Live data from Hacker News

Why can’t a bot tick the 'I'm not a robot' box?

quora.com

431–440 of 647 posts

Re: Why can’t a bot tick the 'I'm not a robot' box?

#432

Its getting weird when you have to fill that box in with pen and paper Marci Robin was buying a Fiat 500X from a West Palm Beach, Florida dealership, and was in the final stages of signing all the paperwork, when she was presented with a strange but simple question: was she a robot? This wasn’t online or anything, she was right there, in person, in front of the sales person, who wanted her to check a box, with a pen,…

>>"...she was right there, in person, in front of the sales person, who wanted her to check a box, with a pen, on real paper, confirming that she was not, in fact, a robot. She claims she isn’t.

All robots claim not to be one, so we must be really careful.

probably printed app from website and the dealer took it literally

Re: Why can’t a bot tick the 'I'm not a robot' box?

#433

Earlier quoted context omitted.

It's actually not that hard, assuming you control your form generation. Bots usually fill in fields using the actual field name - not the label the user sees. So provide a field labelled "Age" but named "email", and simply check it contains digits. If it's got an email address in it, it's a bot. Labels can also be obfuscated with javascript, replacing the raw HTML "Email" with "Age"on page load. Getting this right wi…

This is very hostile to people who use screen readers.

I've found that the tech industry often is. Trying to get managers to set aside time to iron out accessibility issues is like pulling teeth. Trying to get other developers to take it seriously is almost as bad. Often you count yourself lucky if the bare legal minimum is implemented.

Accessibility is very important, and if accessibility features are implemented well they'll often be useful even to people without disabilities, but do any CS/SE or code bootcamp programs take the topic seriously? I'm sure it must be taught somewhere, but it doesn't seem to be common at all. Can you even imagine 21st century university architecture department that didn't cover ADA compliance? That'd be unthinkable.

Re: Why can’t a bot tick the 'I'm not a robot' box?

#434

Earlier quoted context omitted.

Cite? I can't imagine some forum has enough traffic to meaningfully screw up their data, and they don't tell you which of the two words is the unknown word, so you're just going to fail a lot doing that.

4chan was doing it specifically with a six letter racial slur that's unrepeatable.

Since you're so afraid to use the word 'nigger' here's a book by a Harvard law professor you should probably read: https://en.wikipedia.org/wiki/Nigger:_The_Strange_Career_of_...

Re: Why can’t a bot tick the 'I'm not a robot' box?

#435

Its getting weird when you have to fill that box in with pen and paper Marci Robin was buying a Fiat 500X from a West Palm Beach, Florida dealership, and was in the final stages of signing all the paperwork, when she was presented with a strange but simple question: was she a robot? This wasn’t online or anything, she was right there, in person, in front of the sales person, who wanted her to check a box, with a pen,…

I'm the kind of guy that would be willing to walk away from a sale to test what would happen if I refused to check that box.

Re: Why can’t a bot tick the 'I'm not a robot' box?

#436

Earlier quoted context omitted.

If you are using TOR, and not accepting cookies, they are going to have no way of knowing that you are the same user who just solved the CAPTCHA. Every request is going to appear to be from a new user. If you do everything you can to prevent google from knowing who you are, don't be surprised when they behave like they don't know who you are.

Tor Browser accepts session cookies. It won't have an established google identity, but it fully supports a temporary "solved the captcha" identity.

What prevents a botnet from sharing that same session cookie?

Re: Why can’t a bot tick the 'I'm not a robot' box?

#437

Earlier quoted context omitted.

4chan was doing it specifically with a six letter racial slur that's unrepeatable.

Since you're so afraid to use the word 'nigger' here's a book by a Harvard law professor you should probably read: https://en.wikipedia.org/wiki/Nigger:_The_Strange_Career_of_...

Better safe than sorry, there are enough people who think context doesn't matter.

Re: Why can’t a bot tick the 'I'm not a robot' box?

#438
Isn't this a typical Quora answer? Full of filler and shitty hard-to-verify details that provide no value to the answer ("the language is encrypted twice", what the hell), and very little effort on answering the actual question (what is the purpose of CAPTCHA).

And the community rules try to block people from writing firm "you're full of shit"-like answers, even though every other answer of Quora is full of lies like "Linux is fast, because it was designed for 16-bit computers".

Re: Why can’t a bot tick the 'I'm not a robot' box?

#439

Earlier quoted context omitted.

Is it somehow less tacky to give that value away to Google for free? Sites can set the difficulty level necessary for their application. Some are under continual targeted attack, others are mainly keeping out rogue automated spambots from their comments section. The user is typically getting a free service, a better site experience due to less bot traffic, or both. I think sharing the value of their work with the web…

> Is it somehow less tacky to give that value away to Google for free? Yes, mainly because we're talking about fractions of cents. Also, it's not for free; the website and its users get a good anti-abuse measure in return. There's a big difference between something that cannot make money and something that makes pennies for the site. But, to be fair, 99.9% of users aren't going to notice the difference in captcha bra…

Google's entire business model is leveraging of fractions of a cent on a mass scale

Re: Why can’t a bot tick the 'I'm not a robot' box?

#440

Earlier quoted context omitted.

I had roughly the same problem. My facebook career lasted for all of thirty seconds before they decided I was a robot and banned my account. I appealed and they asked me to send a photo. I sent them a photo and they said I was still a robot and there was no further appeal. Very helpful. So my choices from that point are to 1) shame them in the media and hope its an entertaining enough story that people like it or 2)…

I have received a "suspicious activity" warning on Twitter for any new account I've helped open up over the last year. You can confirm your identity by entering your phone number and receiving a text. I feel like it's more of a cheap ploy to get additional info after your first 25 tweets than it is any bot detection algorithm.

It's not, it's really not. They really do want to verify you're a person.

Facebook got busted using that (security) info for marketing purposes, and the reaction was muted; but, within the security community, it was loud and angry. Within a week, they had ceased completely.

Post reply on HN