Live data from Hacker News

hCaptcha now runs on fifteen percent of the internet

hcaptcha.com

61–70 of 380 posts

Re: hCaptcha now runs on fifteen percent of the internet

#61
post #40

We've moved to hCaptcha from reCAPTCHA after Google surprised us with their pricing (blog[1], hn discussion[2]), and couldn't be happier. We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Also top-notch customer support. The CEO was personally in the slack channel helping us. Highly recommended. [1]: https://blog.repl.it/anon [2]: https://news.ycombinator.com/item?id…

> We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Interesting didn't realize this was a thing hcaptcha did[0]. It's basically recaptcha in terms of tracking which sites you visit then, no? 0: https://docs.hcaptcha.com/invisible

I think parent means hCaptcha enterprise in passive mode, where hCaptcha is detecting bots in the background using ML: botstop.com

Re: hCaptcha now runs on fifteen percent of the internet

#62
Is hCaptcha less of a pain for users who block tracking (with Brave, Privacy Badger, uBlock Origin, etc) than reCaptcha is? I'm not sure I've ever solved an hCaptcha, but I find reCaptchas to routinely be incredibly time-consuming, and I suspect it's because I block their trackers.

Re: hCaptcha now runs on fifteen percent of the internet

#63
post #40

We've moved to hCaptcha from reCAPTCHA after Google surprised us with their pricing (blog[1], hn discussion[2]), and couldn't be happier. We use it in invisible mode and it does a great job at finding bots while getting out of users' way. Also top-notch customer support. The CEO was personally in the slack channel helping us. Highly recommended. [1]: https://blog.repl.it/anon [2]: https://news.ycombinator.com/item?id…

[deleted]

Re: hCaptcha now runs on fifteen percent of the internet

#64
post #56

Earlier quoted context omitted.

Recently Google's captcha asked me to mark all the traffic meters on the photos, and amongst the choices was a photo of a mailbox. It didn't let me through until I marked it as a meter as well. Good luck to whatever self driving car they are training using this data.

What's a traffic meter? Maybe it's just important that the car doesn't drive into it.

I think he meant a parking meter.

Re: hCaptcha now runs on fifteen percent of the internet

#65
How is hCaptcha for page performance? Google Recaptcha ruins your page speed rankings as it ideally has to load chunk of JavaScript on all pages on page load to continually monitor user behaviour. You could e.g. only load it when someone starts filling out a form but this kind of integration isn't standard.

Re: hCaptcha now runs on fifteen percent of the internet

#66
post #53

hCaptcha makes money by having humans label things to teach machines. This suggests that at some point, the machines will be nearly as good as the humans at labeling. At this point, until the humans are tasked with a different training exercise, a bot will be effectively indistinguishable from a human via hCaptcha. If there's value in it, it sounds like a spammer could train an hCaptcha-defeating bot via hCaptcha.

Wait they actually use the labeling for something other than admittance? Well that takes care of my concern about this tech then, gotta go back and change some of my other comments...

Re: hCaptcha now runs on fifteen percent of the internet

#67
Reading their website:

>Presented Challenges:

>Comparison - Select all images that match query

>Bounding Box - Define bounding area for objects

>Categorization - Identify the corresponding labels

>..and other simple tasks.

No, hCaptcha, no way am I going to train your neural networks for free, so please join Google on your journey to hell.

Re: hCaptcha now runs on fifteen percent of the internet

#68

I really hate all these captcha codes Why can’t they do something like a reverse SSL where we have to authenticate ourselves as humans? For example if I have an Apple account on my Apple devices, why can’t they figure out a way to authenticate me as a human from that information? This doesn’t work for all scenarios (eg throwaway accounts), but it could work for the majority?

Forget adding more draconian identity requirements. 95% of CAPTCHA use is simply unnecessary and could be straightforwardly removed or replaced with rate limiting login attempts per IP. Never mind sites that use it to prevent scraping. If serving static pages is that much of a burden that you want to discourage automated means of retrieving information that you're trying to publish, then work on your website performa…

> could be straightforwardly removed or replaced with rate limiting login attempts per IP

This is very outdated intuition. Fresh IP addresses cost peanuts.

For example, your solution still allows an attacker to run a 50k item /login combolist against one of your users with $5 of botnet time, each IP address trying a single uname/pass combo.

Here you pay $18/GB to multiplex your abuse (cred stuffing being classic non-volumetric abuse example) across 72 million residential IP addresses. https://luminati.io/

Re: hCaptcha now runs on fifteen percent of the internet

#69
I'm really starting to hate all the captchas with a burning passion. Partly because the corporation I work for seems to have gotten our NAT addresses onto a blacklist so I get captcha'd constantly, and partly because my close up vision is getting noticeably weaker (pushing 50, that's why) and without hunting down my reading glasses it can be difficult to make out the smaller details necessary to solve the puzzle. Especially when I'm on my phone.

I really wish we could find something relatively foolproof that didn't rely heavily on tracking or really good vision.

Re: hCaptcha now runs on fifteen percent of the internet

#70
post #42
post #11

I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…

> Google's reCaptcha code seemed to be very keen on knowing my 'cadence' or the way I used my mouse and how quickly (or how slow) I completed the captcha. It also looked at things like timezone, screen resolution, battery charge level etc So they could determine if it was 'you' who was using the captcha, soon after, in a separate session (even on a different device!) I'd bet a good amount that they store that along w…

That's no secret, ... that's exactly how it is supposed to work.
Post reply on HN