2 ms·
It takes a script kiddy considerably more effort to circumvent a captcha than just automating a site via curl or chromium. This difference is the increase in co
by eptcyka 2y ago
It takes a script kiddy considerably more effort to circumvent a captcha than just automating a site via curl or chromium. This difference is the increase in cost of an attack. This is the security gain.
- tpxl 2y agoA script kiddie downloads a script that does it for them. The hard work of solving captchas automatically was already done, for free (linked in this very thread).
- eptcyka 2y agoCool, invoke it from bash.
- Closi 2y agoAnd then google changes something in the Captcha code and it stops working, then you change solve libraries and then you get it back up but need more complex hosting infra because solves take 10 seconds and you have to simulate human behaviour, then that goes down, then you have to use some new solve service which is a paid API, and then your VM is detected by Google as a bot and suddenly you are blocked across all websites using Recaptcha, so then you have to rebuild your infra... Compared to 10 minutes and selenium.
- turblety 2y agoIt's now so trivial to solve them, and extremely cheap. You can install a chrome extension, give some solving service a $1 and basically never need to reload.
- adzm 2y agoStill makes a ddos much more difficult