8 ms·
While this is too simple (even the website admits that a bot could be written in virtually no time to break it), it does make me wonder if you could have a Wari
by jandrese 5y ago
While this is too simple (even the website admits that a bot could be written in virtually no time to break it), it does make me wonder if you could have a WarioWare CAPCHA. A minigame with extremely vague description that you have to react to quickly to pass.
Thinking about it some more it fails the primary criteria for a CAPCHA: it needs to be harder to write the bot that cracks it than each test case, by at least a couple orders of magnitude. Otherwise bot makers will just create custom bots for each contingency. They have more time and funding than you do.
- swiley 5y agoPerhaps you could generate the games/descriptions from parametric components.
- rootsudo 5y agoThis is a great patent esque idea. I thank you good sir, now to see if I can steal it as my own. It also reminds me of only Konami able to have mini games in loading screens.
- bawolff 5y agoThings that require quick reflexes are probably easier for a computer.
- jandrese 5y agoWarioWare games aren't twich reflex games. They'll do something like show a bomb with a lit fuse on the screen and flash a single word like "blow" and you have to quickly maneuver the mouth of the character next to the fuse and press the button before it explodes. It's about comprehending the situation quickly, the actual action is extremely simple and low fidelity.
- lamontcg 5y agoHave the CAPCHA require properly constructing a nonlinear programming problem to solve an optimization problem, where the requirements are not expressed in terms of the NLP and the human has to design it. Which would have the side effect of putting the bot makers to work on useful and hard problems to solve.
- robertlagrant 5y agoGood idea! To prove you are a human, mine three Bitcoin.
- meowface 5y agoSpam and DoS prevention were actually the original purpose of Proof of Work. Hashcash, the first (I think) anti-spam PoW algorithm, was what Bitcoin's PoW algorithm was inspired by.
- hsbauauvhabzb 5y agoWhy not something computationally expensive? Bcrypt this value 10000 times to continue
- sodality2 5y agoIdeally you'd have something that's hard for the client but easy for the server to verify, though. so maybe prime factoring?
- handrous 5y agoThe trouble with anything designed to prevent computers from understanding something, while allowing humans to understand it, is accessibility.
- unknown_error 5y agoThat's easy. Just partner with the CAPTCHA crackers and share revenue from your accessible users.
- flanbiscuit 5y agoThe DOOM Captcha is just using html/css/js so it's easy for bots to crack with simple DOM querying/manipulation in an automated browser. But what if canvas was used instead? > A minigame with extremely vague description that you have to react to quickly to pass. I dont know how advanced current bots are at breaking captchas these days but if you're using a canvas then they would have to use some kind of image/video processing and recognition and then also know the rules of the game. Just curious if using canvas would make things harder for bots. Maybe it's already been done, I have no idea
- ehsankia 5y agoYeah, I was really surprised to see it was basic DOM. Canvas version wouldn't even be that hard to do. And yes, it would definitely be breakable, but at least not with a javascript onliner.
- tshaddox 5y agoI believe a simple JS browser extension or automation script could easily ask about every pixel in the canvas. For this case I suspect it would be very easy to iterate over each row of pixels looking for a few consecutive pixels that uniquely match the monster and then trigger a click on those coordinates.
- testesttest 5y agoFor traditional text captchas, bots are better than humans. Flow usally goes, pay humans to solve 50000 ($500) then train an ML model. For things like recaptcha things get harder because it is not easy to proxy the captcha puzzles to have humans solve them (which is nessary to collect training data).
- owl57 5y agoWhy do you need to proxy anything? If you're just collecting training data, seems easy to record the interaction with a browser extension?
- testesttest 5y ago
- GuB-42 5y agoIt mostly depends on what you are trying to protect with your CAPTCHA. When I managed a small phpbb forum, all I had to do was to change a few lines in the register page to make it non-standard and it stopped all bots. Better than the built-in CAPTCHA. Simply, no one cared enough about our forum to write a specialized tool, no matter how easy it was. If it is all you have to protect, go ahead with your clever ideas, it can add a bit of flair to your website and stop bots effectively. For accessibility, you can always deal with special requests manually. The problem is entirely different if you are Google. People will spend months trying to break your CAPTCHA for fun and profit. Hand crafted problems will be solved faster than they can be written so "bot vs bot" is essentially your only option.
- Ntrails 5y agoI am on a forum with like 20 other posters and bots were stopped by the addition of a call/response field. Nobody who wanted to register would forget the classic response, but no bot was going to be able to answer it without some pretty specific google fu
- thedrbrian 5y agoHow does that work if you want to grow your hobby or group? And if it’s something between friends why not use a private whatsapp group or IRC
- dankwizard 5y agoThe one's I've seen are not difficult questions. I.e if it was a forum for some TV Series fandom, a question could be 'What is the main character's name?'
- GuB-42 5y agoSpeaking for myself, if was a little bigger than 20 members (around 100). The thing is that we wanted to keep the forum open to everyone, at least for the public parts. That's why I went with invisible tweaks (mostly just renaming fields) instead of a challenge. But I could have came up with a challenge that anyone interested in our forum would have known. We were a rhythm games club, so a questions could have been "We organize a tournament for this game, in 3 letters". Anyone who heard of us would know it is DDR (it was our main event), and for those who didn't, all it took was a quick look at our website. And even if it is just a hobby, you don't get the same thing from a forum compared to a WhatsApp or even a Facebook group. In fact, a few years after me and all the geeky admins left, they switched to Facebook, which completely killed the already dying online community. Maybe nowadays we could use a Discord server, which does a bit more for a community than an WhatsApp group, and is more accessible than IRC, and saves history. Another great thing about the forum is that I still have a backup from the time I still had admin rights, and I could bring it back to life on a private server with some friends, even though the club is now completely dead. Memories are not lost, except for most of the external links (ImageShack...).
- grogenaut 5y agoWhile I know this is a fun captcha, it does bring up a problem I'm having more and more with the web and mobile. There's no way my mom would ever be able to handle this captcha. Heck I didn't even get the 4 kills on the first one and I regularly play FPSes (I used a trackpad for this).
- sillysaurusx 5y agoMinecraft is devilishly hard for reinforcement learning. You could have a captcha like "build a neat-looking fortress to prove you're human."
- Wowfunhappy 5y agoHow do you validate whether the fortress was “neat-looking”?
- sillysaurusx 5y agoYou could train a classifier on all neat looking fortresses, then run outputs through the classifier. But you'd measure the cosine similarity to all previously-seen activations, and discard any that are too similar -- thus making sure that people need to come up with unique neat-looking fortresses. Today's stupid ML idea has been brought to you by: Gabe Newell. Inspiring future ML devs since 1996. A word from our sponsor: https://www.youtube.com/watch?v=jpw2ebhTSKs&ab_channel=TheChalkeaters https://www.youtube.com/watch?v=jpw2ebhTSKs&ab_channel=TheCh...
- immibis 5y agoBut then anyone else can do that and write a neat fortress generator trained to produce outputs that pass the neat fortress classifier.
- conception 5y agoI’ve seen this in the wild, or something like it. Your idea isn’t far away from it- https://www.jqueryscript.net/form/image-puzzle-slider-captcha.html https://www.jqueryscript.net/form/image-puzzle-slider-captch...