ribtoks

Sure, the limitation is mostly on the verification side (of CAPTCHA solution). For client-side it does make sense.

Use proof-of-work captchas, many are private by default. Look into Private Captcha or Cap captcha.

I feel like we need a library of better prompt-injections because not all (obvious) bot applications added the prefix.. Do you have any references?

There are other captcha alternatives like Turnstile, for example Private Captcha, Altcha etc. - they are owned by mostly “small” independent companies, they are not visual captchas (proof-of-work based) and very accesssible.

I remembered $30 from some comment I read, but didn't look for it later. If it was yours, thank you! (def. thank you for the Wallmart link! - would you like a credit in the blogpost like a quote?

> actually human generated

Human written, not generated.

> HN isn't popular enough to be invoked as a source

Excuse me, what do you mean there? The author happens to read HN too.

Have you seen Private Captcha? It's main point is privacy and GDPR compliance (while being self-hosted). It's a more modern PoW captcha without the limits of Altcha (mCaptcha is mostly out of equation at this point).

Is there a write-up/walkthrough on this? Would be interesting to read.

Also: this is kind of another nail in the coffin of non-opensource non-pow captchas.

Keeping time series in Mongo…

Yeah, most people here probably have an overstimulated mind and just doing the opposite for a minute or so can be very tough at first!

1. At it's core, it's a Proof-of-Work captcha, so compute load depends on the usage pattern. AI (LLMs) does get better at image/audio recognition, but compute task is the same anywhere, does not matter who "clicks" the checkbox.

2. Bots usually have such access patterns that cause compute task difficulty to become prohibitively high, requiring exponentially more CPU resources. This renders bots economically nonviable for submitting forms or scraping website.

I've heard doing nothing can cause a significant physical discomfort to the impatient mind.

My experience with abandoning Serverless framework, which I will remember with gratitude, despite it's utter enshittification.

I made a cross platform desktop app for people who upload their photos and videos to microstock agencies called Xpiks (https://xpiksapp.com). Initially I was selling one-off forever licenses but last year started moving them to subscription. So far progress is steady and I keep working on it. The app is made in C++/Qt and I’m looking for people who might be interested to join.

For me using my lambda is definitely better than having a dependency on yet another external service (like the logz.io advertisement in your comment).

Inspired by Julia Evan's write-up on web-services, I wanted to show how I automated log monitoring in AWS

Especially in Microsoft, such old historical projects are a huge huge mess. For Microsoft, never join Windows (anything, not just kernel), Power BI, Office (desktop one). Even many parts of Azure that I witnessed when working there, were already a huge and messy legacy. Colleagues, code and development workflow would be your worst nightmare there.

This is a very good app. Weekly-based todo list is something that I replicated myself in Joplin for ages. Now it's a lot better and with automations! Thanks for keeping it up!

US only shipping...