111–120 of 147 posts
Earlier quoted context omitted.
Hardly surprising considering you are removing the cookies they use to remember you already passed the test.
I highly doubt that Google relies solely on cookies to identify someone.
Earlier quoted context omitted.
> You can rate limit login attempts, exponentially increasing rate limit (or just locking out) IPs that exceed allowed login attempts and analyze your logs to ban abusive IPs. Rate limiting and bot blocking are two totally different things. Rate limiting only increases the cost of a bot attack. Either they need more IP's (which are dirt cheap in the black market) or they need more time--either way it is increased cos…
> Bypassing an IP block is trivially easy for even a low-sophistication attacker. Not easy for an average user though.
Earlier quoted context omitted.
... in trade for a valuable service. I mean, you must hate cloud software if you've got problems with this. Surprise ! Almost all software, from steam to windows, to fusion360, to fastmail, to github, office, ... is cloud software. Just naming some random examples. All have the same problem, most without providing any service (hat off to fastmail and github though, who provide service, like Google, in trade for cloud…
It's still deceptive. German contract law has the notion of "unexpected clauses", especially for terms of services. Certain ToS clauses have been invalidated by courts even if the customer agrees to the contract that includes those ToS, because the clauses have been deemed "too unexpected". The basic idea is that people should not be expected to read the entire ToS before agreeing to them. To me, this is sort of the…
Sorry your citizen score is not high enough to access this website.
That would be a government doing that (I wish we could say just one, but when it comes to restrictions based on "citizen status", it's really not just China), not Google, a private company. But the big point is Google is not the Chinese state. In fact, one might say, quite accurately, that they're not very friendly.
Earlier quoted context omitted.
Well usually ReCAPCHA is usually used on sign in pages. You can rate limit login attempts, exponentially increasing rate limit (or just locking out) IPs that exceed allowed login attempts and analyze your logs to ban abusive IPs. Yeah, that's harder than ReCAPTCHA, but I think a lot of these big companies can afford to do these pretty basic steps. If you just want to throw some comments on your free blog and not have…
> You can rate limit login attempts, exponentially increasing rate limit (or just locking out) IPs that exceed allowed login attempts and analyze your logs to ban abusive IPs. Rate limiting and bot blocking are two totally different things. Rate limiting only increases the cost of a bot attack. Either they need more IP's (which are dirt cheap in the black market) or they need more time--either way it is increased cos…
I guess a potential problem with that however is the login-blocking of high profile accounts with known usernames. Maybe only those accounts could be solved by a captcha to bypass the login-block. And if there is a solution like that, login-blocks will basically become useless & therefor also disappear.
Earlier quoted context omitted.
On the flip side, abuse exists, and wishing that anti-abuse measures went away does not acknowledge reality. Just like how I'm annoyed when I have to pay for a cup of coffee, but my annoyance doesn't really inform how things should be. Besides, if a relatively simple puzzle is too much to ask, then maybe you didn't care all that much to begin with. I can think of various platforms where this would be a good filter ev…
The puzzles aren’t simple if you’re blind or hard of vision. Or don’t have a US cultural background (I personally know a sidewalk is US English for a pavement, but I definitely don’t recognise all US street signs or shop hoardings, and have been caught out by that before).
I've lived my whole life in the US and have about 20/20 vision (used to be slightly better than 20/15), and I'd estimate my reCaptcha pass rate around 20%.
The puzzles are just badly done, it's not even a vision or knowledge thing.
Earlier quoted context omitted.
On the flip side, abuse exists, and wishing that anti-abuse measures went away does not acknowledge reality. Just like how I'm annoyed when I have to pay for a cup of coffee, but my annoyance doesn't really inform how things should be. Besides, if a relatively simple puzzle is too much to ask, then maybe you didn't care all that much to begin with. I can think of various platforms where this would be a good filter ev…
The puzzles aren’t simple if you’re blind or hard of vision. Or don’t have a US cultural background (I personally know a sidewalk is US English for a pavement, but I definitely don’t recognise all US street signs or shop hoardings, and have been caught out by that before).
Earlier quoted context omitted.
Gotta feed the machine right? Just so you know, the more you protect your privacy, the more websites, everywhere, will have Recaptcha requires that you work for Waymo even though you do not want to work for them (you know, describing road signs, identifying potholes, finding traffic lights, etc). Want some privacy? OK, waste 2-3 minutes every 10 articles and work for Google. Don't want to work for Google? OK, disable…
I can enumerate why anything in the world is suboptimal. It's not a very strong point on its own. But notice that you haven't suggested an alternative. You're just lamenting one of the few, generalizable, cheap resources a website operator has to avoid abuse in a world where it's only getting easier and easier for bad actors. Your analysis is just as thorough as "but somehow it's OK to put locks on every door because…
Earlier quoted context omitted.
Are you sure you're talking about v3? I don't think v3 will display anything no matter what browser you're running, instead it's up to you to do that.
Regardless of version number, it's new behavior that seems to roughly align with the arrival of v3. I used to be able to pass most recaptcha, but now I get that message on some sites (which are now completely inaccessible).
Earlier quoted context omitted.
No. They say they do, but neither me not any of the team that tried it was able to complete a single test of the ReCAPTCHA accessible fallbacks. 0%. This was a couple of years ago, but at that point at least putting ReCAPTCHA into a site was putting a fixed roadblock in for people with visual impairments strong enough to force them down their audio route.
You're going to lose users or time/money with any abuse prevention. But you lose even more by letting things like spammers run rampant on your platform. You're stuck analyzing trade-offs, not ignoring reality. Once again, all trails lead back to you providing some alternative solutions instead of the empty catharsis of coming up with downsides to something in an internet comment. Here's one of my own: Isn't it annoyi…
It's not about disliking anti-spam measures, it's about highlighting the woeful method that is re-captcha.
"Select all squares with street signs" shows a bunch of squares, some of them contain only part of the pole that presumably has a sign attached out of shot. So do you click that square that only has the pole? A pole is not a sign, it's a piece of steel. But it's part of the sign, so are people expected to select it or not?
Re-captcha is not a smart system.