> [1] What would the AI in such a tool do? Solving captchas. In particular, not only solving the challenge itself (recognizing crosswalks, etc) but also handli

> [1] What would the AI in such a tool do? Solving captchas. In particular, not only solving the challenge itself (recognizing crosswalks, etc) but also handling input (moving the mouse, alt+tabbing, etc) as if it were a real human. I was recently reading the Cloudflare turnstile announcement https://blog.cloudflare.com/turnstile-ga https://blog.cloudflare.com/turnstile-ga and it has the following links about this https://uncaptcha.cs.umd.edu/papers/uncaptcha_woot17.pdf https://uncaptcha.cs.umd.edu/papers/uncaptcha_woot17.pdf https://www.vox.com/22436832/captchas-getting-harder-ai-artificial-intelligence https://www.vox.com/22436832/captchas-getting-harder-ai-arti... https://arxiv.org/abs/1903.01003 https://arxiv.org/abs/1903.01003 In those excerpts: > The prevalence of free speech-to-text services has made it easy for bots to solve audio CAPTCHAs as well, with a recent study showing bots can accurately solve audio CAPTCHAs in over 85% of attempts. We’re proud to state that Turnstile is WCAG 2.1 Level AA compliant, while eliminating the need for audio CAPTCHAs as well as visual ones. And > With all of our emphasis on how easy it is to pass a Turnstile challenge, you would be right to ask how it can stop a bot. If a bot can find all images with crosswalks in grainy photos faster than we can, surely it can check a box as well. Bots definitely can check a box, and they can even mimic the erratic path of human mouse movement while doing so. For Turnstile, the actual act of checking a box isn’t important, it’s the background data we’re analyzing while the box is checked that matters. We find and stop bots by running a series of in-browser tests, checking browser characteristics, native browser APIs, and asking the browser to pass lightweight tests (ex: proof-of-work tests, proof-of-space tests) to prove that it’s an actual browser. The current deployment of Turnstile checks billions of visitors every day, and we are able to identify browser abnormalities that bots exhibit while attempting to pass those tests. So, this is a cat and mouse game, the cat is using AI, the mouse is probably using AI in some form or another too.