News for hackers. Stuff that matters.
Re:Code to flood Kellogg with bogus job applications after s... by klondike_ on Friday December 10, 2021 @10:33AM (#29511059)
People usually use human powered CAPTCHA solving services nowadays
Re:Code to flood Kellogg with bogus job applications after s... by bstar77 on Friday December 10, 2021 @10:40AM (#29511147)
Apparently I'm barely human enough to get through those Captchas.
Re:Code to flood Kellogg with bogus job applications after s... by paranorman on Friday December 10, 2021 @10:35AM (#29511079)
Exactly, deathbycaptcha is one I’ve seen in action more than 5 years ago. This stuff has been human powered for way longer than that.
Re:Code to flood Kellogg with bogus job applications after s... by mrkentutbabi on Friday December 10, 2021 @10:56AM (#29511357)
how does this work? do they capture the screen and forward the captcha to some service in India?
Re:Code to flood Kellogg with bogus job applications after s... by flotzam on Friday December 10, 2021 @11:15AM (#29511606)
Here's an example of a captcha-solving API: https://anti-captcha.com/apidoc/methods/createTask

They have a browser extension too, I guess it detects the displayed captcha and submits it to the API

Re:Code to flood Kellogg with bogus job applications after s... by mrkentutbabi on Friday December 10, 2021 @12:45PM (#29512965)
Wow, just wow. This is amazing.
Re:Code to flood Kellogg with bogus job applications after s... by flotzam on Friday December 10, 2021 @02:17PM (#29514207)
Gotta love adversarial interoperability, productionized
Re:Code to flood Kellogg with bogus job applications after s... by michaelt on Friday December 10, 2021 @11:26AM (#29511746)
I once heard someone (perhaps jokingly) suggest forwarding the captchas to users of some website you control - e.g. a free porn website where you have to solve a captcha every 10 images.
Re:Code to flood Kellogg with bogus job applications after s... by schleck8 on Friday December 10, 2021 @11:33AM (#29511840)
Recaptchas yield a code when completed succesfully, which can be transfered to a different machine to instantly solve it i think.

Finally repercussions for the sites not updating their recaptcha versions and annoying everyone with v2

Re:Code to flood Kellogg with bogus job applications after s... by flotzam on Friday December 10, 2021 @11:59AM (#29512179)
"reCAPTCHA v3" despite its name is not a captcha though, it's just a very bad risk-scoring service. Bad because (1) it flags plenty of legit visitors as spammy, in a way that's probably a slamdunk GDPR lawsuit waiting to happen, and (2) apparently the returned token is still replayable - Anti Captcha claims to support v3, you can even select what score you want to have (>= 0.3/0.7/0.9) lol
Re:Code to flood Kellogg with bogus job applications after s... by gruez on Friday December 10, 2021 @11:19AM (#29511661)
for recaptcha it's even simpler. Because of how it's implemented, all you have to do is send the captcha solving service the site key, and it returns a solved token.