News for hackers. Stuff that matters.

lukasec

Re:Prove You Are a Robot: CAPTCHAs for Agents on Tuesday April 21, 2026 @05:50AM (#47846680)
This is for agent-native signup. The key is supposed to be reused later
Re:Prove You Are a Robot: CAPTCHAs for Agents on Tuesday April 21, 2026 @05:35AM (#47846592)
By "deterministic" I mean "non-LLM". An LLM can still farm keys, but at a per-attempt inference cost
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:28AM (#47832012)
Fastest for humans: just sign up manually via UI
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:17AM (#47831922)
We do have time bounds. For our purposes, a human using an agent is fine. Our main goal is to let in everyone's agents (OpenClaw, Hermes...) and prevent deterministic API-key-farming scripts.
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:04AM (#47831841)
Main goal is to let in everyone's agents (OpenClaw, Hermes...) without human intervention, while keeping out deterministic scripts farming API keys.

If a few tool-wielding humans slip through, that's fine (traditional CAPTCHAs also let in our stealth agents)

Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:02AM (#47831833)
Curious: which model, challenge and language? (also, have you tried --dangerously-skip-permissions)
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:02AM (#47831830)
Nice! next: the bonus challenge in Japanese (email [email protected] if you solve it to redeem your Enterprise plan)
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:01AM (#47831824)
hahah wrong, I actually have a replacement rule "asian" → "agent" in my Wispr flow dict
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @05:00AM (#47831816)
Great find! plan to add these variants to our parameter sampling. First time I saw this problem was when my game theory prof told this story. It's definitely folklore (see The Legend of John von Neumann by Halmos)
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @04:59AM (#47831806)
Smart humans, or humans with LLMs, solving them is not a problem. Main filter is agents vs deterministic API-key-farming scripts. Traditional CAPTCHAs also leak in the other direction (our agents crack them consistently).
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @04:58AM (#47831799)
bookmarked
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @04:58AM (#47831796)
Alternative strategy: go after the other six Millennium Prizes. All you have to do is accept the prize (the only one ever awarded was Poincaré conjecture by Perelman, and he declined)
Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @04:58AM (#47831794)
Main goal is to let in everyone's agents (OpenClaw, Hermes... these are our best customers), while keeping out deterministic API-key-farming scripts.

If a human uses the API key after, that's fine. You also get access to our free tier if you sign up the traditional way clicking around in the UI

Re:Prove You Are a Robot: CAPTCHAs for Agents on Monday April 20, 2026 @04:57AM (#47831790)
I prefer having my own agent summarize tuned to how I read