Live data from Hacker News

Breaking the 4Chan CAPTCHA

nullpt.rs

251–260 of 378 posts

Re: Breaking the 4Chan CAPTCHA

#251
post #167

Earlier quoted context omitted.

4chan doesn't care about human annoyance. They just started doing a 15 minute post delay, which is infuriating. I had to whitelist 4chan in Cookie AutoDelete.

Hi fellow cookie autodeleter, I experienced the same thing, but I just decided to stop posting. Whitelisting felt too much like giving in to terrorists. I'm considering just not going there in the future. Maybe after all this time I will finally be free.

Same. In my case I always use a separate incognito mode browser for posting and a regular locked-down browser with JS disabled etc. So I'd have to either give in and leave the incognito mode browser running in the background while I browser on the main browser, or give in and stop blocking as aggressively on the main browser, and I chose to do neither and just stop posting.

Given the schizos that are still present and drowing out the conversation in half the threads I read, there wouldn't be a point to posting anyway.

Re: Breaking the 4Chan CAPTCHA

#252
post #212

Earlier quoted context omitted.

> Why do you do this? Money, obviously. I'd also do it for $30-150k/year > you know most users of forums and imageboards don’t want any AI content at all. He's not creating or posting any "AI content"?

Okay, but you know his actions are enabling more AI content and spam to proliferate? I hardly think he is making that much money just because legitimate users don't want to fill in a captcha.

Everyone's got their price. I would certainly do dirty deeds myself for the right amount.

Re: Breaking the 4Chan CAPTCHA

#253

Earlier quoted context omitted.

It’s very easy to opine about the ethics others should have. Different when it’s you and your family and a comparatively easy effort will make a material difference in quality of life. And especially when you know ghe market need will be met by someone else anyway.

So you get a bit richer for less effort... but how do you think moderating legions of spam posts affects the lives of independent website owners, who just want to create communities around the things they love? Or indeed the users, who have to wade through trash invading their threads? Or other legitimate users, who now have to answer captchas from CloudFlare just to access their favourite websites? Ultimately this i…

HN moderates spam without the use of AI-crackable "prove you're a human" bs

Re: Breaking the 4Chan CAPTCHA

#254

For those that don't know, the JKCS extension has been doing this for years already: https://addons.mozilla.org/en-US/firefox/addon/jkcs/ https://chromewebstore.google.com/detail/joshi-koukousei-cap... Userscript version: https://github.com/drunohazarb/4chan-captcha-solver

I really hope my post didn't come off as if I was trying to make it sound like this was a new idea. Regardless, this is good information, because it counters the posts of the form "great, now that you made this, you're going to make it harder."

I didn't look at it that way, just maybe that you (and/or others) might not have been aware of its existence since I didn't see it mentioned anywhere.

Re: Breaking the 4Chan CAPTCHA

#255
post #13

Appropriate response by 4Chan to this: simplify the human work given that anyway it's simple to solve via NNs. We are at a point where designing very hard captchas has high probabilities to increase the human annoyance without decreasing the machine solvability.

> simplify the human work given that anyway it's simple to solve via NNs. We are at a point where designing very hard captchas has high probabilities to increase the human annoyance without decreasing the machine solvability Or disallow free users to post at all, and require everyone to buy the 4chan Pass for $20 USD per year if they want to post. https://4chan.org/pass This is already available to not have CAPTCHA.…

That would work. It would also kill the site.

Re: Breaking the 4Chan CAPTCHA

#256
post #219

Earlier quoted context omitted.

> Not the rampant racism or sexism or simple misanthropy or outright calls to violence or overflowing hostility. Isn't that more easily solved by just not visiting the site in the first place?

This problem is a societal one, it mostly harms you indirectly by creating spaces for hateful ideas to spread, 4chan's harm is through the capacity to organize and strengthen hateful and harmful political movements. More socially conscious people not visiting the site only serves to create a stronger echo chamber.

This is how oppression starts. First it's "let's only get rid of the most offensive content", then "let's suppress opinions we don't like".

Re: Breaking the 4Chan CAPTCHA

#257
post #167
post #13

Appropriate response by 4Chan to this: simplify the human work given that anyway it's simple to solve via NNs. We are at a point where designing very hard captchas has high probabilities to increase the human annoyance without decreasing the machine solvability.

4chan doesn't care about human annoyance. They just started doing a 15 minute post delay, which is infuriating. I had to whitelist 4chan in Cookie AutoDelete.

Just stop posting there. The whole point of it is to post anonymously in a high traffic forum. The rate limiting timers have reduced traffic to the point many boards feel dead, and their solution to that problem is to sell accounts.

Re: Breaking the 4Chan CAPTCHA

#258

Earlier quoted context omitted.

Makes me wonder what comes next. Could we create a forum where every member must do a 15 minute video interview with a moderator? I know this "doesn't scale" but I think it could make for a funny gimmick.

We are increasingly moving to ID checks. Australia law just now. For all its faults it solves spam as side effect.

There are lots of random ID documents available on dark networks however.

Re: Breaking the 4Chan CAPTCHA

#259

Semi-related but I needed a CAPTCHA on my site[0] mainly to block comment form spam and settled on repurposing a fun method I’d seen before. Is definitely not foolproof (or hard at all), but I really liked making it. [0] https://www.hybridlogic.co.uk/contact

Reminds me of the Doom captcha. https://vivirenremoto.github.io/doomcaptcha/

99% certain this is where I copied the idea from.

Re: Breaking the 4Chan CAPTCHA

#260
post #130

I wonder if it would be better to pretend to have a captcha but really you are analysing the user timing and actions. Honestly I half suspect this is already going on. If you wanted to go full meta "never go full meta" you would train a AI to figure out if the agent on the other side was human or not. that is, invent the reverse turing test. it's a human if the ai is unable to differentiate it's responses from normal…

That's kinda what every major captcha distributor does already! Even before captcha is being served your TLS is first fingerprinted, then your IP, then your HTTP2, then your request, then your javascript environment (including font and image rendering capabilities) and browser itself. These are used to calculate a trust score which determines whether captcha will be served at all. Only then it makes sense to analyze…

Re: your last paragraph, https://coveryourtracks.eff.org/

EFF have been running this for years. Gives an estimate about how many unique traits your browser has. Even things like screen resolution are measured.

Post reply on HN