3 ms·
Those visual challenges look pathetically easy to automate. I can’t see that they would offer any security against bots that actually want to get in—only agains
by chrismorgan 3y ago
Those visual challenges look pathetically easy to automate. I can’t see that they would offer any security against bots that actually want to get in—only against completely casual bots, and you can go much lower-tech against those, e.g. an invisible honeypot field on form submissions is surprisingly effective.
- protonmail 3y agoFinding a compromise between usability/accessibility and security is difficult. We want to make it easy for humans to minimize errors whilst also making it harder for bots, so we're happy that you think the challenges look easy. One of the differentiators in ProtonCAPTCHA is that we've built this system with the expectation that someone will break it, either through automated mechanisms, or via third party solvers - however, there are defenses against these attacks in place which we will not divulge for obvious reasons.