4 ms·
> Likewise captcha is useless against multimodal LLM available to anybody, many of which can be run locally You have a fundamental misunderstanding of why capt
by drivebycomment 3y ago
> Likewise captcha is useless against multimodal LLM available to anybody, many of which can be run locally
You have a fundamental misunderstanding of why captcha exists. If the attacker has to deploy a multimodal LLM to solve captcha, the service provider using captcha has already effectively achieved its goal - since the goal is to raise the cost (in terms of any combination of complexity, computing power, and dollar amount) of sending bulk traffic and ultimately to reduce, not eliminate, the overall attack rate. 0 bulk traffic is never the goal.
- sjwhevvvvvsj 3y agoI very much do understand the goal and work in the field. Captcha is currently a bigger impediment to legitimate use than it is to malicious use. The world has shifted and the underlying assumptions of the captcha design (computers are bad at vision tasks relative to humans) is no longer true. We are also on the backend of a rapidly depreciating cost curve, and this will accelerate. People were already using mturk at scale anyway, and it was cost efficient. In five years captcha won’t exist, and the entire “are you a human” paradigm is cooked.