAs don't work. At least for humans. It's fairly easy to write a script with current technology even for an average "hacker" to solve them. But on the other hand it's extremely hard, nearly impossible for a person with special needs to complete them. Even for average person solving some of CAPTCHAs is a hassle. Most of the popular CAPTCHAs services are "robot-friendly" and providers don't care who solves them, they just need data, they don't need to prove you're human.

xrisk 6y ago
Oh is Google captcha etc solvable via robot?
- deleted 6y ago
  [deleted]
- notRobot 6y ago
  Yes. Buster. Firefox: https://addons.mozilla.org/en-US/firefox/addon/buster-captcha-solver/ https://addons.mozilla.org/en-US/firefox/addon/buster-captch... Chrome: https://chrome.google.com/webstore/detail/buster-captcha-solver-for/mpbjkejclgfgadiemmefgebjfooflfhl https://chrome.google.com/webstore/detail/buster-captcha-sol...
- zeepzeep 6y ago
  Yes, it's called Buster. It solves the speech based challange by using speech to text APIs.
- xncl 6y ago
  yes you play the audio captcha into voice to text software and it can solve it with a good rate of success and no effort mentally on my part
adjkant 6y ago
CAPTCHAs being american-centric, ableist, etc are all valid criticisms here, but I think people in tech fail to understand the value of them. Being "robot-friendly" still doesn't mean it's a walk in the park, and it's a hurdle that spammers will have to account for. If your site is a low value target or the spamming in general is low-value, it's often effective. Running any sort of small time open to the internet blog or forum will make the value of CAPTCHAs abundantly clear. The issue here is being inclusive to people, not making them "work" against robots.
- thequux 6y ago
  In those situations, captchas don't offer any improvement over a text field that always asks you to put a 3 in it. It's just different enough from other systems that it requires custom programming, and that's just not worth it for most small websites.
  - les_diabolique 6y ago
    If I'm specifically targeting that website, what's stopping me from writing a bot that would simply enter 3 all the time?
    - josephcsible 6y ago
      If a website is low-value, you won't be specifically targeting it in particular.
imiric 6y ago
There are user friendly and secure CAPTCHAs out there if implemented correctly. A particular gaming forum uses game covers and asks users to select the correct title. This is quick enough to decipher for a human, while any OCR bots would have a difficult time with it. They could build a database of all covers, but it would be difficult to keep it up to date, and site owners could simply add more variation, so I doubt any bot authors bother to do so.

xrisk 6y ago

Oh is Google captcha etc solvable via robot?

deleted 6y ago
[deleted]
notRobot 6y ago
Yes. Buster. Firefox: https://addons.mozilla.org/en-US/firefox/addon/buster-captcha-solver/ https://addons.mozilla.org/en-US/firefox/addon/buster-captch... Chrome: https://chrome.google.com/webstore/detail/buster-captcha-solver-for/mpbjkejclgfgadiemmefgebjfooflfhl https://chrome.google.com/webstore/detail/buster-captcha-sol...
zeepzeep 6y ago
Yes, it's called Buster. It solves the speech based challange by using speech to text APIs.
xncl 6y ago
yes you play the audio captcha into voice to text software and it can solve it with a good rate of success and no effort mentally on my part

adjkant 6y ago

CAPTCHAs being american-centric, ableist, etc are all valid criticisms here, but I think people in tech fail to understand the value of them. Being "robot-friendly" still doesn't mean it's a walk in the park, and it's a hurdle that spammers will have to account for. If your site is a low value target or the spamming in general is low-value, it's often effective. Running any sort of small time open to the internet blog or forum will make the value of CAPTCHAs abundantly clear. The issue here is being inclusive to people, not making them "work" against robots.

thequux 6y ago
In those situations, captchas don't offer any improvement over a text field that always asks you to put a 3 in it. It's just different enough from other systems that it requires custom programming, and that's just not worth it for most small websites.
- les_diabolique 6y ago
  If I'm specifically targeting that website, what's stopping me from writing a bot that would simply enter 3 all the time?
  - josephcsible 6y ago
    If a website is low-value, you won't be specifically targeting it in particular.

imiric 6y ago

There are user friendly and secure CAPTCHAs out there if implemented correctly. A particular gaming forum uses game covers and asks users to select the correct title. This is quick enough to decipher for a human, while any OCR bots would have a difficult time with it. They could build a database of all covers, but it would be difficult to keep it up to date, and site owners could simply add more variation, so I doubt any bot authors bother to do so.