Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

hCaptcha now runs on fifteen percent of the internet

hcaptcha.com

Post reply on HN
Print view View original

321–330 of 380 posts

Re: hCaptcha now runs on fifteen percent of the internet

#321

Post by bastawhiz »

pieterhg wrote: post #114

My mom and dad's shared IP (somewhere in Europe) repeatedly gets on CloudFlare's IP ban list meaning my mom keeps having to solve these hCaptcha's. hCaptcha's is a lot more difficult to complete than Google's reCaptcha and she has a lot of trouble with it. Why they get on these IP lists is I think because it's a general consumer ISP and probably a lot of people get bot nets on there.

I've learned that folks end up unintentionally installing software which acts as essentially "proxy server as a service". I've heard of browser extensions doing this, but I would be unsurprised if mobile apps did it. Every holiday I do a sweep of my parents' devices to make sure they haven't installed anything silly (my mom somehow always has three or four different weather apps). I'd suggest giving it a look the next time you can.

Re: hCaptcha now runs on fifteen percent of the internet

#322

Post by dodobirdlord »

riversflow wrote: post #296
dodobirdlord wrote: post #285

Earlier quoted context omitted.

Logged in status and account reputation are obviously useful input, but reCAPTCHA objectively works without requiring login. IP reputation also obviously makes sense to take into account, but the fact that Google collects all of this fingerprinting information demonstrates that’s again only a part of what factors in. The same profile can show up from behind a different IP. Not sure what you’re getting at about GDPR a…

>GDPR says that an IP address is PII if it can be associated with an individual, but that. . . doesn’t mean that stored information that is keyed by an IP address is personal data, even if the IP address can be associated back to a particular individual. Okay, I’m usually pretty good at understanding law, but this doesn’t make sense to me. This seems like a very shallow, arbitrary definition of subject data. So GDPR…

A subject (a person) can make a request for subject data (data about the person) that a company has stored. The data has to be about the person and associatable with the person to be covered by GDPR. If I keep track of say, average CPU time for handling requests from a particular IP address, the CPU metric doesn’t become the personal data of the individual that is associated with the IP address.

Re: hCaptcha now runs on fifteen percent of the internet

#323

Post by hatch_q »

banana_giraffe wrote: post #187
gopty wrote: post #180

Earlier quoted context omitted.

Please, what is the service? I want to pay someone to solve Captchas for me.

https://anti-captcha.com/ is one such service. There are others, but this one that has browser plugins for visually impaired people in addition to APIs. I've used the service in the past, though it's far enough in the past all I can say is it worked once upon a time, no clue if it's still reliable.

I use Buster browser extension with free IBM Watson speech to text node, free limitation is 500minutes of speech per month, which is plenty for solving captchas. The crux of all this privacy (blocked 3rd party cookies) is that i need to solve 3 ReCaptchas every time.

Re: hCaptcha now runs on fifteen percent of the internet

#324

Post by villux »

noja wrote: post #150
Zak wrote: post #48

I dislike the widespread use of captcha regardless of provider. I realize anything connected to the internet will be subject to automated abuse, and it's impossible to run some types of services without taking some steps to defend against it, but it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time. The exact details will vary based on the type of service, of c…

I find that when I solve a Captcha too quickly, I get another one. And another one. And another one. So instead, I wait a short time, click a few wrong boxes, then enter the correct Captcha. Maybe this is part of it, but I don't like it.

What service are you using? Some browser plugin I assume?

Re: hCaptcha now runs on fifteen percent of the internet

#325

Post by selfhoster11 »

hyperdimension wrote: post #280
Normille wrote: post #164

Earlier quoted context omitted.

