381–390 of 503 posts
Earlier quoted context omitted.
Reading these types of comments on HN, you'd think HN doesn't use Recaptcha for login/register. ;) Easy to hate on Recaptcha while reaping the rewards of participating in a community that deals with less automated spam because of it. :)
> HN doesn't use Recaptcha for login/register I just created a new account to check; not even so much as a Recaptcha url in the page source.
I've never understood what happened to reCAPTCHA, it was originally so great and is now just so, so toxic. Originally it was an awesome solution based on OCR'ing books that usually worked quickly on the first try, and almost never took more than two. Then it turned into a single checkbox (analyzing mouse movement) so it was even faster... and I remember some simple image-based like "select the images of cats" that we…
Earlier quoted context omitted.
reCAPTCHA also just doesn't work in the most populous country in the world. translate.google.cn does, but Google's reCAPTCHA does not. This is a big pain point. Thanks for the link to turingtest, I will certainly test it.
reCaptcha works just fine in India. It does have some troubles in the world's second most populous country.
Earlier quoted context omitted.
Hobby sites may be in a more difficult position, but businesses may decide between developer convenience and low cost, or excluding some of their users and tormenting them. There are also ways to reduce the damage reCAPTCHA causes, such as keeping it out of the default UX path. Discord for example will show a reCAPTCHA challenge on the login page only if you are signing in from a new location. reCAPTCHA cannot effect…
OK, Discord specifically is terrible. I login in incognito mode from the same location/browser every time, and have to deal with Captcha most of the time.
I've never understood what happened to reCAPTCHA, it was originally so great and is now just so, so toxic. Originally it was an awesome solution based on OCR'ing books that usually worked quickly on the first try, and almost never took more than two. Then it turned into a single checkbox (analyzing mouse movement) so it was even faster... and I remember some simple image-based like "select the images of cats" that we…
I think two things happened: 1) Computer vision got a lot better over the past few years. It's also become way easier for the average Joe bot operator to run cutting-edge stuff. OCR tasks don't cut it for distinguishing people from machines any more. Every time I see a blog post about a new computer vision architecture or how some random developer trained a neural network to get an X% result on benchmark Y, I think t…
Earlier quoted context omitted.
Yeah, but then again, so many times that I run into Captcha issues, it's on a site that really doesn't need Captcha to begin with. Why make me solve a Captcha to see static content? Why make me solve a Captcha to log in when I've already completed one to register? Why make me solve a Captcha to pay utility bills? Is there some underground group of deviants going around surreptitiously paying other people's utility bi…
> Why make me solve a Captcha to see static content? Fair point, I usually run into this when using Tor, or VPN when accessing content behind Cloudflare, and or similar services. This is some anti abuse stuff, but is often overly agressive with giving you captchas. > Why make me solve a Captcha to log in when I've already completed one to register? So attackers cannot password spray. This is typically after attackers…
My password's not crackable, so it's annoying to be lumped in to that. I'd happily use a service-generated password to avoid login hassles.
Earlier quoted context omitted.
> …only if you are signing in from a new location. Or you clean your cookies out, thank you "Cookie Autodelete".
I don't understand this. You're logging in from a fresh browser. Do you want sites to fingerprint you in other ways so you can clear your cookies and not have to deal with captchas?
Earlier quoted context omitted.
OK, Discord specifically is terrible. I login in incognito mode from the same location/browser every time, and have to deal with Captcha most of the time.
I mean do you want Discord to fingerprint your browser so you don't have to deal with captchas? Kind of defeats the purpose of incognito doesn't it?
They're going to track my IP whether I want them to or not. So they should go ahead and use it to reduce hassle.
Earlier quoted context omitted.
Not entirely accurate. The GDPR restricts the terms they can use, for example. And anti-discrimination law probably also applies. These don't really apply to captcha, of course, under current interpretations.
It's very easy to argue that CAPTCHA is an essential service and therefore not under GDPR. > anti-discrimination law Google-avoiders are not a protected class.
The fire hydrant example... I deal with this every day. It takes soooo looooong to load, it's really ridiculous.
There have literally been times where I debated whether or not I wanted to purchase something because of the knowledge that I would have to solve Google's captcha. Humble Bundle, in particular--the login process for me (due to uBlock+uMatrix installed) is like this: 1) Try to login 2) Login doesn't show up--go to uMatrix and whitelist some crap. 3) Try to login again. 4) First phase of login completes, now blank when…