Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

hCaptcha now runs on fifteen percent of the internet

hcaptcha.com

Post reply on HN
Print view View original

111–120 of 380 posts

Re: hCaptcha now runs on fifteen percent of the internet

#111

Post by ornornor »

blindm wrote: post #11

I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…

I love this extension: https://github.com/dessant/buster

It won’t solve the privacy issues but at least you’re not working on google’s training set anymore and captchas are automatically solved for you.

Re: hCaptcha now runs on fifteen percent of the internet

#113

Post by fab1an »

Zak wrote: post #48

I dislike the widespread use of captcha regardless of provider. I realize anything connected to the internet will be subject to automated abuse, and it's impossible to run some types of services without taking some steps to defend against it, but it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time. The exact details will vary based on the type of service, of c…

With our hCaptcha Enterprise product (https://www.botstop.com), showing a CAPTCHA actually only happens in rare cases (relatively speaking..) - vast majority of bots are caught and stopped in the background (using ML), and most users will never see one.

Re: hCaptcha now runs on fifteen percent of the internet

#114

Post by pieterhg »

My mom and dad's shared IP (somewhere in Europe) repeatedly gets on CloudFlare's IP ban list meaning my mom keeps having to solve these hCaptcha's. hCaptcha's is a lot more difficult to complete than Google's reCaptcha and she has a lot of trouble with it.

Why they get on these IP lists is I think because it's a general consumer ISP and probably a lot of people get bot nets on there.

Re: hCaptcha now runs on fifteen percent of the internet

#115

Post by renewiltord »

jsnell wrote: post #76
Zak wrote: post #48

I dislike the widespread use of captcha regardless of provider. I realize anything connected to the internet will be subject to automated abuse, and it's impossible to run some types of services without taking some steps to defend against it, but it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time. The exact details will vary based on the type of service, of c…

There's a good reason for what you're identifying as misuse. If you show a captcha after a failed password, you need to show a one after a correct password as well. Otherwise you leak information. You can have other solutions, e.g. in a login flow that splits the username and password entry, it's advantageous to put the captcha between those two steps. But even in those solutions the display of the captcha must be in…

> If you show a captcha after a failed password, you need to show a one after a correct password as well. Otherwise you leak information.

Presumably, if the person has entered the right username and password they're going to get access to the service at which point they'll know they entered the right one. What information exactly is leaked here?

Re: hCaptcha now runs on fifteen percent of the internet

#116

Post by identity0 »

QUFB wrote: post #7
ve55 wrote: post #4

Worth noting that this title is primarily due to Cloudflare having switched to them from ReCAPTCHA, and Cloudflare is... well, relatively popular, to say the least. I'm curious what kind of data may exist on the experience of switching for larger providers; do the users like it? how much more/less time do they spend solving? do they care, let alone even notice that it's not Google's ReCAPTCHA? Regardless, as ReCAPTCH…

Honest question: How do you view it as an improvement? The same data is being shared, and the only difference is that Cloudflare isn't immediately behaving in the same evil ways as Google. But once you concentrate power in an entity, perhaps bad things might happen? ... If there was an on-premise captcha implementation that actually worked, that would be great.

hCaptcha works on Tor, sometimes.

Re: hCaptcha now runs on fifteen percent of the internet

#117

Post by thewebcount »

disgrunt wrote: post #81
eatbots wrote: post #59

Earlier quoted context omitted.

We actually spend quite a lot of time on this, and regularly work with blind users to test and improve these flows. Most vision-impaired users have no issue in our testing, and it is a much more accessible option than audio challenges, which discriminate against those with auditory processing impairments. (disclosure: work there.)

Your cookie approach requires: > If you are using the very latest version of Safari on either the recently released OS X 10.15 or iOS 13.4, Apple has just changed the behavior of Safari related to third-party cookies, blocking all of them by default. We are implementing a solution, but in the meantime please visit Safari Preferences, Privacy section, and uncheck "Website tracking: Prevent cross-site tracking" to enab…

> uncheck "Website tracking: Prevent cross-site tracking"

Holy moley! Yeah, that's a deal-breaker. I agree that this is entirely unacceptable.

Re: hCaptcha now runs on fifteen percent of the internet

#118

Post by fnord77 »

blindm wrote: post #11

I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…

Is there a way to delete collected reCaptcha data from google accounts? I looked around and I don't see a specific setting for that.

Re: hCaptcha now runs on fifteen percent of the internet

#119

Post by heavyset_go »

koreanguy wrote: post #85

Captcha is a terrible 90s technology, it should have been completely destroyed in year 2000. it's really annoying.

Don't worry, the next iteration of CAPTCHAs will rely heavily on browser feature detection, ensuring that you're not using an unauthorized version of Chrome that can be automated. Only authorized and trusted browsers will pass the tests.
Post reply on HN