>One particularly egregious misuse of captcha in a service I use presents one after I enter a correct username and password Is it eBay by any chance? That recently started randomly showing reCaptchas to me when I'm already logged in and have been using the site for some time. When this happens, it descends into a never-ending cycle of more login screens and then more reCaptchas. But thankfully eBay have taken note of…

I'm about as anti-Google as it comes, but I didn't even mind the first incarnation of reCaptcha as a concept. You prove that you're human, and you also help transcribe books so that they're more accessible/searchable! Sure, it's in Google's interest in that it improves Google Books, but it at least seems like a symbiotic exchange (to, e.g. humanity in general.) Contrast that with today's form of reCaptcha where you i…

It is forced labour (to a very light degree, but still).

It is additionally resource-theft, when recaptcha-protected sites are used for business purposes. You are stealing valuable business time (possibly very valuable business time, if the person in question is a high-paid role like a CEO or surgeon) to power your pet "spot the crosswalk" project.

Re: hCaptcha now runs on fifteen percent of the internet

#326

Post by deepstack »

forgotmypw17 wrote: post #170
blindm wrote: post #11

I think it's great. So many sites sit behind Cloudflare now and Cloudflare now uses hCaptcha, which is a big win. And the hCaptchas themselves are easy to complete. No more wondering if you actually clicked on 'all' the traffic lights anymore, yay! I inspected the source code of Google's reCaptcha offering and was disgusted at how many bits of information they were collecting. They also seem to be fingerprinting user…

As a nojs browser, I only think it's great in the sense that I don't have to waste my time with sites which don't care about accessibility.

yes we need captcha that supports browsers like links. NOJS browser ought to make a comeback. display image, text and video. For many sites that's ALL we need.

For sure enable javascript to get the fancy stuff, but mostly we just want to read the text, view the picture and see the video.

Re: hCaptcha now runs on fifteen percent of the internet

#327

Post by dsanduleac »

Aeolun wrote: post #269
Normille wrote: post #175

Earlier quoted context omitted.

If the Buster plugin can't solve the reCaptcha for me [It does fail from time to time] then I just don't bother visiting that website. Or if it's a site I need to use, then I'll try again later and see if I either get let in without being asked to jump through hoops, or get a reCaptcha Buster can solve. I simply refuse to waste my time and drive up my blood pressure by doing unpaid training work for Google's AI, in o…

Can you provide an alternative that doesn’t involve my contact form getting spammed to hell with crap?

Use the recaptcha after form submission only, rather than on the whole website. Then at least the user is incentivised to do it as a last step of a process, as opposed to being stopped in their tracks before they even got to visit the website.

Re: hCaptcha now runs on fifteen percent of the internet

#328

Post by drivebycomment »

pieterhg wrote: post #114

My mom and dad's shared IP (somewhere in Europe) repeatedly gets on CloudFlare's IP ban list meaning my mom keeps having to solve these hCaptcha's. hCaptcha's is a lot more difficult to complete than Google's reCaptcha and she has a lot of trouble with it. Why they get on these IP lists is I think because it's a general consumer ISP and probably a lot of people get bot nets on there.

Or, it could be that their computers or home network is infested with malware or bots.

Majority of people complaining about captcha need to look at their system first. Of course any detection system has false positive, but the false positive rate is not double digit percentage in vast majority of cases.

Re: hCaptcha now runs on fifteen percent of the internet

#329

Post by josefx »

Zak wrote: post #48

I dislike the widespread use of captcha regardless of provider. I realize anything connected to the internet will be subject to automated abuse, and it's impossible to run some types of services without taking some steps to defend against it, but it seems to me there's usually a way to handle that without invading the user's privacy or wasting their time. The exact details will vary based on the type of service, of c…

Could the captcha be there to keep spam bots from posting? Sometimes it is trivial to get a new or just valid account, so just checking for that wouldn't stop spam bots.

Re: hCaptcha now runs on fifteen percent of the internet

#330

Post by octoberfranklin »

seirim wrote: post #244
chromanoid wrote: post #215

Earlier quoted context omitted.

WTF Did you see the super man like guy shooting at the sweatshop workers? This looks pretty bad... https://imgur.com/a/CvYyBQH

Holy crap that's terrible and offensive.

Websites spamming me with captchas is terrible and offensive.

"Because scaling. It is our God-given right."

Post reply on HN