Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Moving from reCAPTCHA to hCaptcha

blog.cloudflare.com

Post reply on HN
Print view View original

171–180 of 200 posts

Re: Moving from reCAPTCHA to hCaptcha

#171

Post by hombre_fatal »

drusepth wrote: post #165
cdubzzz wrote: post #131

Earlier quoted context omitted.

> IMHO CPATCHA is a lazy way to protect your service as you shift the burden to your users. What is the non-lazy solution to having a basic website contact form that _doesn't_ receive hundreds of spam submission per day?

Like most kinds of gated security, many solutions are borne out of inspecting the payload instead of who's sending it. Captchas prevent bots from submitting spam, but they don't prevent humans from submitting spam. In 99% of cases, your problem is the spam, not who is submitting it. The non-lazy solution is to look at the content itself and directly determine whether it's spam, instead of relying on a related heurist…

This isn't an alternative solution, just one you could do alongside making it difficult for drive-by bot spam.

For example, let's look at an actual service for identifying spam payloads: Akismet. It still lets a lot of spam through, especially in non-English languages.

Re: Moving from reCAPTCHA to hCaptcha

#172

Post by hombre_fatal »

noncoml wrote: post #144
cdubzzz wrote: post #131

Earlier quoted context omitted.

> IMHO CPATCHA is a lazy way to protect your service as you shift the burden to your users. What is the non-lazy solution to having a basic website contact form that _doesn't_ receive hundreds of spam submission per day?

"receive hundreds of spam submission per day" But this is exactly the point I am trying to make. That's the service provider's problem and not the user's. CAPTCHA shifts the problem to the user. CAPTCHA is a 00's idea, when we had the multiple page registrations(with errors showing only after you submit the page), the insane password requirements, etc.. It doesn't belong to modern stack in my opinion. "What is the no…

The vast majority of users never see a recaptcha puzzle when you're using v2's invisible recaptcha.

Re: Moving from reCAPTCHA to hCaptcha

#173

Post by ronyfadel »

alexnewman wrote: post #84

Hey everyone. HCaptcha founder here. We are so happy to be on hackernews. I'm curious if anyone is having any problems? We are trying hard to respond carefully to customer requests but as you can guess we are very busy. Also we are hiring :)

Hey Alex, one suggestion, the HCaptcha challenge box is way to tall, sitting at 725px, it's larger than the chrome viewport on a 13" MBP, so I have to keep on scrolling up and down to solve the captcha.

Re: Moving from reCAPTCHA to hCaptcha

#174

Post by wongarsu »

JakeTheAndroid wrote: post #126
wongarsu wrote: post #107

Earlier quoted context omitted.

According to the article Cloudfront is paying, but is paying "a fraction of what reCAPTCHA would have [cost]". Recaptcha is $1/1000 challenges, so apparently hcaptcha is some small fraction of that. Cloudfront might get a discount for running some of the infrastructure on their own servers, on the other hand that might also be an integration hassle that actually costs them money.

*Cloudflare

right, I don't know where I was with my thoughts when I wrote that.

Re: Moving from reCAPTCHA to hCaptcha

#175

Post by Reelin »

therein wrote: post #132
101404 wrote: post #85

Earlier quoted context omitted.

I see a million dollar lawsuit for discrimination >:-}

Now imagine if that ReCAPTCHA was served on an equal opportunity lender's website or on a job application form.

In a way, it is. I've occasionally encountered it on county and state government websites in the US.

Re: Moving from reCAPTCHA to hCaptcha

#176

Post by SquareWheel »

hombre_fatal wrote: post #172
noncoml wrote: post #144

Earlier quoted context omitted.

"receive hundreds of spam submission per day" But this is exactly the point I am trying to make. That's the service provider's problem and not the user's. CAPTCHA shifts the problem to the user. CAPTCHA is a 00's idea, when we had the multiple page registrations(with errors showing only after you submit the page), the insane password requirements, etc.. It doesn't belong to modern stack in my opinion. "What is the no…

The vast majority of users never see a recaptcha puzzle when you're using v2's invisible recaptcha.

And 0% of users see it if you're using reCaptcha v3.

Re: Moving from reCAPTCHA to hCaptcha

#177

Post by alexnewman »

ronyfadel wrote: post #173
alexnewman wrote: post #84

Hey everyone. HCaptcha founder here. We are so happy to be on hackernews. I'm curious if anyone is having any problems? We are trying hard to respond carefully to customer requests but as you can guess we are very busy. Also we are hiring :)

Hey Alex, one suggestion, the HCaptcha challenge box is way to tall, sitting at 725px, it's larger than the chrome viewport on a 13" MBP, so I have to keep on scrolling up and down to solve the captcha.

You would not believe how much we think about these things. We appreciate the feedback and will continue to tune for every puzzle. Thank you so much for the feedback.

Re: Moving from reCAPTCHA to hCaptcha

#179

Post by alexnewman »

kevindong wrote: post #104

There are plenty of services that will happily accept a screenshot from a developer, send it out to live humans who solve it in real time, and then return the answers to the developer. I'm not going to link to them, but you can find them yourself by googling "buy recaptcha solver". The prices for the top two results are $0.50 and $1.39 per 1000 solves (respectively, $0.0005 and $0.00139 per solve). At that price poin…

HCaptcha's enterprise solution is designed to detect this threat and other's.
Post reply on HN