3 ms·
I would argue that ReCAPTCHA’s still work, at least to some extent. Spamming a form is much easier to do when you don’t have to spin up an entire virtual browse
by odo1242 4y ago
I would argue that ReCAPTCHA’s still work, at least to some extent. Spamming a form is much easier to do when you don’t have to spin up an entire virtual browser to fill out those form while also paying for the GPU computer necessary to run this ML model. Plus, “click farms” for solving captchas have always existed, at cents per solve.
Plus, ReCAPTCHAv3 makes this entire attack irrelevant by making image classification not a part of the CAPTCHA.
- fastball 4y agoThis extension actually claims to side-step v3 as well.
- TheCycoONE 4y agoI have seen recaptcha v3 bypassed with seemingly little effort by financially motivated spammers. I have also seen them spin up large numbers of Gmail accounts for email verification. I'm curious what people have tried that actually worked.
- fastball 4y agoCan't speak for anyone else but we recently implemented V3 with V2 as a fallback entirely to help mitigate DDoS attacks. Haven't been hit with another one yet but I have a feeling it will be sufficient.
- TheCycoONE 4y agoNo luck in this situation. They were making ~$0.50-$1.00 per hit, and the captcha only slowed them down for a couple hours. The only think that stopped it was shutting down the source of the income, so legitimate users lost out.