Live data from Hacker News

I was banned from the hCaptcha accessibility account for not being blind (2023)

michaels.world

151–160 of 277 posts

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#151
post #24

Earlier quoted context omitted.

In the future I think we will again go to "notarization"/"attestation" of the operating system / hardware. Essentially, the manufacturer of the device + operating system will generate a unique signature per each device, and web browsers will be able to access it. https://en.wikipedia.org/wiki/Web_Environment_Integrity

I'm very grateful the WEI proposals were put down. It'd have an enormous privacy impact on normal users, and not give that much protection against bad actors using device farms & similar tools.

Oh, the really bad part of WEI is not the privacy impact.

The real thing is the gating of every kind of information exchange and treatment in the hands of a few entities, that get the power to say who will participate on those activities and doing exactly what.

That is, the complete elimination of the freedom of association and initiative from our society. At least around any one of those that involve computers.

The lost of privacy is a rounding error.

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#153
post #22

Earlier quoted context omitted.

Sorry I live in the west, what's a "crosswalk" Did you mean to say > not everyone lives in the USA Other things I don't have a clue about - a fire hydrant, yellow taxis, yellow buses (Obviously I do, because of American cultural imperialism through things like Captchas which mean the world has to understand American cultural touchstones)

I distinctly remember a captcha which asked me to identify fire hydrants. Some of the pictures were hydrants, while others were standpipes. These are different things, and I answered accordingly. The service refused to acknowledge my humanity until I relented that a standpipe was a hydrant. If at some future date any of us burn to death due to an automated fire truck that misbehaved due to this, we’ll know why.

Yup - I recognize this problem. I am a motorcyclist and I frequently have to grit my teeth and misidentify scooters as motorcycles if I want to get past captcha.

For non-bikers, a scooter has an automated gearbox and small wheels etc. Think vespa.

In the UK at least they are generally a different category of license, although that's because of the size of a standard scooter engine.

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#154
post #93

Earlier quoted context omitted.

There is another option. CAPTCHA is useful only when it is costly to solve. It is a costly signal that this is a real person, or at least is more than 1/10^9th of a real person (you're not running a fully automated spam system). The postal service also has costs - everybody that wants to move something through the postal service needs to buy a stamp. Transport fees are a 'natural' way to moderate traffic and deter sp…

Although solving a captcha can be translated into a monetary cost (often the cost of labour for a human in a clickfarm to solve it for you), the nice thing is that it's still "free" to solve normally. If you switch to direct payments that are still affordable for routine use by your poorest users, then your rich adversaries can afford to generate orders of magnitude more spam (until we solve unequal wealth distributi…

> until we solve unequal wealth distribution globally

Is this a joke?

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#155
post #41

I hope we can end the CAPTCHA experiment soon. It didn't work. Phone verification isn't good either, but for as much as I hate phone verification at least it actually raises the cost of spamming somewhat. CAPTCHA does not. Almost all turnkey CAPTCHA services can be solved for pennies. Solving the problems of SPAM and malicious traffic will be challenging... I am worried it will come down to three possible things: - A…

> Anonymity of users: validating someone's real-life identity sufficiently would make it possible to permanently ban malicious individuals and filter out bots with good effectiveness, but it will destroy anonymity online. In my opinion, literally untenable. I see this point constantly made on the echo chamber that is known as HackerNews. The average normie user does not care about anonymity, nor privacy, on the Inter…

> why don't we see HN crying about the need to show a national ID ... when buying a mobile phone?

Mmm, very possibly because there are at least a few ways to get a phone without using any ID. I picked up a used phone about a year ago, and use Tello. Tello had 0 info on me for years, only an old UPS box that I got the card delivered to. I eventually gave them my first name so Caller ID was correct, but short of that or putting in a correct address if you want 911 support, there's no reason to need any valid info with them. They don't do credit checks, just prepay.

> The solution is secure boot plus attestation That's the second option they presented "Closing the platform". The issue with all these options is that it consolidates power, and thanks to already partially consolidated power, any option selected will, by necessity, obligate everyone to partake, whether or not they are ok with it.

> The average normie user does not care about anonymity, nor privacy, on the Internet.

It's true that often "normies" don't care (or at least think they don't care, but that's a completely different point I don't feel like trying to make), and it's also true that often "normies" don't want the status quo changed. But often "normies" also ignore when people are kidnapped due to their heritage being revealed. Is it acceptable to actively create a hostile environment for people already disadvantaged? Do we gain something worth their safety? Who gains from this higher level of scrutiny?

If we look at the smaller web, most sites never get enough traffic to be under active threat, and passive threat is easy enough to quell using honeypot forms and questions. Maybe the "normie" internet is the problem. Passive people passively consuming. "Normies" love watching stolen content, and praise thieves for harassing anyone who points out that what their doing is wrong. "Normies" enjoy watching someone livestream themselves flying down a highway at 100 mph over the speed limit.

