Is there any place where you can just solve captchas from hCaptcha? I was curious what kind of questions/labels it displays.
hCaptcha now runs on fifteen percent of the internet
241–250 of 380 posts
Re: hCaptcha now runs on fifteen percent of the internet
#242reCaptcha is horrible. If you are a business, please stop using it. It feels like working for Google. why the hell should I have to do work for Google when I want to do business with you?
Re: hCaptcha now runs on fifteen percent of the internet
#243I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…
> Google's reCaptcha code seemed to be very keen on knowing my 'cadence' or the way I used my mouse and how quickly (or how slow) I completed the captcha. It also looked at things like timezone, screen resolution, battery charge level etc So they could determine if it was 'you' who was using the captcha, soon after, in a separate session (even on a different device!) I'd bet a good amount that they store that along w…
Just turn on "Resist Fingerprinting" in Firefox and you'll find ReCAPTCHA _really_ annoying! I have to solve 3-5 "panes" of a ReCAPTCHA on _every_ page... It's very annoying that preserving privacy comes with this cost.
I almost want to just add a "DeathByCaptcha" extension to handle these for me and pay a few cents for every page I visit, lol
Re: hCaptcha now runs on fifteen percent of the internet
#244Earlier quoted context omitted.
https://anti-captcha.com/ is one such service. There are others, but this one that has browser plugins for visually impaired people in addition to APIs. I've used the service in the past, though it's far enough in the past all I can say is it worked once upon a time, no clue if it's still reliable.
WTF Did you see the super man like guy shooting at the sweatshop workers? This looks pretty bad... https://imgur.com/a/CvYyBQH
Holy crap that's terrible and offensive.
Re: hCaptcha now runs on fifteen percent of the internet
#245Earlier quoted context omitted.
> it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time As much as I agree with your dislike of captchas, I don't think this is true at scale (unless universal online identities existed, which could and should include anonymous identifiers by design). When you need to accept information from anonymous users (comments, votes, forms, registrations), there's no way…
I built an alternative[0] that takes a proof of work approach. As a site owner you set the difficulty that makes sense for you: so perhaps you would want 20 seconds of computation before you can submit. The nice thing is that this can happen entirely in the background while the user fills in the form. Also with multiple requests from the same IP in a short timespan, the difficulty increases. There are downsides to to…
This is very interesting. Can you change the questions in the form? Those questions seem too personal and are offputting.
Re: hCaptcha now runs on fifteen percent of the internet
#246Earlier quoted context omitted.
For a lot of people, they want to run a service and not have to spend a significant amount of time and energy investing in anti-abuse. In general anti-abuse work is not nearly as useful as product work, a day off, or a variety of other things. I agree, there should be better ways to do anti-abuse. Yet I find myself coming up empty when I try to find better options for the common scenario where people would really rat…
Better way? I'd be hard pushed to come up with a worse way. The number of things that are "wrong" with reCatcha etc, have been mentioned on here ad nauseam . In fact, I'll quote myself from another debate on the subject, a while back: >1: It's never made clear exactly what you're supposed to click on. For example. If I'm told to click on "traffic lights" does that mean just the lights?... or the poles as well?... and…
So in other words you have no better ideas either?
Re: hCaptcha now runs on fifteen percent of the internet
#247So we use 15% of the internet for captchas and I lose 15% of my life identifying crossroads, stoplights, and buses to computers. There's got to be a better way
You should take a Waymo while solving the puzzles to get back the time
Re: hCaptcha now runs on fifteen percent of the internet
#248While privacy is definitely my main concern here, it's not just privacy that's the issue here--I believe people should be compensated for the work that they offer society and if Google is using a captcha to create driverless cars then it's obviously antithetical to this premise.
I always try to miss some of the obvious items or make mistakes and I (almost) always get through. There's only one service that uses a Google captcha that I continue to use, so it's not really a huge issue for me anyways, and I have decided to stop using it!
It's not too difficult to host your own captcha, I don't see why this can't be an open-source effort.[1]
Re: hCaptcha now runs on fifteen percent of the internet
#249Earlier quoted context omitted.
Everybody gets the same difficulty initially which you determine as a site admin, so one should base this on their audience (e.g. Gitlab would have a different device profile from a government website). The solving can be a few times slower on a low end device which you should keep in mind. To aid with this when setting the difficulty for your website it shows you an estimate for various device types. This is indeed…
Why bother with a proof of work scheme when you can just rate-limit directly? It accomplishes the same thing, while eating way fewer CPU cycles, doesn’t require JavaScript, and guarantees uniform cost between all client types.
This sibling comment was responding to you: https://news.ycombinator.com/item?id=25215024
Re: hCaptcha now runs on fifteen percent of the internet
#250Earlier quoted context omitted.
> it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time As much as I agree with your dislike of captchas, I don't think this is true at scale (unless universal online identities existed, which could and should include anonymous identifiers by design). When you need to accept information from anonymous users (comments, votes, forms, registrations), there's no way…
I built an alternative[0] that takes a proof of work approach. As a site owner you set the difficulty that makes sense for you: so perhaps you would want 20 seconds of computation before you can submit. The nice thing is that this can happen entirely in the background while the user fills in the form. Also with multiple requests from the same IP in a short timespan, the difficulty increases. There are downsides to to…
Proof of work by itself is nearly useless, unfortunately. Compute is cheaper than people. This is one reason why CAPTCHA services will likely be with us always.
As someone working in the field, I also doubt your claim "will prevent 99.9% of spam" is based on real data. Modern headless browser spambots are not deterred by this kind of approach.
(Edit: looks like the poster admitted this number was entirely made up later in the thread.)