Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Breaking the 4Chan CAPTCHA

nullpt.rs

Post reply on HN
Print view View original

351–360 of 378 posts

Re: Breaking the 4Chan CAPTCHA

#351

Post by codexon »

WeylandYutani wrote: post #331
codexon wrote: post #287

Earlier quoted context omitted.

A lot of people think 4chan is one of the last bastions of free speech on the internet because they see a lot of racism that would normally be banned anywhere else. But if you post something that goes against the alt-right that pisses them off too much and getting a lot of replies, it'll be deleted within minutes, or you'll even get banned for being "off topic". 4chan is not free speech, it is just a haven for the al…

No politics and news is just one board. You can go to 4chan to discuss more important things such as videogames.

Its not just the pol board as I showed in my other comments.

I don't use the videogame board so I do not know if anti alt-right comments there get deleted, but I find it hard to believe that anybody is going to be emotionally invested enough to delete posts that say "game X is going to succeed even when it is woke".

From a random search it looks like there's a lot of racist or alt-right aligned political comments there that never get deleted though.

Re: Breaking the 4Chan CAPTCHA

#352

Post by costco »

poincaredisk wrote: post #186
bawolff wrote: post #58

There is a reason why people moved away from distorted text based captcha. We are basically at the point where computers are better at them then humans. https://www.usenix.org/system/files/conference/woot14/woot14... is a paper on the subject i think is really interesting However a surprising amount of text based captchas can be solved in a few line shell script of, using imagemagik to convert to greyscale, dilate an…

Small? From your own link, recaptcha v3 takes 10-15s and costs $1.3 for 1000 captchas. This is actually huge, and cost prohibitively expensive for many things where you would want to use it (like scrapping a large website).

Depends on the website, but you don't get always get a recaptcha, so the cost is a lot lower than that. You usually get it if you're exceeding some rate limit or you're doing a sensitive action like registering.

Re: Breaking the 4Chan CAPTCHA

#353

Post by winrid »

Dachande663 wrote: post #261
winrid wrote: post #164

Earlier quoted context omitted.

It says I've been blocked when I try to view that. Not on a VPN.

The site runs off of a tiny little server at home so I’ve got some very aggressive firewall rules. Anything from the usual bad countries, certain signatures etc are blocked. Reduced traffic to 1% of previous load.

I'm in silicon valley in the USA on Comcast lol

Re: Breaking the 4Chan CAPTCHA

#354

Post by account42 »

chamomeal wrote: post #226
Dachande663 wrote: post #162

Semi-related but I needed a CAPTCHA on my site[0] mainly to block comment form spam and settled on repurposing a fun method I’d seen before. Is definitely not foolproof (or hard at all), but I really liked making it. [0] https://www.hybridlogic.co.uk/contact

No way, that is a cool fucking captcha!!

Cool as a one-off use on some random blog contact form. Infuriatingly annoying if used somewhere you have to solve it with any frequency.

Re: Breaking the 4Chan CAPTCHA

#355

Post by account42 »

winrid wrote: post #353
Dachande663 wrote: post #261

Earlier quoted context omitted.

The site runs off of a tiny little server at home so I’ve got some very aggressive firewall rules. Anything from the usual bad countries, certain signatures etc are blocked. Reduced traffic to 1% of previous load.

I'm in silicon valley in the USA on Comcast lol

That fits the usual bad countries filter alright.

Re: Breaking the 4Chan CAPTCHA

#356

Post by account42 »

hamilyon2 wrote: post #347
brookst wrote: post #224

Earlier quoted context omitted.

Wouldn’t a well-intentioned bot follow robots.txt anyway?

Curl and libcurl doesn't. Wget doesn't, I think.

CURL isn't a bot, it's a tool. It can be part of a bot (which may or may not respect robots.txt) but it can also just act as a user agent directly for a human operator in which case it SHOULD just do what asked. Chrome doesn't follow robots.txt either for the same reason.

Re: Breaking the 4Chan CAPTCHA

#357

Post by tayiorrobinson »

chamomeal wrote: post #226
Dachande663 wrote: post #162

Semi-related but I needed a CAPTCHA on my site[0] mainly to block comment form spam and settled on repurposing a fun method I’d seen before. Is definitely not foolproof (or hard at all), but I really liked making it. [0] https://www.hybridlogic.co.uk/contact

No way, that is a cool fucking captcha!!

Cool, sure, good, probably not. I've never played Halo so I didn't entirely know what I was doing (do I shoot the blue guys too? it's not letting me through so I guess I do), and I don't doubt people couldn't even get what it meant by shoot. And god forbid anyone with disabilities that affects their mouse accuracy, or needs a screen reader tries to use it

Haven't looked at the devconsole but it'd probably be easily bypassed by someone dedicated.

Re: Breaking the 4Chan CAPTCHA

#358

Post by numpad0 »

irusensei wrote: post #305
numpad0 wrote: post #156

Earlier quoted context omitted.

That sounds old 2ch.net. Was that plan from Hiroyuki, by chance? IIRC they entrusted the key to kingdom to that guy, or am I mistaken...

Hiro owns 4chan. I remember something about Moot giving him the website for free.

I was aware that he was involved in ops, but didn't know he has full control, thanks...

Re: Breaking the 4Chan CAPTCHA

#359

Post by wraptile »

zoltrix303 wrote: post #151
wraptile wrote: post #135

Earlier quoted context omitted.

That's kinda what every major captcha distributor does already! Even before captcha is being served your TLS is first fingerprinted, then your IP, then your HTTP2, then your request, then your javascript environment (including font and image rendering capabilities) and browser itself. These are used to calculate a trust score which determines whether captcha will be served at all. Only then it makes sense to analyze…

Would it be possible to serve a fake fingerprint that appears legitimate? Or even better mimic the finger print of real users who've visited a site you own for example?

Yes, that's what web scraping services do (full disclaimer I work at scrapfly.io). Collecting fingerprints and patching the web browser against this fingerprinting is quite a bit of work so most people outsource this to web scraping APIs.

Re: Breaking the 4Chan CAPTCHA

#360

Post by [deleted] »

imchillyb wrote: post #326
aguaviva wrote: post #312

Earlier quoted context omitted.

There are no bad countries, only bad streams of traffic. Some of which have been observed to be associated with certain countries.

I believe even a cursory examination of recent history to show your premise to be less than truthful. There are bad actors. There are bad groups of actors. There are bad political regimes of groups of bad actors. There are countries made up of bad political regimes made up of groups of bad actors.

[deleted]
Post reply on HN