3 ms·
There's always CAPTCHA bypasses if you're willing to pay, there've been sites operating for decades that will take a captcha URL and spit out the appropriate re
by arsome 5y ago
There's always CAPTCHA bypasses if you're willing to pay, there've been sites operating for decades that will take a captcha URL and spit out the appropriate response by just feeding it to humans. This is just a different way to make you pay - and arguably to something of less ill-repute, buying more U2F keys once yours get banned.
This provides effective rate limiting and you can still get every key you automate banned very easily.
- WORMS_EAT_WORMS 5y agoSecond this. For a major sporting event, one of our sites was heavily targeted by “free TV streaming services” self promoting their stuff. No amount of Google CAPTCHA or Cloudflare could stop it while keeping it online. Never seen anything like it in my life.
- apple4ever 5y agoThat makes me so frustrated. I HATE CAPTCHA's with a passion. They are everywhere and constantly slow me down. And you mentioned, they are likely not helpful in stopping bots.
- temp667 5y agoI almost never see a captcha. On a static fiber IP - 1GB. Use chrome. Not sure if that matters.
- the_pwner224 5y ago> Use chrome. That's why. Try using Firefox without being logged in to Google and with an ad blocker - you really won't like it.
- Kwpolska 5y agoI’m using Firefox, and are often doing stuff in Private Mode, where I’m not logged into Google, and am using uBlock, and Firefox’s strict tracking protection. CloudFlare and Google doesn’t serve me any CAPTCHAs.
- deleted 5y ago[deleted]
- garaetjjte 5y agoIf I understand it correctly, you cannot ban attestation key without potentially banning lots of legitimate users.
- fierro 5y agothis is what the blog post fails to address. Is the FIDO2 hardware key approach abusable? Yes. More so than regular image based CAPTCHA? No, like you said, there are well established services for "mechanical-turking" away the problem.