Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google's Captcha in Firefox vs. in Chrome

grumpy.website

Post reply on HN
Print view View original

341–350 of 503 posts

Re: Google's Captcha in Firefox vs. in Chrome

#341

Post by periphery »

worble wrote: post #157
AdmiralAsshat wrote: post #69

Earlier quoted context omitted.

There have literally been times where I debated whether or not I wanted to purchase something because of the knowledge that I would have to solve Google's captcha. Humble Bundle, in particular--the login process for me (due to uBlock+uMatrix installed) is like this: 1) Try to login 2) Login doesn't show up--go to uMatrix and whitelist some crap. 3) Try to login again. 4) First phase of login completes, now blank when…

>Humble Bundle, in particular Funny you should mention that, I actually wrote an email to support asking them to have frickin mercy with the google captchas. The response was as you expect "we do this for safety and protection, yada yada" which to be fair, I obviously didn't expect them to change anything, although I hope it did help raise some awareness. The interesting thing I got out of it was that they mentioned…

I wrote to them asking to close my account for exactly the same reason. Recaptcha was making me less inclined every visit to buy something.

Re: Google's Captcha in Firefox vs. in Chrome

#342

Post by modzu »

reaperducer wrote: post #319
mitchty wrote: post #316

Earlier quoted context omitted.

> The problem with recaptcha alternatives is that they either are insecure or require time and money to continue to be ahead of bots. Sure great, but when I see behavior like the above, I just hit back and add the site to my routers firewall black list. If its this much of a PITA to "solve" a captcha, CORRECTLY but I keep getting the middle finger I don't give a crap anymore. Your site isn't worth going to if I have…

Your site isn't worth going to if I have to spend literally minutes "solving" captchas for googles stupid ai which is treating me like prove i'm a bot even when I prove i'm not. I've run into state and local tax agencies, utility companies, and large healthcare companies that require Google's reCAPTCHA. So, unless you don't want healthcare, to have water service at your home, or you're in the mood to just shut down y…

i say the same thing to my friend in a wheelchair -- "suck it up handycapper and pull yourself up the stairs".

there was a time not long ago before wheelchair ramps or accessible doors were commonplace. these people were literally shut out of society.

its the same with captcha forcing privacy-conscious users off the internet.

Re: Google's Captcha in Firefox vs. in Chrome

#343

Post by progval »

pmontra wrote: post #159
judge2020 wrote: post #112

Earlier quoted context omitted.

The problem with recaptcha alternatives is that they either are insecure or require time and money to continue to be ahead of bots. All of the "interactive stand-alone approaches" from that page can be beaten with run-of-the-mill OCR (other than perhaps the 3d challenge) and with almost any mobile phone speech recognition engine (and, if the attacker has the money, can send it off to Google's cloud speech-to-text). A…

I implemented simple question / answer antibot filters on registration forms for a few sites. Nobosy ever made the effort to customize their bot to answer to those very few questions. I guess it doesn't make sense economically. However if a big site would go that way, it would be filled with bots in a day.

I did that for on an old forum that has been dead for year, I thought spammers would not care enough.

But one of them did! Whenever I changed the questions, bots would stop for a few days, and then start again. Someone cared enough to manually enter the correct responses (no, blind dictionary attacks were not possible)!

Re: Google's Captcha in Firefox vs. in Chrome

#344

Post by steelframe »

reaperducer wrote: post #319
mitchty wrote: post #316

Earlier quoted context omitted.

> The problem with recaptcha alternatives is that they either are insecure or require time and money to continue to be ahead of bots. Sure great, but when I see behavior like the above, I just hit back and add the site to my routers firewall black list. If its this much of a PITA to "solve" a captcha, CORRECTLY but I keep getting the middle finger I don't give a crap anymore. Your site isn't worth going to if I have…

Your site isn't worth going to if I have to spend literally minutes "solving" captchas for googles stupid ai which is treating me like prove i'm a bot even when I prove i'm not. I've run into state and local tax agencies, utility companies, and large healthcare companies that require Google's reCAPTCHA. So, unless you don't want healthcare, to have water service at your home, or you're in the mood to just shut down y…

I default to paper mail with things like written checks for that sort of thing. Never had a problem.

Re: Google's Captcha in Firefox vs. in Chrome

#345

Post by anticensor »

cameronbrown wrote: post #138
briandear wrote: post #121

Earlier quoted context omitted.

Sending my data to Google as a condition of using someone else’s site also isn’t secure. Training Google AI also isn’t something I signed up for.

Not saying I like the precedent of Google being inescapable, you're not "signing up" for anything. A web server is 100% in its rights to refuse to send you a page, on their terms.

You seem to be a bot. Write a poem describing the outage and email it at larry@google.com . We will look at it and unblock you if we believe you are a human.

Re: Google's Captcha in Firefox vs. in Chrome

#346

Post by gwoplock »

driverdan wrote: post #257
ehsankia wrote: post #118

Earlier quoted context omitted.

If you come up with another way that is as effective in an ever growing world of bots trying to break anything in their way, I would love to use it. I've had to pay 100x bills on my monthly quota once too often, and as a hobby developer, I just can't afford trying to fight off people abusing my website every day. Yes, resorting to fingerprinting is not ideal, but what's better, asking everyone to solve that hard capt…

Use self-hosted CAPTCHA with simpler solutions. They still keep out the stupid bots that can't get past ReCAPTCHA.

> Use self-hosted CAPTCHA with simpler solutions

My favorite CAPTCHA is the one on the Arch Linux forms but I realize this cant be used many places. > What is the output of "date -u +%V$(uname)|sha1sum|sed 's/\W//g'"?

Easy to do but hard to do with computers. My second favorite are the math problems one.

However if these become popular people will just write bots for them and were back to square 1.

Re: Google's Captcha in Firefox vs. in Chrome

#347

Post by sib »

emiliobumachar wrote: post #246
mikro2nd wrote: post #200

Earlier quoted context omitted.

Even more annoying are those sites that insist on using it, even though they know I'm human -- for reasons like I've paid them some money or jumped through their KYC hoops. At that point it's just being rude and exploitive, and, personally, I've reached the point where I'll simply take my business elsewhere if a site chooses to treat me with so little basic respect.

There's a case for preventing bot action even if the bot is willing to pay. Though putting a captcha right after a payment step is borderline fraud. What's KYC?

"Know your customer"

https://en.wikipedia.org/wiki/Know_your_customer

Re: Google's Captcha in Firefox vs. in Chrome

#348

Post by BearsAreCool »

squidi wrote: post #228
mikro2nd wrote: post #195

Earlier quoted context omitted.

There's a third problem: quite a bit of the stuff they present is (almost) uniquely American and presents a recognition challenge in other cultural contexts. That yellow vehicle? Looks nothing like a bus in most other parts of the world. And so the rest of the world gets to learn what an American Bus looks like... Not, I think, what was intended.

E.g “Spot the fire hydrant” - oh, it’s those things that cops drive over in Hollywood movies. I don’t know if other counties have them too but it seems distinctly American and this capatcha is oddly common

Are you in america or using a vpn that shows as in america?
Post reply on HN