4 ms·
There's an unspoken assumption here and elsewhere that the captcha doesn't present any kind of difficulty at all; is that true? If so, why?
by WaxProlix 6y ago
There's an unspoken assumption here and elsewhere that the captcha doesn't present any kind of difficulty at all; is that true? If so, why?
- xzel 6y agoMost open source text captchas have ML/DL or OpenCV OCR solutions and more advanced captchas like gcaptcha/hcaptcha you can send to a solver farm like 2captcha. The cost for the farm solutions is pretty cheap.
- WaxProlix 6y agoI'd only seen relatively pricey solver farm solutions, hence the question. What constitutes "cheap" here? For a baseline, .05USD/captcha seems not cheap to me.
- hshshs2 6y agofor a server farm you could purchase as a normal citizen, but what do governments pay?
- adanto6840 6y agoCan be had much cheaper, especially if OK with a non-zero failure rate (and/or bit more latency). Note that my hands-on experience with this stuff is now relatively dated, from a "prior career" -- coming up on 10 years now, even. If anything though, then I'd guess that it's become cheaper over time, not more expensive.
- BeefySwain 6y agoLook again, that is per thousand captchas. Still pretty expensive if you wanted to do every single Valid CC #, though.
- xzel 6y ago2captcha is about 0.0005/solve, give or take do to their failure rate. There are other services as well and pre-paid bulk purchases lead to lower pricing. I wouldn't want to ballot stuff the crazy number that is the combination of all Visa credit cards but for much smaller problem spaces 2captcha and others are very reasonably priced.
- StavrosK 6y agoI would easily pay 0.0005 per solve if it meant I don't have to deal with a captcha again when browsing.
- asadlionpk 6y agoI assume there is a business opportunity here.
- Scoundreller 6y ago"Break something and then sell the solution" is always a business opportunity.
- xur17 6y agoThe biggest issue here is solve latency. If I'm on a page with a captcha, I would definitely pay $0.0005 to not have to solve the captcha (hell, I'd pay $0.01), but I'm not sure I'd pay $0.0005 and wait 30 seconds.
- xzel 6y agoThere is buster: https://github.com/dessant/buster https://github.com/dessant/buster Wasn't something I mentioned earlier but using the reCAPTCHA audio is also another solution for gcap. I haven't ever used it personally but always seemed like a cool idea.
- ornornor 6y agoI use it all the time and it works very well. I got my own tts api token so that I don’t run into overquota errors from the shared default token. It’s also very satisfying to know I’m not an unpaid mechanical Turk for google anymore and that it’s a machine solving another machine’s challenge.
- StavrosK 6y agoI'll try that, thanks! I can confirm audio CAPTCHAs are much easier, I always use those.
- hansvm 6y agoIf you're about to make a billion calls per visa card issuer then you can afford a small amount of engineering effort to break that specific captcha. Most individual captchas are pretty rudimentary and can be attacked with simple image processing techniques and pattern matching. This one in particular is simple enough that nearly any technique you wanted to throw at it would succeed with minimal fine tuning. I'd be shocked if it took an afternoon even if you'd never broken a captcha or done any image processing before, and that's without borrowing an off-the-shelf ML solution. Plus, even if you had a 50% failure rate you'd just need twice as many calls. That's not trivial, but it doesn't really affect the viability of the idea.
- matrix2596 6y agoapitruecaptcha.org seems to working for this captcha which uses AI/ML out of the box