Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Breaking the 4Chan CAPTCHA

nullpt.rs

Post reply on HN
Print view View original

131–140 of 378 posts

Re: Breaking the 4Chan CAPTCHA

#131

Post by blackjackfoe »

reaperman wrote: post #124
noprocrasted wrote: post #62

Earlier quoted context omitted.

Just because you can technically crack them doesn't mean they're useless. There's a significant amount of time, skill and effort that went into the solution from this post, and the end result doesn't generalize well (you'd have to start all over for a different kind of captcha). The vast majority of spammers would not be able to replicate this; those who do would either make money legitimately, or focus their skills…

So, I do this type of AI development for solving CAPTCHAs. I can't get any real jobs that pay me for my more advanced skills. My primary sins were going to a second/third-tier university and some performance concerns in a portion of my previous roles due to divorce and burn-out. I make $80k/year in government IT, and $30-150k/year as the "AI" guy in a small 2-5 person group that offers a CAPTCHA-breaking API. The spa…

Is your company hiring? :)

Re: Breaking the 4Chan CAPTCHA

#132

Post by kccqzy »

somat wrote: post #130

I wonder if it would be better to pretend to have a captcha but really you are analysing the user timing and actions. Honestly I half suspect this is already going on. If you wanted to go full meta "never go full meta" you would train a AI to figure out if the agent on the other side was human or not. that is, invent the reverse turing test. it's a human if the ai is unable to differentiate it's responses from normal…

That's what reCAPTCHA does.

Re: Breaking the 4Chan CAPTCHA

#133

Post by fullspectrumdev »

codetrotter wrote: post #55
antirez wrote: post #13

Appropriate response by 4Chan to this: simplify the human work given that anyway it's simple to solve via NNs. We are at a point where designing very hard captchas has high probabilities to increase the human annoyance without decreasing the machine solvability.

> simplify the human work given that anyway it's simple to solve via NNs. We are at a point where designing very hard captchas has high probabilities to increase the human annoyance without decreasing the machine solvability Or disallow free users to post at all, and require everyone to buy the 4chan Pass for $20 USD per year if they want to post. https://4chan.org/pass This is already available to not have CAPTCHA.…

This kills the board. Users will go elsewhere, fuck all people pay for pass.

Re: Breaking the 4Chan CAPTCHA

#134

Post by TravisPeacock »

andrewflnr wrote: post #123
fragmede wrote: post #109

Earlier quoted context omitted.

> there are other options that pay much better than spamming Are there? Say you've got a felony record and can't get a legit AI/ML job at eg OpenAI/anywhere. What would you do instead? most of the options I can think of involve getting paid for doing things that are basically spam if you zoom out enough.

How many people are there like that, and how much damage are they collectively likely to do? If you're a random spammer, how hard will it be to hire that person? Again, not aiming for impossibility, just reducing the damage.

I've been working for myself for over a decade doing random projects for clients while also doing my own thing. My resume looks awful and the job market is trash. If be willing to take a job as a jr developer and work my way up (or a sys admin).

I used to run one of the world's largest ebook piracy websites but want to put that life behind me. Recently work came across my desk to create tens of thousands of accounts on a well respected website so they could more easily scrape it.

I just want a traditional job, but I also want to support my family and $4000 for a months work

Re: Breaking the 4Chan CAPTCHA

#135

Post by wraptile »

somat wrote: post #130

I wonder if it would be better to pretend to have a captcha but really you are analysing the user timing and actions. Honestly I half suspect this is already going on. If you wanted to go full meta "never go full meta" you would train a AI to figure out if the agent on the other side was human or not. that is, invent the reverse turing test. it's a human if the ai is unable to differentiate it's responses from normal…

That's kinda what every major captcha distributor does already!

Even before captcha is being served your TLS is first fingerprinted, then your IP, then your HTTP2, then your request, then your javascript environment (including font and image rendering capabilities) and browser itself. These are used to calculate a trust score which determines whether captcha will be served at all. Only then it makes sense to analyze captcha's input but by that time you caught 90% of bots either way.

The amount your browser can tell about you to any server without your awareness is insane to the point where every single one us probably has a more unique digital fingerprint than our very own physical fingerprint!

Re: Breaking the 4Chan CAPTCHA

#136

Post by jabroni_salad »

brian-armstrong wrote: post #128
bawolff wrote: post #58

There is a reason why people moved away from distorted text based captcha. We are basically at the point where computers are better at them then humans. https://www.usenix.org/system/files/conference/woot14/woot14... is a paper on the subject i think is really interesting However a surprising amount of text based captchas can be solved in a few line shell script of, using imagemagik to convert to greyscale, dilate an…

Makes me wonder what comes next. Could we create a forum where every member must do a 15 minute video interview with a moderator? I know this "doesn't scale" but I think it could make for a funny gimmick.

private torrent trackers are/were doing that. It was really just to make sure you understood how p2p culture works and what the expectations are, and really easy to pass if you just followed a guide. However, I did see many people fail their interview.

Re: Breaking the 4Chan CAPTCHA

#137

Post by oefrha »

bryan0 wrote: post #39
chad1n wrote: post #35

I've built 3 iterations of captcha solvers for that crappy website based on https://github.com/drunohazarb/4chan-captcha-solver/issues/1 . The only thing I've learned along the way is that it's mostly pointless outside of a "learning" exercise, since they'll change the captcha (in terms of letter count or the entropy background). Initially, it was 4 characters with pretty obvious background, then it turned to 5, then…

In the article it mentions they changed the number of characters in the captcha after he trained the model, and the model could still solve it

Changing the number of characters barely registers as a change. They merely need to use a variety of fonts (according to the post right now there are a grand total of 15 possible glyphs which is tiny) and it would vastly increase the difficulty of generating the training set, and probably affect model accuracy by a lot. Not to mention more complex backgrounds. What’s seen here is an ancient and relatively simple form of captcha.

Re: Breaking the 4Chan CAPTCHA

#138

Post by jabroni_salad »

gruez wrote: post #33
chatmasta wrote: post #29

Earlier quoted context omitted.

Datacenter IPs can’t even post at all, nevermind needing to solve a CAPTCHA. That’s why the accusations of “VPN shill” are usually wrong, as is the assumption of anonymity – 4chan is in fact one of the least anonymous sites on the internet. The optional username feature gives it a veneer of anonymity, but the strict IP requirements ensure almost every post is attributable to a residential internet connection, and rel…

What about users behind CGNAT, like mobile users?

I'm pretty sure all of t-mobile is rangebanned. Phoneposters are usually told to buy a pass.

Re: Breaking the 4Chan CAPTCHA

#139

Post by snvzz »

blackjackfoe wrote: post #90
tomcam wrote: post #86

If there's one place on the web I would apply anonymity with great diligence, it would be posting any article that might put me at odds with the good people of 4Chan. mostly kidding! mostly

The 4Chan userbase hates the CAPTCHA as much as I do :)

This, but unironically.
Post reply on HN