31–40 of 81 posts
Honest question. What’s wrong with Google Recaptcha V3? No need to select 25 traffic lights. Gives you a score from 0 to 1 so you can decide whether you let them in easily or not.
> Isn't there a better way to fight bots? Don't? I mean, what are you trying to protect? If it's account registrations, shouldn't an email confirmation be enough?
> If it's account registrations, shouldn't an email confirmation be enough? This won't stop someone with enough sophistication.
OP did not provide a threat model or any description of the service really.
Talking about this "in general" is awful and leads to stupid bullshit like endless CloudFlare captchas on literally STATIC blogs.
Honest question. What’s wrong with Google Recaptcha V3? No need to select 25 traffic lights. Gives you a score from 0 to 1 so you can decide whether you let them in easily or not.
If Google doesn't like a client (e.g. Firefox users) they can just set their score to 0 and break half the internet.
My problem with Google Captcha is that I have to solve the "select all" window every time I check the checkbox, even when I'm logged in to Google. Maybe it's because I use Safari, but it's getting really annoying. What's the benefit of Google Captcha if you have to solve the captcha every time?
That's what they show if you're not on chrome, especially if you're blocking scripts or on a VPN.
> Isn't there a better way to fight bots? Don't? I mean, what are you trying to protect? If it's account registrations, shouldn't an email confirmation be enough?
From a user point of view on Firefox, Google captcha is a an absolute hell. Every single time I have to pass few batches of captchas. I'm not on a private window and I'm logged in to Google. So I started to blacklist websites that use Google captcha. and forced myself to change reading habits.
My problem with Google Captcha is that I have to solve the "select all" window every time I check the checkbox, even when I'm logged in to Google. Maybe it's because I use Safari, but it's getting really annoying. What's the benefit of Google Captcha if you have to solve the captcha every time?
That's what they show if you're not on chrome, especially if you're blocking scripts or on a VPN.
From a user point of view on Firefox, Google captcha is a an absolute hell. Every single time I have to pass few batches of captchas. I'm not on a private window and I'm logged in to Google. So I started to blacklist websites that use Google captcha. and forced myself to change reading habits.
To the extent that you'd consider non-Google alternatives, there are multiple different CAPTCHA services, and we at NetToolKit recently launched our own version called Shibboleth: https://www.nettoolkit.com/shibboleth/about You can try out demos at https://www.nettoolkit.com/shibboleth/demo While not open-source, the service is very affordable ($10 for 100,000 CAPTCHAs), and clients get to review user submissions to…
This maze captcha looks trivial to defeat
Earlier quoted context omitted.
> any CAPTCHA custom to a site will be broken very easily if your business takes off. For me, this is an interesting and open question. I've taken the view that as long as it's easier to come up with new types of challenges than it is to create an automated means to solve those challenges, CAPTCHAs offer some protection. If you're ok with requiring JavaScript, mouse input, and images (e.g. you don't require your site…
The problem is coming up with challenges that are not trivial to automate and not annoyingly hard for users. Botters aren't just making passive income, they can fix their bot every day as long as it's making them money. Many sites try "random" questions which are really easy to pattern match with a little regex. The amount of effort that goes into botting generally scales linearly with userbase size (not always). But…