I think maybe we should acknowledge that what we're defending with things like hCaptcha is not actually worth defending. Maybe the "normal" internet does need to be deprecated over "small" internet? We did pretty good before with things like Wikipedia. The "small" internet from before had a lot of chaff, but good things have grown from it, and a lot of it still exists as a "small" internet. Maybe it's ok that we have a lot of "crap content", so long as the internet can keep changing?

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#156
post #117
post #93

Earlier quoted context omitted.

There is another option. CAPTCHA is useful only when it is costly to solve. It is a costly signal that this is a real person, or at least is more than 1/10^9th of a real person (you're not running a fully automated spam system). The postal service also has costs - everybody that wants to move something through the postal service needs to buy a stamp. Transport fees are a 'natural' way to moderate traffic and deter sp…

Cryptocurrency micropayments have been proposed and even attempted as a solution to various problems. Hell, there's also Hashcash, an early proposed anti-SPAM measure for e-mail using just proof-of-work. (Since this is just burning CPU though, it probably isn't effective in the modern world of most people using low-power mobile computers and many SPAMers having access to cheap very high power computers. Might serve a…

> It puts a literal price on abusing a service, but how do you set that price?

Start with a nominal one and increase it until the spam problem goes away.

Create escape hatches for people who can't afford it, e.g. you can either pay/mine a couple dollars worth of cryptocurrency, or you can have someone who paid vouch for you (but then if either of you spam you both get banned), or you can do some rigorous identity verification which is inconvenient and compromises privacy but doesn't cost money, or (for smaller communities) you ask the admins to comp you and if you're known in the community from other sites then they do it etc.

> I mean, if someone implements it and tries to solve the usability issues involved I would be open to this future, but as it is now, cryptocurrency has disappointed me.

This doesn't seem like an insurmountable problem to solve. To give someone some cryptocurrency you can either send it directly (useful option for advanced or privacy-conscious users) or use a service and then it should be no different than using Paypal et al.

The real problem is the regulations are currently designed to make using it an unreasonable amount of paperwork:

> Some of them may be caused by regulation, but to be fair, I think at this point it's hard to blame governments for trying to regulate cryptocurrency exchanges.

There's a difference between regulating exchanges and regulating users. If you're holding millions of dollars in cryptocurrency then the government is reasonably going to expect you to file paperwork and pay taxes on gains etc. If you're only holding three and four digit dollar amounts worth then they should leave you alone and you shouldn't have to do anything.

In theory you can strike a reasonable balance here where the crypto scammers go to jail but Joe Average doesn't have to file any more tax paperwork to use Bitcoin Cash to buy a pack of gum than to pay in physical cash. We'll see what the new administration does with it.

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#157

Some captchas are getting pretty discriminatory, not everyone lives in the West and can identify the objects they are asking you to. Another recent one sticks out where they asked me to pick a shape as the same number of conoids on screen. If you ask people on a street what a conoids I bet a significant amount will give you blank looks Also at least now I know some people call those markings crosswalks

I've just resorted to flipping over to the audio captcha. Yes, solving the first one takes more time, but you pretty much get it right the first time and you're not wasting your life wondering if 2cm of a fire hydrant is enough to label a square as having a fire hydrant.

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#158
post #101

Earlier quoted context omitted.

Unfortunately, even understanding these things, on a shared connection it might take you literally two or three minutes of captcha work before Google recognizes your personhood. Am I identifying the boxes wrong? Am I doing it too fast? Where do "Stairs" begin and end? Does a motorcycle include its rider? Or is Google just fucking with me and failing me on purpose? My workplace had a period this year where captcha was…

And while it's not quite the same kind of CAPTCHA, I've not infrequently run into Cloudflare "prove you're human" screens that just...never let me through. I click the box, it loads for a second, turns into a nice checkmark, and then...reloads the "prove you're human" page. Infinite loop (as far as I can tell, anyway, not having infinite time).

I forget what extension was doing this for me, but I think this was down to an extension blocking autoload/play. Try disabling your extensions down to ublock and slowly adding them back.

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#159
post #39

Earlier quoted context omitted.

Please enter your five-digit ZIP code

Mandatory "state" field on forms - if it allows any string I usually enter "mostly liquid"

For me it is "constant despair".

Re: I was banned from the hCaptcha accessibility account for not being blind (2023)

#160
post #22

Earlier quoted context omitted.

Sorry I live in the west, what's a "crosswalk" Did you mean to say > not everyone lives in the USA Other things I don't have a clue about - a fire hydrant, yellow taxis, yellow buses (Obviously I do, because of American cultural imperialism through things like Captchas which mean the world has to understand American cultural touchstones)

I distinctly remember a captcha which asked me to identify fire hydrants. Some of the pictures were hydrants, while others were standpipes. These are different things, and I answered accordingly. The service refused to acknowledge my humanity until I relented that a standpipe was a hydrant. If at some future date any of us burn to death due to an automated fire truck that misbehaved due to this, we’ll know why.

Fire hydrants in my country are virtually always in the ground covered by a steel lid. The only reason I know the answer is American popular culture.

https://fev.se/images/18.7ea68079182e95d391364a41/1663668627...

Post reply on HN