News for hackers. Stuff that matters.
Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by stephantul on Friday May 30, 2025 @01:53PM (#44138509)
Think of crawlers: a crawler typically makes hundreds or thousands of requests per second. The owners of the crawler then sell this data for X$, or gain X$ profit.

Proof of work adds a very small cost to each individual request, increasing the cost of crawling to a number higher than X. Because actual humans make very few requests, we don’t notice the increase in cost.

Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by timtom123 on Friday May 30, 2025 @01:57PM (#44138558)
This exactly, having ran very large scraping operations, it only takes a slight increase in cost to make it unprofitable for many use cases.
Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by SV_BubbleTime on Friday May 30, 2025 @04:09PM (#44139496)
Right, scale is solved… but not at all targeted “attacks”.

If some site uses this and I only want that site as an attacker or as a personal scraper or etc, this is keenly ineffective at proving human vs bot.

Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by hombre_fatal on Friday May 30, 2025 @02:21PM (#44138730)
When you use a captcha, you presumably want to defeat someone curling your CreatePost endpoint, not just make it more annoying to do it at only botnet scale.

This captcha still lets all traffic through. Except now you waste the battery of honest users.

Even HN proponents of the idea don't use it on their own sites.

Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by krior on Friday May 30, 2025 @02:34PM (#44138830)
I rather see something like anubis than some unsolveable captcha. I never understood the battery-argument, I recon my screen uses more energy during pow-solving than it takes my phone to solve these pows.
Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by hombre_fatal on Friday May 30, 2025 @02:40PM (#44138878)
> I rather see something like anubis than some unsolveable captcha.

So would bad actors. Which is why everyone uses normal captchas and not mere PoW.

PoW is the easiest captcha to beat.

Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by Tijdreiziger on Friday May 30, 2025 @03:01PM (#44139018)
[citation needed]
Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by hombre_fatal on Friday May 30, 2025 @03:20PM (#44139154)
For which part?

Every time a new submission is created on HN, you have a curl script that posts a comment on it shilling your product. (According to the /newest tab there seems to be one submission every few minutes.)

What's harder for you to automate: the comment always posts successfully after 500ms, or you get a Cloudflare Turnstile captcha every time?

Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by yodon on Friday May 30, 2025 @03:43PM (#44139347)
PoW is for a completely different threat model than CAPTCHA. If you're trying to decide which is better, you're doing it wrong.
Re:Cap: Lightweight, modern open-source CAPTCHA alternative ... by Tadpole9181 on Saturday May 31, 2025 @09:08AM (#44144050)
The title of the submission, the project README, and the project homepage repeats:

> CAPTCHA alternative