3 ms·
Surely then they look at timing, people will click anywhere from, let's say 50% opacity, but bots always wait?
by pbhjpbhj 5y ago
Surely then they look at timing, people will click anywhere from, let's say 50% opacity, but bots always wait?
- bluGill 5y agoEasy for a bot to fake that with a random number generator. If nothing else bot authors can collect their own statistics. I understand the bots have an army of people in the background for images they don't understand yet, just collect timing data from that set and have your random number generator emulate that timing data. (I'm guessing a bell curve)
- SXX 5y agoActually having army of people it's exactly how complex recaptha's are bypassed. It's less than $1 for 1000 captcha: https://anti-captcha.com/ https://anti-captcha.com/ There of course options with image recognition, but they're less reliable.
- azalemeth 5y agoHonestly, that service looks like something I'm almost tempted to pay for myself. $1 per 1000 recaptchas is a lot cheaper than how I value my time, at the very least. It's not like google couldn't pay people to do these ML training datasets; I resent giving them free labour.
- SXX 5y agoUnfortunately I doubt that "recaptcha solver" can be built as browser extension. Most of advanced bots for parsing automation built on proprietary platforms like ZennoPoster and they basically heavily modify Firefox / Chromium. Also latency of human-recognition service is quite high so while you wouldn't need to solve it you'll need to wait for number of seconds anyway.
- bluGill 5y agoI wonder if we could get Firefox to automatically solve them. That is in the main version so nobody has to see those stupid things again.
- SXX 5y agoFew years ago back when I created such bots I had similar idea . For certain this can't be mainlined. And if we talk about extensions then at least in past extension code didnt have enough capacities to automatically bypass recaptchas. This would require fake mouse pointer control and it's obviously not one of features that extension api expose.
- SXX 5y agoDo you seriously think that people who programm the bots incapable of taking it into account? Bypass for this fading was obviously implementrd next day this first appear on reCaptcha.
- Rastonbury 5y agoIsn't it more for rate limiting?
- SXX 5y agoYou dont need fade-in / fade-out effects for rate limiting. Bots are obviously get to see images instantly once they're returned by the server as they dont need to wait for fade-in to complete. Because bots API is injected into browser internals instead. If rate limiting is needed there is always CloudFlare way where you're literally show user "wait" and refresh page a bit later. This is annoying, but nowhere as much as reCaptcha fading is.