News for hackers. Stuff that matters.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by moviuro on Wednesday May 06, 2020 @08:27AM (#23090163)
What's your threat model? Maybe a CAPTCHA is not your only or not even a good solution. What about blind users? or with some other disability?

Think: rate-limit, IP rating/scoring, your own filter on messages, etc.

Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by Belphemur on Wednesday May 06, 2020 @09:07AM (#23090456)
Latest version of recaptcha doesn't even require any solving.

It just analyse the traffic and give the site owner a score [0.0 - 1.0] on how sure they are the visitor is human.

They don't explain how they calculate the score, but from my usage it's pretty accurate. They suggest to consider at first anything higher than 0.5 to be a human.

Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by moviuro on Wednesday May 06, 2020 @09:13AM (#23090535)
And they also disregard RGPD completely. Maybe OP has strict legal requirements that make using Google's tools a NOGO.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by Semaphor on Wednesday May 06, 2020 @12:42PM (#23093183)
Is that a new version that isn’t in use anywhere yet? Because for me reCaptcha is still a tool that analyses how much they know about you and if you dgaf about privacy, it lets you through.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by dropofwill on Wednesday May 06, 2020 @10:06PM (#23098886)
It came out at the end of 2018. You probably just haven't noticed it because the only visual is a little badge at the bottom right hand corner of the page.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by Semaphor on Thursday May 07, 2020 @04:02AM (#23100810)
Haven’t seen any site that used reCaptcha that lost it. Any site you know where I could see it?
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by dropofwill on Thursday May 07, 2020 @09:16AM (#23102588)
Here's a random site from builtwith that uses it https://press.priceline.com/

But yeah, it's probably not common for sites to 'upgrade' to v3. Recaptchas are a feature you begrudgingly add and v3 puts the onus on the product to decided what to do when there's a low score, so its pretty different.

Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by Semaphor on Thursday May 07, 2020 @12:44PM (#23105028)
Huh. I saw no logo or text referring to recaptcha at all. Yet before I allowed the Google domains for recaptcha, the message did not send. I guess they allowed low scores? Thank you.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by londt8 on Wednesday May 06, 2020 @08:31AM (#23090185)
Just FYI: google recaptcha works with screen readers too and blind users can use it.
Re:Ask HN: Any good FOSS alternative to Google's reCAPTCHA? by dkdk8283 on Wednesday May 06, 2020 @08:47AM (#23090295)
Yep. Apache beam with fraud detection heuristics.