3 ms·
Captchas are often used to prevent credential stuffing where an attacker has a list of email addresses and passwords and runs a script to try those out on diffe
by ianpurton 5y ago
Captchas are often used to prevent credential stuffing where an attacker has a list of email addresses and passwords and runs a script to try those out on different sites.
They also help prevent password brute force, i.e. an attacker has your email and tries the top 100 passwords to crack your account.
There are other ways to tackle this, for example email OTP where a code (or link) is emailed to you before you login.
Probably the reason Captchas are getting harder is that there are services on the internet that will use human operators to crack captchas in a semi automated fashion.
- gigglesupstairs 5y agoAnd as another user said in this thread that there are even extensions which can break captchas. Very questionable then what captchas are even doing on web.
- zydex 5y agoThe extensions can only break the captcha given a real user on a unique browser, something the “robots” struggle with massively at scale which is why Google don’t mind the extensions existing.
- billpg 5y agoIf they need a human to solve the puzzle, it is doing its job. The problem is that somewhere along the way, we've decided that Robot⇒Evil and Human⇒Good and forgotten that evil humans exist.