We've moved to hCaptcha from reCAPTCHA after Google surprised us with their pricing (blog[1], hn discussion[2]), and couldn't be happier. We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Also top-notch customer support. The CEO was personally in the slack channel helping us. Highly recommended. [1]: https://blog.repl.it/anon [2]: https://news.ycombinator.com/item?id…
> We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Interesting didn't realize this was a thing hcaptcha did[0]. It's basically recaptcha in terms of tracking which sites you visit then, no? 0: https://docs.hcaptcha.com/invisible
hCaptcha now runs on fifteen percent of the internet
61–70 of 380 posts
Re: hCaptcha now runs on fifteen percent of the internet
#62Re: hCaptcha now runs on fifteen percent of the internet
#63We've moved to hCaptcha from reCAPTCHA after Google surprised us with their pricing (blog[1], hn discussion[2]), and couldn't be happier. We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Also top-notch customer support. The CEO was personally in the slack channel helping us. Highly recommended. [1]: https://blog.repl.it/anon [2]: https://news.ycombinator.com/item?id…
Re: hCaptcha now runs on fifteen percent of the internet
#64Earlier quoted context omitted.
Recently Google's captcha asked me to mark all the traffic meters on the photos, and amongst the choices was a photo of a mailbox. It didn't let me through until I marked it as a meter as well. Good luck to whatever self driving car they are training using this data.
What's a traffic meter? Maybe it's just important that the car doesn't drive into it.
Re: hCaptcha now runs on fifteen percent of the internet
#65Re: hCaptcha now runs on fifteen percent of the internet
#66hCaptcha makes money by having humans label things to teach machines. This suggests that at some point, the machines will be nearly as good as the humans at labeling. At this point, until the humans are tasked with a different training exercise, a bot will be effectively indistinguishable from a human via hCaptcha. If there's value in it, it sounds like a spammer could train an hCaptcha-defeating bot via hCaptcha.
Re: hCaptcha now runs on fifteen percent of the internet
#67>Presented Challenges:
>Comparison - Select all images that match query
>Bounding Box - Define bounding area for objects
>Categorization - Identify the corresponding labels
>..and other simple tasks.
No, hCaptcha, no way am I going to train your neural networks for free, so please join Google on your journey to hell.
Re: hCaptcha now runs on fifteen percent of the internet
#68I really hate all these captcha codes Why can’t they do something like a reverse SSL where we have to authenticate ourselves as humans? For example if I have an Apple account on my Apple devices, why can’t they figure out a way to authenticate me as a human from that information? This doesn’t work for all scenarios (eg throwaway accounts), but it could work for the majority?
Forget adding more draconian identity requirements. 95% of CAPTCHA use is simply unnecessary and could be straightforwardly removed or replaced with rate limiting login attempts per IP. Never mind sites that use it to prevent scraping. If serving static pages is that much of a burden that you want to discourage automated means of retrieving information that you're trying to publish, then work on your website performa…
This is very outdated intuition. Fresh IP addresses cost peanuts.
For example, your solution still allows an attacker to run a 50k item /login combolist against one of your users with $5 of botnet time, each IP address trying a single uname/pass combo.
Here you pay $18/GB to multiplex your abuse (cred stuffing being classic non-volumetric abuse example) across 72 million residential IP addresses. https://luminati.io/
Re: hCaptcha now runs on fifteen percent of the internet
#69I really wish we could find something relatively foolproof that didn't rely heavily on tracking or really good vision.
Re: hCaptcha now runs on fifteen percent of the internet
#70I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…
> Google's reCaptcha code seemed to be very keen on knowing my 'cadence' or the way I used my mouse and how quickly (or how slow) I completed the captcha. It also looked at things like timezone, screen resolution, battery charge level etc So they could determine if it was 'you' who was using the captcha, soon after, in a separate session (even on a different device!) I'd bet a good amount that they store that along w…