Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Airbnb just stole me 5 minutes of my time adding dices

news.ycombinator.com

Post reply on HN
Print view View original

71–80 of 384 posts

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#71

Post by ianpurton »

Captchas are often used to prevent credential stuffing where an attacker has a list of email addresses and passwords and runs a script to try those out on different sites.

They also help prevent password brute force, i.e. an attacker has your email and tries the top 100 passwords to crack your account.

There are other ways to tackle this, for example email OTP where a code (or link) is emailed to you before you login.

Probably the reason Captchas are getting harder is that there are services on the internet that will use human operators to crack captchas in a semi automated fashion.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#72

Post by hdjjhhvvhga »

anthropodie wrote: post #59
trevormcneal wrote: post #42

Let's push the idiocracy to the extreme by asking Arkose to add a timeout to their captchas, so people have to solve it fast and make the default puzzle be a prime factorization. Modern web become so unusable and poluted that I don't think that it can get worse.

I read here on HN that Google has come up with new way to buypass all trackers and adblockers and I think things are going to get really bad for web. I think it's time we build a directory of applications or a search engine which indexes only the websites that do not use any trackers. The damage of tracking industry to whole web is irreparable but I think we have an opportunity to build a new web that can have mechan…

And who would moderate it? Who would make sure they don't cheat and don't insert some tracking code at some point in the future? I don't believe automatic checking would work, unless you decide any JS equals tracking (and at this point you'd be better of just disabling JS).

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#73

Post by withinboredom »

captn3m0 wrote: post #67
KnobbleMcKnees wrote: post #60

Earlier quoted context omitted.

> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about cultu…

I saw this one today, which asks you to pick a "cheese" illustration: https://imgur.com/a/fQSQpX4 . I'm very much of the opinion that almost all modern captchas are american-centric. Mailboxes, fire hydrants, Trams are not recognizable for billions of people.

My “favorite” ones happen where the site doesn’t pass on the language and you get a captcha in another language. So now you have to google translate and hope to language gods that the word doesn’t have multiple meanings.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#74

Post by robin_reala »

Cthulhu_ wrote: post #65
actually_a_dog wrote: post #28

Earlier quoted context omitted.

It's probably no longer available because picking out "the sad one" just amounts to picking out the one in a minor key. Machines should be able to do that fairly easily.

That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder, does recaptcha work with your google account? Because at some point a lot of people will end up doing some kind of identity verification on there. But I think Google and co can make a reasonable assertion about being human by looking at activity across said Google account - location, emails, documents, et…

Yes, it does. Which means that people like me who block Google domains outside of designated sandboxes have a flipping awful time with ReCAPTCHA.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#75

Post by withinboredom »

Cthulhu_ wrote: post #65
actually_a_dog wrote: post #28

Earlier quoted context omitted.

It's probably no longer available because picking out "the sad one" just amounts to picking out the one in a minor key. Machines should be able to do that fairly easily.

That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder, does recaptcha work with your google account? Because at some point a lot of people will end up doing some kind of identity verification on there. But I think Google and co can make a reasonable assertion about being human by looking at activity across said Google account - location, emails, documents, et…

Then you’d just have people farming legitimate google accounts to get around captchas.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#76

Post by hdjjhhvvhga »

joosters wrote: post #46
fastball wrote: post #37

As someone who added CAPTCHA to their own platform recently after resisting for years because of how much I hate them, I have to tell you that the unfortunate truth is that eventually bad actors ruin the party for everyone on every platform. CAPTCHA is necessary for the same reason locking your car/house is necessary. You can probably not do it 9 times out of 10 and it will be fine, but then that 1/10 happens, all yo…

That's a terrible analogy. Are you saying that once a visitor completes a captcha on your website, they can steal all your stuff? In that case, the problem is with you and your website security.

> That's a terrible analogy

Well, a more apt one would be that someone breaks into your house or car and puts all their litter everywhere so that you have to spend hours or days cleaning.

Sometimes I don't get the logic of these spambot creators. Do they honestly believe that creating thousands of fake accounts with links to "hot dating site" in my webshop will help them in any way? These data are completely invisible outside (why would anyone want to present their customer data to the world).

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#77

Post by scrollaway »

anthropodie wrote: post #59
trevormcneal wrote: post #42

Let's push the idiocracy to the extreme by asking Arkose to add a timeout to their captchas, so people have to solve it fast and make the default puzzle be a prime factorization. Modern web become so unusable and poluted that I don't think that it can get worse.

I read here on HN that Google has come up with new way to buypass all trackers and adblockers and I think things are going to get really bad for web. I think it's time we build a directory of applications or a search engine which indexes only the websites that do not use any trackers. The damage of tracking industry to whole web is irreparable but I think we have an opportunity to build a new web that can have mechan…

Kagi.com lets you filter for and signal boost results without trackers. It’s very nice.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#78

Post by oefrha »

trevormcneal wrote: post #42

Let's push the idiocracy to the extreme by asking Arkose to add a timeout to their captchas, so people have to solve it fast and make the default puzzle be a prime factorization. Modern web become so unusable and poluted that I don't think that it can get worse.

I literally made a whole series of annoying puzzles as the confirmation flow of certain destructive actions for a gaming-related site of mine.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#79

Post by contravariant »

Brian_K_White wrote: post #38
Rygian wrote: post #17

Earlier quoted context omitted.

No can do. You would be in breach of the AirBNB terms of service: "Do not use bots, crawlers, scrapers or other automated means to access or collect data or other content from or otherwise interact with the Airbnb Platform. "

A browser is a bot that interacts with the platform. It's not physically possible to use any website except by directing a tool to do it for you.

Eh, arguably you can do it without bots by opening a telnet (or openssl s_client) connection and typing the commands yourself. Though ironically some websites will block your attempts because it doesn't look enough like a browser.

You also can't really pass Captcha's this way, as far as I know.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#80

Post by i67vw3 »

marcusklaas wrote: post #63
5e92cb50239222b wrote: post #54

Earlier quoted context omitted.

Just a friendly reminder to anyone reading this — the "annoyances" lists you can enable in uBlock Origin get rid of basically all cookie popups. I haven't seen one in a couple of years.

Did not know this, just enabled all of them. Thank you!

There is also an extension on chrome and firefox store named 'I don't care about cookies' which is specifically made for this issue.
Post reply on HN