Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Airbnb just stole me 5 minutes of my time adding dices

news.ycombinator.com

Post reply on HN
Print view View original

91–100 of 384 posts

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#91

Post by pjerem »

hdjjhhvvhga wrote: post #76
joosters wrote: post #46

Earlier quoted context omitted.

That's a terrible analogy. Are you saying that once a visitor completes a captcha on your website, they can steal all your stuff? In that case, the problem is with you and your website security.

> That's a terrible analogy Well, a more apt one would be that someone breaks into your house or car and puts all their litter everywhere so that you have to spend hours or days cleaning. Sometimes I don't get the logic of these spambot creators. Do they honestly believe that creating thousands of fake accounts with links to "hot dating site" in my webshop will help them in any way? These data are completely invisibl…

> Well, a more apt one would be that someone breaks into your house [...] and puts all their litter everywhere so that you have to spend hours or days cleaning.

wow, this actually happened to a coworker. He waked up one day discovering a broken window and human excrement everywhere.

For sure he closes everything now.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#92

Post by anthropodie »

hdjjhhvvhga wrote: post #72
anthropodie wrote: post #59

Earlier quoted context omitted.

I read here on HN that Google has come up with new way to buypass all trackers and adblockers and I think things are going to get really bad for web. I think it's time we build a directory of applications or a search engine which indexes only the websites that do not use any trackers. The damage of tracking industry to whole web is irreparable but I think we have an opportunity to build a new web that can have mechan…

And who would moderate it? Who would make sure they don't cheat and don't insert some tracking code at some point in the future? I don't believe automatic checking would work, unless you decide any JS equals tracking (and at this point you'd be better of just disabling JS).

well then I guess the criteria to index websites would be those who have no js.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#93

Post by heavyset_go »

Closi wrote: post #85
Cthulhu_ wrote: post #65

Earlier quoted context omitted.

That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder, does recaptcha work with your google account? Because at some point a lot of people will end up doing some kind of identity verification on there. But I think Google and co can make a reasonable assertion about being human by looking at activity across said Google account - location, emails, documents, et…

> That's the ironic part, machines are able to solve these just fine so they defeat the purpose entirely. I wonder if the strategy is to create such a large number of different tasks that it becomes practically difficult to build solutions for all of them individually. For instance, detecting 'sad' music is an easy task, but what if that is only 1 of 500 possible Audio-Captcha types - which also include 'select the a…

The strategy is security through obfuscation. Solutions to solve some specific CAPTCHAs haven't spread through the CAPTCHA-solving ecosystem yet. Solving most of these CAPTCHAs are easy, and you could probably repurpose and retrain existing solutions given enough data.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#94

Post by fredoliveira »

Brian_K_White wrote: post #58
Rygian wrote: post #50

Earlier quoted context omitted.

Probably the nuance that is not spelled out (and certainly should be) is that AirBNB expects only interactive user agents, and not automated/batch user agents.

All those lines of code in a browser are automation.

Do you always go for the technicality and the gotcha? Isn't that best applied elsewhere rather than here? Because sure, lines of code in a browser are technically automation, but they don't automate your actions so your whole point is moot. And you know this, I'm sure, so you're wasting your (and everybody else's) time.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#95

Post by eptcyka »

KnobbleMcKnees wrote: post #60
captn3m0 wrote: post #3

It's Arkose Labs (also used by Roblox, GitHub, Dropbox, Twitch, and more). There's some more links here: https://github.com/dessant/buster/issues/178 (Buster is a browser extension for automated captcha solving). You can subscribe here https://github.com/dessant/buster/issues/320 Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one".

> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about cultu…

The best one is the chinese captcha, I think. You just slide a puzzle piece into place.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#96

Post by hdjjhhvvhga »

anthropodie wrote: post #92
hdjjhhvvhga wrote: post #72

Earlier quoted context omitted.

And who would moderate it? Who would make sure they don't cheat and don't insert some tracking code at some point in the future? I don't believe automatic checking would work, unless you decide any JS equals tracking (and at this point you'd be better of just disabling JS).

well then I guess the criteria to index websites would be those who have no js.

even if someone did it this way (as a switch in DDG for example), there is no way of guaranteeing that the ebsite didn't implement some JS between the time it got indexed and your visit

honestly, just disabling JS is the only bulletproof way of making sure you don't run any JS

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#97

Post by aglionby »

bspammer wrote: post #68
zxcvbn4038 wrote: post #39

That looks like a really poor captcha, as overhyped as machine learning is I think defeating a system like this accurately is something you’d give as a class project. It might slow down legitimate users but anyone nefarious will get through. Never mind you can outsource solving these to Bali for a penny each - maybe less.

I'm not sure how effective an AI would really be on this. Distinguishing from a pattern on top of the dice vs a pattern on the side/front seems like it would actually produce a lot of false positives.

I don't know - with some edge detection I think you could distinguish between the faces of each die, and some heuristics would probably get you the upwards-facing one. Another thing that may be useful is that in each image the only face that is fully visible for all dice is the upward one (who knows if that is just for this example though).

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#98

Post by gigglesupstairs »

ianpurton wrote: post #71

Captchas are often used to prevent credential stuffing where an attacker has a list of email addresses and passwords and runs a script to try those out on different sites. They also help prevent password brute force, i.e. an attacker has your email and tries the top 100 passwords to crack your account. There are other ways to tackle this, for example email OTP where a code (or link) is emailed to you before you login…

And as another user said in this thread that there are even extensions which can break captchas. Very questionable then what captchas are even doing on web.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#99

Post by motoboi »

KnobbleMcKnees wrote: post #60
captn3m0 wrote: post #3

It's Arkose Labs (also used by Roblox, GitHub, Dropbox, Twitch, and more). There's some more links here: https://github.com/dessant/buster/issues/178 (Buster is a browser extension for automated captcha solving). You can subscribe here https://github.com/dessant/buster/issues/320 Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one".

> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about cultu…

Given that the year is 2022 and even Michael Jackson is known worldwide, I’m pretty sure humans now recognize western music concepts.

Re: Tell HN: Airbnb just stole me 5 minutes of my time adding dices

#100

Post by tagersenim »

eptcyka wrote: post #95
KnobbleMcKnees wrote: post #60

Earlier quoted context omitted.

> Their audio captcha (no longer available?) involved listening to 3 MIDI tunes and picking "the sad one". Given that a large part of the world doesn't use the major/minor dichotomy, or even equal temperament, this seems like a terrible way to verify someone is a human... My favourite recaptchas, if one can have such a thing, are the shape sequence selection ones as they don't make significant assumptions about cultu…

The best one is the chinese captcha, I think. You just slide a puzzle piece into place.

I believe Binance has the same thing. This to measure my human imperfect way of sliding the puzzle piece, I suppose.
Post reply on HN