News for hackers. Stuff that matters.
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by lukestateson on Friday November 27, 2020 @04:48AM (#25227071)
CAPTCHAs don't work.

At least for humans. It's fairly easy to write a script with current technology even for an average "hacker" to solve them. But on the other hand it's extremely hard, nearly impossible for a person with special needs to complete them. Even for average person solving some of CAPTCHAs is a hassle.

Most of the popular CAPTCHAs services are "robot-friendly" and providers don't care who solves them, they just need data, they don't need to prove you're human.

Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by adjkant on Friday November 27, 2020 @05:31AM (#25227378)
CAPTCHAs being american-centric, ableist, etc are all valid criticisms here, but I think people in tech fail to understand the value of them.

Being "robot-friendly" still doesn't mean it's a walk in the park, and it's a hurdle that spammers will have to account for. If your site is a low value target or the spamming in general is low-value, it's often effective. Running any sort of small time open to the internet blog or forum will make the value of CAPTCHAs abundantly clear. The issue here is being inclusive to people, not making them "work" against robots.

Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by thequux on Friday November 27, 2020 @06:30AM (#25227787)
In those situations, captchas don't offer any improvement over a text field that always asks you to put a 3 in it. It's just different enough from other systems that it requires custom programming, and that's just not worth it for most small websites.
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by les_diabolique on Friday November 27, 2020 @11:51AM (#25230265)
If I'm specifically targeting that website, what's stopping me from writing a bot that would simply enter 3 all the time?
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by josephcsible on Friday November 27, 2020 @04:50PM (#25232879)
If a website is low-value, you won't be specifically targeting it in particular.
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by imiric on Friday November 27, 2020 @07:49AM (#25228277)
There are user friendly and secure CAPTCHAs out there if implemented correctly.

A particular gaming forum uses game covers and asks users to select the correct title. This is quick enough to decipher for a human, while any OCR bots would have a difficult time with it. They could build a database of all covers, but it would be difficult to keep it up to date, and site owners could simply add more variation, so I doubt any bot authors bother to do so.

Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by xrisk on Friday November 27, 2020 @04:49AM (#25227081)
Oh is Google captcha etc solvable via robot?
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by notRobot on Friday November 27, 2020 @04:56AM (#25227136)
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by zeepzeep on Friday November 27, 2020 @04:57AM (#25227138)
Yes, it's called Buster. It solves the speech based challange by using speech to text APIs.
Re:CAPTCHAs don’t prove you’re human – they prove you’re Ame... by xncl on Friday November 27, 2020 @04:58AM (#25227154)
yes you play the audio captcha into voice to text software and it can solve it with a good rate of success and no effort mentally on my part