Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

Post by EGreg » Tue, Aug 25, 2020, 6:30 PM UTC

derivagral wrote: post #39

Freak_NL wrote: post #33

Earlier quoted context omitted.

Sci-fi author John Varley covered this in one of his novels. In a society where anything digital can be manipulated, the veracity of a speech or event depends on a network of trust and people who witnessed the event in real life . If someone made a speech in front of hundreds of live, physically present spectators, these spectators can then verify the authenticity of any recording, and as long as there people in that…

So you'd need a bunch of GPT-3+ stuff to corroborate the deepfake, exciting! Where do you determine the "troll-line" in a trust network? You can build it over time I suppose? Though that kind of leads to similar echo-chamber stuff, right? As an anecdote, I know real humans who do truly believe deepfaked political videos. They were genuinely surprised to know that Pelosi can talk like a normal human.

Post by idunno246 » Tue, Aug 25, 2020, 6:33 PM UTC

ronsor wrote: post #32

idunno246 wrote: post #9

Earlier quoted context omitted.

google is already trying to retire them. v3 has no challenges, they just generate a score completely transparent to the end user

"Transparent" until Google doesn't trust you for some insane reason. Now I can be denied access because of an opaque score, with no way to get around it. Yay, progress!

Post by withinboredom » Tue, Aug 25, 2020, 6:35 PM UTC

3pt14159 wrote: post #35

EGreg wrote: post #15

Earlier quoted context omitted.

Can someone please explain to me why smart people keep saying that we’ll just build software to detect deepfakes? When AlphaZero plays against itself it just gets better. Once that spread is so narrow, every deviation is in the range of possible error. And it can’t explain WHY a certain move is better or why the picture is a squirrel. And sometimes it can be wrong, but only on hilarious edge cases, in the rest we jus…

What's needed is more cryptography. Build keys into sensors to sign media and use something like blockchain to broadcast the signature at time of capture / time when the device returns to the internet. Won't be perfect, but it would be a hurdle. Also, for things like audio and video if you know the location on the planet then there are certain artifacts that are hard to fake with mere AI. The way sound bounces off wa…

Post by gnopgnip » Tue, Aug 25, 2020, 6:40 PM UTC

comboy wrote: post #65

Hitton wrote: post #53

Interesting. Two things that I found interesting: 1) ip addresses he uses have probably really good reputation, because even with rather bad image recognition ability it still lets him in. 2) surprisingly enough google's captcha apparently doesn't consider mouse movements at all - the bot selects images rapidly one immediately after another and always clicks in the same place of image.

If I were Google, I would let it pass (at least where it's not in my own services, not in crucial places), and use that obviously simple heuristic for machine learning so that distinction between human and robot can be taught using many other available variables. Well, I wouldn't really do that if I were Google. But I think it could be happening.

Post by jaggirs » Tue, Aug 25, 2020, 6:42 PM UTC

Shared404 wrote: post #6

gruez wrote: post #2

I wonder how good it's at solving the "hard" (with noise added, eg. https://i.imgur.com/jbf0Xfy.png ) captchas. I went through the "past puzzles" zip, and they look easy, compared to the "hard" ones you get if you're on tor (or otherwise "shady" network) or the site owner has turned up the difficulty setting[1]. [1] https://stackoverflow.com/questions/23314528/how-to-reduce-r...

> compared to the "hard" ones you get if you're on tor (or otherwise "shady" network)[.] In my (limited) experience they serve you "hard" ones, and then continue serving you "hard" ones until you give up and go do something else.