Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

An Empirical Study and Evaluation of Modern CAPTCHAs

arxiv.org

Post reply on HN
Print view View original

51–60 of 338 posts

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#51

Post by bb123 »

noduerme wrote: post #47
leobg wrote: post #44

Earlier quoted context omitted.

I still find it funny that Google, with the advantage of having millions of Internet users train their AI like galley slaves for free, hasn’t yet been able to crack vision driven self driving. Tesla had no such advantage when training their FSD to recognize traffic lights, bicycles, motorcycles, etc.

Tesla, the company that just recalled 2 million self driving cars? In fairness, the company best positioned to harness user input to an AI that avoids crashes would probably be Rockstar. OTOH, that AI would definitely not obey stop signs or pedestrians.

By recall you mean a completely routine OTA software update done while the driver is asleep.

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#53

Post by imjonse »

bb123 wrote: post #51
noduerme wrote: post #47

Earlier quoted context omitted.

Tesla, the company that just recalled 2 million self driving cars? In fairness, the company best positioned to harness user input to an AI that avoids crashes would probably be Rockstar. OTOH, that AI would definitely not obey stop signs or pedestrians.

By recall you mean a completely routine OTA software update done while the driver is asleep.

How can it detect the driver is asleep?

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#55

Post by zztop44 »

lakpan wrote: post #17
mdale wrote: post #7

I think captchas disappear next year or so. Already was soft human determination.

That’s excessively optimistic. The most likely scenario is that we’ll have captchas for the next 30 years but only humans will be bothered by them.

Just like the technology basically exists for fully autonomous self-owned fleets of self driving robotaxis. Where the only jobs for humans are cleaning vomit off the back seat.

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#56

Post by ponector »

cinntaile wrote: post #37
beAbU wrote: post #26

Earlier quoted context omitted.

Nope, the moment this becomes a viable solution then spammers will pick it up, making captcha useless amost overnight. Websites will very quickly pivot to alternative solutions like payment card verfification, etc.

Solving captchas is pretty rare nowadays. Now you usually just press a button and then it does some sort of fingerprinting to determine if you're a human.

Try to use VPN. You will get captcha with tons of bicycles to click...

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#57

Post by bawolff »

k4rli wrote: post #21

Are there any open local models for basic alphanumeric picture captchas to save on 2captcha?

A surprising number can be solved with teseract and simple preprocessing (e.g. thresholding, expand and contract lines).

For more complex cases, not AI but consider the attack in https://www.usenix.org/system/files/conference/woot14/woot14...

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#58

Post by plsbenice34 »

cinntaile wrote: post #37
beAbU wrote: post #26

Earlier quoted context omitted.

Nope, the moment this becomes a viable solution then spammers will pick it up, making captcha useless amost overnight. Websites will very quickly pivot to alternative solutions like payment card verfification, etc.

Solving captchas is pretty rare nowadays. Now you usually just press a button and then it does some sort of fingerprinting to determine if you're a human.

If you make zero attempts toward privacy maybe. Just turn on a commercial VPN or Tor and you'll find that your quality of life can quickly become severely damaged by captchas. I cant even do a Google search without a captcha so I started using Mullvad Leta as a proxy.

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#59

Post by snordgren »

noduerme wrote: post #46
caymanjim wrote: post #42

Google CAPTCHAs were designed and deployed as a mechanism to train AIs. That's why they are the way they are. Any security theater surrounding them is entirely incidental. So it's no surprise that the AIs are now good at solving them. We've trained them for years.

All true, except: While these are considered just an excruciating security pain for users, they do serve a non-theatrical purpose in many cases of throttling the speed of brute force attacks (or at least costing your opponent money).

GPT-4 (in)famously tricked a human to do a captcha for it. The current GPT-4 with vision would probably have been able to do it without the human, but maybe it has been “gaslit” by all the content online saying that only humans can solve captchas, that it doesn’t consider it?

Re: An Empirical Study and Evaluation of Modern CAPTCHAs

#60

Post by Roark66 »

_cjse wrote: post #28
topspin wrote: post #8

Earlier quoted context omitted.

What replaces captchas? Are there any not excessively burdensome tests that a standard issue human can pass that a machine somehow cannot? I'm assuming the "find all the bicycles" tests are also obsolete.

A market of human-oriented hardware keys, where the keys are only intended to be sold to actual human beings, with legal or otherwise cash bounties in place for people who can provide evidence of the keys being sold to or otherwise falling into the hands of non-human entities.

What's stopping a human buying a thousand to use for his bot farm?
Post reply on HN