Live data from Hacker News

Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

github.com

91–98 of 98 posts

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#92
post #77

This is irrelevant. Speech-to-text costs $0.006 per invocation (for [1] https://cloud.google.com/speech-to-text/pricing [2] https://2captcha.com/ , the first hit I found with the search [captcha solving serving price] Disclosure: I work for Google on security and cloud, but not on anything related to captchas or speech to text.

I would love to pay money (or do some sort of proof-of-work hashing) rather than solve Google's infuriating, privacy-hostile CAPTCHAs. I rather suspect that Google, as an advertising and consumer-surveillance firm, gets rather a lot of information out of the system.

I definitely preferred it when recaptcha was helping archive.org digitize books for the good of humanity. Felt much more altruistic than helping Google train neural network.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#93

Earlier quoted context omitted.

> The recently released v3 is the worst of them all; it does away with the image challenges of v2 completely. The user never interacts with it directly, never has an opportunity to persuade v3 that they're a real human by answering any sort of questions. It's nothing more than a measure of how compliant you are with google's surveillance. I did a very quick experiment with reCAPTCHA v3: * using Firefox in private bro…

On Firefox, if disable 3rd party cookie, it never accepts my correct answer. I have to fight 5 minutes with google to prove that I am human. Same when I use vpn. Allow 3rd party, logged in to google account, no vpn and just one check. Edit: If try to use audio challenge in the first case, it directly tells me that I am using some method to solve captcha and they won't allow it. So much fun. Google is evil.

I was talking about reCAPTCHA v3, which doesn't present any challenges at all. It lets the site owner decide what to do based on the score.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#94
post #77

Earlier quoted context omitted.

I would love to pay money (or do some sort of proof-of-work hashing) rather than solve Google's infuriating, privacy-hostile CAPTCHAs. I rather suspect that Google, as an advertising and consumer-surveillance firm, gets rather a lot of information out of the system.

I definitely preferred it when recaptcha was helping archive.org digitize books for the good of humanity. Felt much more altruistic than helping Google train neural network.

The rules were also so much easier.

It's a bit difficult to miss two words displayed on an image.

It's incredibly easy to miss a traffic light 30 meters away from the camera on such a tiny photo.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#95

Earlier quoted context omitted.

On Firefox, if disable 3rd party cookie, it never accepts my correct answer. I have to fight 5 minutes with google to prove that I am human. Same when I use vpn. Allow 3rd party, logged in to google account, no vpn and just one check. Edit: If try to use audio challenge in the first case, it directly tells me that I am using some method to solve captcha and they won't allow it. So much fun. Google is evil.

I was talking about reCAPTCHA v3, which doesn't present any challenges at all. It lets the site owner decide what to do based on the score.

I think nothing appears if my score is above google's (because they decides my mark in the end) pass mark. If not recaptcha appears which is what happens to me and I go through the same process.

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#96

I used to work at SoundHound and 3 years ago we had some weird illegitimate looking accounts using our Houndify platform.. turns out they were for breaking recaptcha. It was a bittersweet verification that our voice recognition was ahead of Googles but we had to put in protections against that sort of abuse so we weren't enabling spammers...

Did you end up using recaptcha?

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#97

Earlier quoted context omitted.

I was talking about reCAPTCHA v3, which doesn't present any challenges at all. It lets the site owner decide what to do based on the score.

I think nothing appears if my score is above google's (because they decides my mark in the end) pass mark. If not recaptcha appears which is what happens to me and I go through the same process.

This sounds like reCAPTCHA v2

Re: Uncaptcha2: Defeat ReCaptcha with Google Speech2Text

#98

Earlier quoted context omitted.

I think nothing appears if my score is above google's (because they decides my mark in the end) pass mark. If not recaptcha appears which is what happens to me and I go through the same process.

This sounds like reCAPTCHA v2

My mistake. I checked now. With vpn, firefox, 3rd party cookie block I got 0.3 score which is too bad. Google logged in, allow 3rd party and vpn gives 0.9.
Post reply on HN