News for hackers. Stuff that matters.
Re:AI bots are now better than humans at decoding CAPTCHAs by juujian on Thursday August 17, 2023 @10:22AM (#37162075)
Do CAPTCHAs in practice really serve to perfectly tell apart humans or robots, or just to thwart the laziest attempt of abusing a website? Everyone knows that a door lock, no matter how good, can be overcome if you a really determined. But the lock still thwarts off opportunists. Yes, the goal when we first developed CAPTCHAs may have been to tell apart humans and robots. Realistically now, if CAPTCHAs can still significantly reduce the traffic from bots then companies will keep using them.
Re:AI bots are now better than humans at decoding CAPTCHAs by danaris on Thursday August 17, 2023 @10:28AM (#37162176)
The difference with a door lock is, even if you are sufficiently determined and have a way of defeating particular kinds of door lock with 95% confidence, that doesn't mean that you can instantly break into 95% of houses that use that lock, because you are one person with a physical body.

If bots that can break CAPTCHAs become widespread, the volume of spam, scams, and other junk traffic is going to cause problems for many people and small websites.

Re:AI bots are now better than humans at decoding CAPTCHAs by stavros on Thursday August 17, 2023 @10:29AM (#37162197)
No, because bots that handle spam get better as well:

https://thespamchronicles.stavros.io/welcome/

Re:AI bots are now better than humans at decoding CAPTCHAs by wongarsu on Thursday August 17, 2023 @11:07AM (#37162849)
For a long time now CAPTCHAs only make bots more expensive. There are plenty of (human-staffed) services that will solve your captchas for $0.001-$0.005 per solved captcha. Better AI lowers the cost, but it's not necessarily a massive change of the status quo.
Re:AI bots are now better than humans at decoding CAPTCHAs by RetroTechie on Thursday August 17, 2023 @12:29PM (#37164195)
In a way that is silly:

Increase the cost of having bots do it, while...

...also increasing the time wasted by humans. Time which is considered much more costly/valuable than whatever $ value spent on the bots.

So maybe the time has come to regard captcha's pointless, and just drop that nonsense.

Re:AI bots are now better than humans at decoding CAPTCHAs by semi on Thursday August 17, 2023 @12:47PM (#37164504)
That was true of early captchas but Google changed it from 'wasting humans time' to 'using humans time to train their machine learning algorirhms'
Re:AI bots are now better than humans at decoding CAPTCHAs by mistrial9 on Thursday August 17, 2023 @01:39PM (#37165373)
about to say the same - but to be clear, it is "training computer vision models" a specific use of machine learning
Re:AI bots are now better than humans at decoding CAPTCHAs by PBnFlash on Thursday August 17, 2023 @04:41PM (#37167724)
The difference between zero and nearly zero can be pretty large at scale.
Re:AI bots are now better than humans at decoding CAPTCHAs by vGPU on Friday August 18, 2023 @01:12AM (#37171577)
I would legitimately pay for this. I hate doing captchas and the internet seems to hate Firefox.
Re:AI bots are now better than humans at decoding CAPTCHAs by tommy_axle on Thursday August 17, 2023 @11:26AM (#37163153)
Not necessarily, if the messages are analyzed there's usually an intent (solicitation, scam, etc.) so you can filter based on the content similar to email. The shorter lead forms without a message to analyze are a bit different since you can only go based on IP, email, phone but it's possible.
Re:AI bots are now better than humans at decoding CAPTCHAs by YetAnotherNick on Thursday August 17, 2023 @12:04PM (#37163810)
Solving the puzzle is only of the requirement to getting past captchas. For better or worse most captchas use IP(subnet) based rate limiting and cross site tracking as well, so the physical body argument holds in captchas as well. Try using the web inside free VPN or Tor and see if you can break captchas.
Re:AI bots are now better than humans at decoding CAPTCHAs by oceanplexian on Thursday August 17, 2023 @01:44PM (#37165447)
CAPTCHA is about more than spam.

Big Tech built their empires on scraping and stealing data (How do you think LinkedIn or Facebook got started?) But when we try to scrape them they throw a massive hissy fit, and so they put a lot of engineering into CAPTCHA systems to keep their data locked away. Eventually, the pinnacle of bots will be something that reads the framebuffer, and manipulates a mouse and keyboard to scrape websites.

This has got these companies freaked out, because all the founders know the dirty secret of their origin story, and that someone else can come along and do exactly the same thing to them.

Re:AI bots are now better than humans at decoding CAPTCHAs by samr71 on Thursday August 17, 2023 @03:53PM (#37167051)
(This, of course, isn't how LinkedIn or Facebook got started)
Re:AI bots are now better than humans at decoding CAPTCHAs by verve_rat on Thursday August 17, 2023 @05:20PM (#37168261)
Don't know about LinkedIn, but aren't the roots of Facebook traced back to scraping pictures of women off of Harvard's website?
Re:AI bots are now better than humans at decoding CAPTCHAs by RichardCA on Thursday August 17, 2023 @06:42PM (#37169217)
Re:AI bots are now better than humans at decoding CAPTCHAs by oceanplexian on Friday August 18, 2023 @03:29AM (#37172353)
Let’s just say I have insider knowledge, working for the same investors, long before the company even had 100 employees. LinkedIn was built on scraping and stolen data. Same as FB. You can deny it but it doesn’t change reality.
Re:AI bots are now better than humans at decoding CAPTCHAs by paulddraper on Thursday August 17, 2023 @12:45PM (#37164462)
> or just to thwart the laziest attempt of abusing a website

Thus the XKCD CAPTCHA: https://xkcd.com/810/

Re:AI bots are now better than humans at decoding CAPTCHAs by slashdev on Thursday August 17, 2023 @02:38PM (#37166118)
I’ve seen that one before, but I got a fresh laugh out of it.

We’ll have to change the game again now that bots can beat humans at it.

Re:AI bots are now better than humans at decoding CAPTCHAs by kokanee on Thursday August 17, 2023 @03:31PM (#37166771)
I wonder if part of the solution is for us to start designing the Internet for bots. We're entering a phase where websites are coded by bots, content of all stripes (text/video/audio/images) is generated by bots, and increasingly that fact doesn't necessarily mean that we want to block it.

The main tenets of apps that are resilient to bot spam are 1) scalability, so that they can handle huge quantities of traffic and bot-generated content, and 2) the ability to differentiate high quality from low quality content (regardless of whether it was created by a human). Ironically, AI is probably the solution to the second problem.

Re:AI bots are now better than humans at decoding CAPTCHAs by thrashh on Thursday August 17, 2023 @05:31PM (#37168398)
I think what you’re proposing applies to good bots.

But the bots I wrote to get unfair advantages in auctions or tickets are probably of the kind most bots are.