Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

DOOM Captcha

vivirenremoto.github.io

Post reply on HN
Print view View original

151–160 of 178 posts

Re: DOOM Captcha

#151

Post by dahjkol »

flanbiscuit wrote: post #47
jandrese wrote: post #16

While this is too simple (even the website admits that a bot could be written in virtually no time to break it), it does make me wonder if you could have a WarioWare CAPCHA. A minigame with extremely vague description that you have to react to quickly to pass. Thinking about it some more it fails the primary criteria for a CAPCHA: it needs to be harder to write the bot that cracks it than each test case, by at least…

The DOOM Captcha is just using html/css/js so it's easy for bots to crack with simple DOM querying/manipulation in an automated browser. But what if canvas was used instead? > A minigame with extremely vague description that you have to react to quickly to pass. I dont know how advanced current bots are at breaking captchas these days but if you're using a canvas then they would have to use some kind of image/video p…

Probably by grabbing a pixel of a monster and "clicking" on it. Pixel bots are as old as time. Learned about then playing runescape as a kid but never wanted to be banned. My friend made a few for fishing and woodcutting

Re: DOOM Captcha

#152

Post by Geee »

dahjkol wrote: post #150
qixv wrote: post #126

Earlier quoted context omitted.

When I managed a purely Danish forum, i simply added a textbox and asked the user to write ‘æ’ in it. Never saw any spam after that.

One of our public facing systems I put up a silly "what is the capital of x country?" While we waited on some other stuff. I think it's still in production. And to my knowledge no bot has gotten past it or even bothered.

That filters out all Americans as well.

Re: DOOM Captcha

#153

Post by yoz-y »

GuB-42 wrote: post #93
thedrbrian wrote: post #72

Earlier quoted context omitted.

How does that work if you want to grow your hobby or group? And if it’s something between friends why not use a private whatsapp group or IRC

Speaking for myself, if was a little bigger than 20 members (around 100). The thing is that we wanted to keep the forum open to everyone, at least for the public parts. That's why I went with invisible tweaks (mostly just renaming fields) instead of a challenge. But I could have came up with a challenge that anyone interested in our forum would have known. We were a rhythm games club, so a questions could have been "…

ITG is three letters as well though.

Re: DOOM Captcha

#154

Post by Ntrails »

thedrbrian wrote: post #72
Ntrails wrote: post #51

Earlier quoted context omitted.

I am on a forum with like 20 other posters and bots were stopped by the addition of a call/response field. Nobody who wanted to register would forget the classic response, but no bot was going to be able to answer it without some pretty specific google fu

How does that work if you want to grow your hobby or group? And if it’s something between friends why not use a private whatsapp group or IRC

It's an offshoot forum of a video games guild subforum built from another larger forum. It's not going to grow (indeed, it is dying / dead at this point).

All things must pass and all that.

Re: DOOM Captcha

#156

Post by tim333 »

flanbiscuit wrote: post #47
jandrese wrote: post #16

While this is too simple (even the website admits that a bot could be written in virtually no time to break it), it does make me wonder if you could have a WarioWare CAPCHA. A minigame with extremely vague description that you have to react to quickly to pass. Thinking about it some more it fails the primary criteria for a CAPCHA: it needs to be harder to write the bot that cracks it than each test case, by at least…

The DOOM Captcha is just using html/css/js so it's easy for bots to crack with simple DOM querying/manipulation in an automated browser. But what if canvas was used instead? > A minigame with extremely vague description that you have to react to quickly to pass. I dont know how advanced current bots are at breaking captchas these days but if you're using a canvas then they would have to use some kind of image/video p…

>just using html/css/js

I think a problem is if it's all client side it would be quite easy for hackers to much about with. Now maybe if it sent the mouse movements and target positions to the server it would be possible to tell human movements apart in a way that was quite hard to crack?

Re: DOOM Captcha

#158

Post by xtiansimon »

Men In Black (1997)

“[In a shooting range, confronted with numerous menacing-looking targets, Edwards shoots a cardboard little girl]

Zed: May I ask why you felt little Tiffany deserved to die?

James Edwards: Well, she was the only one that actually seemed dangerous at the time, sir.

Zed: How'd you come to that conclusion?

James Edwards: Well, first I was gonna pop this guy hanging from the street light, and I realized, y'know, he's just working out. I mean, how would I feel if somebody come runnin' in the gym and bust me in my ass while I'm on the treadmill? Then I saw this snarling beast guy, and I noticed he had a tissue in his hand, and I'm realizing, y'know, he's not snarling, he's sneezing. Y'know, ain't no real threat there. Then I saw little Tiffany. I'm thinking, y'know, eight-year-old white girl, middle of the ghetto, bunch of monsters, this time of night with quantum physics books? She about to start some shit, Zed. She's about eight years old, those books are WAY too advanced for her. If you ask me, I'd say she's up to something. And to be honest, I'd appreciate it if you eased up off my back about it.” Source: IMDB

Re: DOOM Captcha

#159

Post by Gravityloss »

qixv wrote: post #126
GuB-42 wrote: post #49

Earlier quoted context omitted.

It mostly depends on what you are trying to protect with your CAPTCHA. When I managed a small phpbb forum, all I had to do was to change a few lines in the register page to make it non-standard and it stopped all bots. Better than the built-in CAPTCHA. Simply, no one cared enough about our forum to write a specialized tool, no matter how easy it was. If it is all you have to protect, go ahead with your clever ideas,…

When I managed a purely Danish forum, i simply added a textbox and asked the user to write ‘æ’ in it. Never saw any spam after that.

And to keep out all the Swedes and Germans...

Re: DOOM Captcha

#160

Post by geoduck14 »

Geee wrote: post #152
dahjkol wrote: post #150

Earlier quoted context omitted.

One of our public facing systems I put up a silly "what is the capital of x country?" While we waited on some other stuff. I think it's still in production. And to my knowledge no bot has gotten past it or even bothered.

That filters out all Americans as well.

American here. I've never heard of country X!

/s

Post reply on HN