News for hackers. Stuff that matters.
Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by clairity on Tuesday August 25, 2020 @01:09PM (#24273527)
while neat, it's a boon to spammers and other nefarious actors who can use these techniques to further get around captcha... concerning to say the least.

if we want to defeat time-wasting and privacy-invading captcha and the murky ethics aren't a concern, then we should go to every e-commerce site that employs them, with full crap-blocking privacy mode on, load up on products/services, and then abandon our carts at the captcha.

maybe we can have botnet operators take this idea and run with it, despite the murky ethics.

Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by ocdtrekkie on Tuesday August 25, 2020 @01:48PM (#24273955)
I am perfectly fine with rendering CAPTCHAs absolutely useless for bot prevention if it expedites websites finally getting rid of the absolute pox that is reCAPTCHA.
Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by johnward on Tuesday August 25, 2020 @01:54PM (#24274007)
Yeah. Text captcha/Recaptcha can be solved by spammers. The more advanced the more cpu time it burns up but it still does little to stop them. It just makes it super inconvenient for me to solve. Sometimes they aren't even human readable.
Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by moooo99 on Tuesday August 25, 2020 @02:20PM (#24274315)
In the worst case, there are people in poor countries solving those chaptas for relatively little money. Probably not worth for everyone, but when operating a botnet on a large scale, thats probably a pretty attractive option as well.
Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by Normille on Tuesday August 25, 2020 @02:05PM (#24274132)

  >we should go to every e-commerce site that employs them, with full crap-blocking privacy mode on, load up on products/services, and then abandon our carts at the captcha.
I've been doing that for years [well, not the shopping trolley bit] on websites which throw fullscreen modal announcements in my face. The second it happens, I click off that website. I dream that the webmasters in question will have some advanced stats setup that tells them that, as soon as they digitally shat in my face I abandoned their sites. But, unfortunately I know it's an empty gesture.

https://stiobhart.net/2015-05-04-overlays-new-popups/

Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by RulerOf on Tuesday August 25, 2020 @03:24PM (#24275021)
>abandon our carts at the captcha.

I thought the credit card number was the answer to the captcha on an e-commerce site.

Re:Beating Google ReCaptcha and the funCaptcha using AWS Rek... by uHuge on Tuesday August 25, 2020 @04:19PM (#24275641)
On some yes, but many offer other payment methods.