Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Doom Captcha (2021)

vivirenremoto.github.io

Post reply on HN
Print view View original

31–40 of 136 posts

Re: Doom Captcha (2021)

#31

Post by evgpbfhnr »

sugarkjube wrote: post #9

Absolutely love it. Unusual captcha's are great. Reminded me of this one: http://random.irb.hr/signup.php

You don't actually need much, for a form I used to get spam in I just added a "write 42 here" so anyone who actually cares to read would be able to fill it. spam fell to 0.

(for a site with a slightly higher profile this wouldn't be enough, but for a minor corner of the internet with no ill intent actually aimed at it that turned out to be enough to block the fuzzing "fill all the forms" spam)

Re: Doom Captcha (2021)

#33

Post by wahnfrieden »

corysama wrote: post #24

Unfortunately, just this week someone fine-tuned the Mistral-7B LLM to play DOOM :P https://news.ycombinator.com/item?id=39813174

any models fine tuned for playing an open src game that is non-GPL so that it can be deployed to the app store for interesting bot play ideas?

Re: Doom Captcha (2021)

#36

Post by corysama »

brcmthrowaway wrote: post #34
corysama wrote: post #24

Unfortunately, just this week someone fine-tuned the Mistral-7B LLM to play DOOM :P https://news.ycombinator.com/item?id=39813174

How could this possibly be in the training set?

It’s not. The fine tuning taught the LLM how to give single-character responses (move/fire keyboard controls) in response to a sequence of ASCII-art-ized frames of the game being played.

Re: Doom Captcha (2021)

#37

Post by koito17 »

sugarkjube wrote: post #9

Absolutely love it. Unusual captcha's are great. Reminded me of this one: http://random.irb.hr/signup.php

The question I got was surprisingly simple: it asked to find "the least real root of the polynomial p(x) = (x+5)(x-4)(x+1)". A determined attacker can quickly hack together something with Tesseract and feed it into even GPT-3.5 to get the correct answer to questions like these.

I guess that means the captcha is doing its job, since running LLMs isn't very cheap or scalable. But any harder problem means you start filtering a significant chunk of human users. Based on the other replies to your comment, it seems that the questions at their current difficulty already stop a lot of human users, yet allow a determined attacker with the setup I described pass through easily.

Re: Doom Captcha (2021)

#38

Post by paulryanrogers »

Not really Doom, a few years old, and now broken apparently. IIRC it was basically just a mouse only shooting gallery mini-game.

EDIT: Not broken, just not obvious one must click the sound options to start. Still just a mouse gallery mini-game. Doubtful you'd even need AI to solve it.

Re: Doom Captcha (2021)

#39

Post by RockRobotRock »

duskwuff wrote: post #21
frozenlettuce wrote: post #16

Earlier quoted context omitted.

If they switch to canvas rendering and include some twist (eg. shoot x but not y, limit input rate, etc), then I think that a considerable computing effort would be necessary to break the lock

And if you analyzed the user's cursor movements (on desktop), reaction time, and positional accuracy, it could be a genuinely decent CAPTCHA.

I'm in awe at the late stages of this cat and mouse game. I write a lot of bots and scrapers, and I feel thoroughly out-gunned against a bunch of PhD data scientists.

DataDome talk about detection: https://youtu.be/xJGBfSGIsjw

Re: Doom Captcha (2021)

#40

Post by tiltowait »

modeless wrote: post #26

Why isn't it actually Doom? Surely there are multiple JS Dooms to choose from.

"Finish UV Hangar in Easily achievable[0], thoroughly obnoxious[1]. Just like all captchas.

[0] God help you if you're on a touchscreen. [1] For most people. Especially after the novelty wears off.

Post reply on HN