5 ms·

It's Arkose Labs (also used by Roblox, GitHub, Dropbox, Twitch, and more). There's some more links here: https://github.com/dessant/buster/issues/178 https://gi

It's Arkose Labs (also used by Roblox, GitHub, Dropbox, Twitch, and more). There's some more links here: https://github.com/dessant/buster/issues/178 https://github.com/dessant/buster/issues/178 (Buster is a browser extension for automated captcha solving). You can subscribe here https://github.com/dessant/buster/issues/320 https://github.com/dessant/buster/issues/320 Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one".

actually_a_dog 5y ago
It's probably no longer available because picking out "the sad one" just amounts to picking out the one in a minor key. Machines should be able to do that fairly easily.
- Cthulhu_ 5y ago
  That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder, does recaptcha work with your google account? Because at some point a lot of people will end up doing some kind of identity verification on there. But I think Google and co can make a reasonable assertion about being human by looking at activity across said Google account - location, emails, documents, etc.
  - robin_reala 5y ago
    Yes, it does. Which means that people like me who block Google domains outside of designated sandboxes have a flipping awful time with ReCAPTCHA.
    - aembleton 5y ago
      That's why I've added the following rule to allow recaptcha. @@||google.com/recaptcha/\*$script
  - withinboredom 5y ago
    Then you’d just have people farming legitimate google accounts to get around captchas.
  - Closi 5y ago
    > That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder if the strategy is to create such a large number of different tasks that it becomes practically difficult to build solutions for all of them individually. For instance, detecting 'sad' music is an easy task, but what if that is only 1 of 500 possible Audio-Captcha types - which also include 'select the angriest speech' and 'identify which music was played on a record player'. Individually these are probably moderately easy to solve, but if they can write/create new Captcha types quicker than people can solve them, they would stay ahead (unless someone can generalise them - but generalising is a much more difficult challenge). It's effectively the WarioWare approach to Captcha's - an individual WarioWare game would be trivial to automate/solve, however automating the full WarioWare series would be a real big task (again, unless some sort of generalised AI can be used). They could even employ some interesting strategies with who/when they show particular catcha types to in order to throw off bot writers.
    - heavyset_go 5y ago
      The strategy is security through obfuscation. Solutions to solve some specific CAPTCHAs haven't spread through the CAPTCHA-solving ecosystem yet. Solving most of these CAPTCHAs are easy, and you could probably repurpose and retrain existing solutions given enough data.
      - Closi 5y ago
        > Solving most of these CAPTCHAs are easy, and you could probably repurpose and retrain existing solutions given enough data. You are right that you can probably repurpose / retrain solutions fairly quickly, but if the CAPTCHA-creators can create frameworks to create new Captcha-types fast enough (e.g. put a structure in place so it takes 1 person a day to create a new type, and you can have a team of 20 people churning out new ones constantly) then the economics of running a captcha-solving team becomes exponentially harder, and building a captcha-solver involves a lot more work. i.e. If it is quicker to create a Captcha rather than solve it, and the people who are creating the Captcha's have more resources than the Captcha-crackers, they will stay ahead. Security through obscurity is a valid strategy to slow down efforts, and will definetly help when you have teams of people working to defeat your security.
KnobbleMcKnees 5y ago
> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about culture or education.
- captn3m0 5y ago
  I saw this one today, which asks you to pick a "cheese" illustration: https://imgur.com/a/fQSQpX4 https://imgur.com/a/fQSQpX4. I'm very much of the opinion that almost all modern captchas are american-centric. Mailboxes, fire hydrants, Trams are not recognizable for billions of people.
  - withinboredom 5y ago
    My “favorite” ones happen where the site doesn’t pass on the language and you get a captcha in another language. So now you have to google translate and hope to language gods that the word doesn’t have multiple meanings.
    - kalleboo 5y ago
      It's not too uncommon for Japanese websites to use CAPTCHAs in hiragana, so you have to be able to type in はしらす or whatever
      - ui4jd73bdj 5y ago
        Assuming the content is in Japanese this is probably the expected result though. For international websites it would be good to follow the users chosen language. But if a website doesn't have a english version(or other alphabet based version), expecting alphabets in a captcha is not very reasonable.
        5y ago
tempestn 5y ago
There's a browser add-on that solves captchas for you? Some rather obvious implications of that!
szszrk 5y ago
Good luck being both visually impaired and autistic... Captchas are great when not needed and horrible when actually needed.

actually_a_dog 5y ago

It's probably no longer available because picking out "the sad one" just amounts to picking out the one in a minor key. Machines should be able to do that fairly easily.

Cthulhu_ 5y ago
That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder, does recaptcha work with your google account? Because at some point a lot of people will end up doing some kind of identity verification on there. But I think Google and co can make a reasonable assertion about being human by looking at activity across said Google account - location, emails, documents, etc.
- robin_reala 5y ago
  Yes, it does. Which means that people like me who block Google domains outside of designated sandboxes have a flipping awful time with ReCAPTCHA.
  - aembleton 5y ago
    That's why I've added the following rule to allow recaptcha. @@||google.com/recaptcha/\*$script
- withinboredom 5y ago
  Then you’d just have people farming legitimate google accounts to get around captchas.
- Closi 5y ago
  > That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder if the strategy is to create such a large number of different tasks that it becomes practically difficult to build solutions for all of them individually. For instance, detecting 'sad' music is an easy task, but what if that is only 1 of 500 possible Audio-Captcha types - which also include 'select the angriest speech' and 'identify which music was played on a record player'. Individually these are probably moderately easy to solve, but if they can write/create new Captcha types quicker than people can solve them, they would stay ahead (unless someone can generalise them - but generalising is a much more difficult challenge). It's effectively the WarioWare approach to Captcha's - an individual WarioWare game would be trivial to automate/solve, however automating the full WarioWare series would be a real big task (again, unless some sort of generalised AI can be used). They could even employ some interesting strategies with who/when they show particular catcha types to in order to throw off bot writers.
  - heavyset_go 5y ago
    The strategy is security through obfuscation. Solutions to solve some specific CAPTCHAs haven't spread through the CAPTCHA-solving ecosystem yet. Solving most of these CAPTCHAs are easy, and you could probably repurpose and retrain existing solutions given enough data.
    - Closi 5y ago
      > Solving most of these CAPTCHAs are easy, and you could probably repurpose and retrain existing solutions given enough data. You are right that you can probably repurpose / retrain solutions fairly quickly, but if the CAPTCHA-creators can create frameworks to create new Captcha-types fast enough (e.g. put a structure in place so it takes 1 person a day to create a new type, and you can have a team of 20 people churning out new ones constantly) then the economics of running a captcha-solving team becomes exponentially harder, and building a captcha-solver involves a lot more work. i.e. If it is quicker to create a Captcha rather than solve it, and the people who are creating the Captcha's have more resources than the Captcha-crackers, they will stay ahead. Security through obscurity is a valid strategy to slow down efforts, and will definetly help when you have teams of people working to defeat your security.

KnobbleMcKnees 5y ago

> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about culture or education.

captn3m0 5y ago
I saw this one today, which asks you to pick a "cheese" illustration: https://imgur.com/a/fQSQpX4 https://imgur.com/a/fQSQpX4. I'm very much of the opinion that almost all modern captchas are american-centric. Mailboxes, fire hydrants, Trams are not recognizable for billions of people.
- withinboredom 5y ago
  My “favorite” ones happen where the site doesn’t pass on the language and you get a captcha in another language. So now you have to google translate and hope to language gods that the word doesn’t have multiple meanings.
  - kalleboo 5y ago
    It's not too uncommon for Japanese websites to use CAPTCHAs in hiragana, so you have to be able to type in はしらす or whatever
    - ui4jd73bdj 5y ago
      Assuming the content is in Japanese this is probably the expected result though. For international websites it would be good to follow the users chosen language. But if a website doesn't have a english version(or other alphabet based version), expecting alphabets in a captcha is not very reasonable.
      - 5y ago

tempestn 5y ago

There's a browser add-on that solves captchas for you? Some rather obvious implications of that!

szszrk 5y ago

Good luck being both visually impaired and autistic... Captchas are great when not needed and horrible when actually needed.