Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Google's Captcha in Firefox vs. in Chrome

grumpy.website

Post reply on HN
Print view View original

441–450 of 503 posts

Re: Google's Captcha in Firefox vs. in Chrome

#441

Post by mdekkers »

llao wrote: post #28

While relatable, this is just a low effort post more suited for Twitter or Reddit. For a fair comparison OP would need to use clean browser profiles on fresh IPs. Like this it is just fan-service for Google Captcha victims (like me).

>this is just a low effort post more suited for Twitter or Reddit

Are you gatekeeping HN? 1199 votes on the link at this point appear to disagree with you. Like it is, your comment is simply virtue-signalling and contributes nothing to the discussion. Perhaps these type of comments are better suited to Twitter or Reddit.

Re: Google's Captcha in Firefox vs. in Chrome

#442

Post by kalleboo »

SCHiM wrote: post #94

Big rant, there are few things I hate more than filling out their endless useless CAPTCHA's when browsing websites that have nothing to do with Google. Google is a hypocritical pile of burning . They use bots right? They scrape websites, they infest everything from my banking website to console emulators with their tracking, and yet we little people are not allowed to scrape or interface with the web programmatically…

> Big rant, there are few things I hate more than filling out their endless useless CAPTCHA's when browsing websites that have nothing to do with Google

In some cases, the blame should be put on the site runners. I get a ReCAPTCHA when logging into my Patreon account. I've been paying then $10+/month for years now, they should know by now I'm not a spammer

Re: Google's Captcha in Firefox vs. in Chrome

#443

Post by LaGrange »

basilgohar wrote: post #431
atombender wrote: post #427

Earlier quoted context omitted.

Rate limit by what? IP? Botnet traffic will originate at random IPs.

By the account. 3 failed login attempts in a row, and you disallow further logins for 30 seconds. This should waste less time than reCAPTCHAs. I know it's not 1:1 in terms of pros/cons, but it gets a good subset of the advantages without the key disadvantages mentioned above.

> By the account. 3 failed login attempts in a row, and you disallow further logins for 30 seconds.

...congratulations, I just locked out all of your users. Have a nice day.

Re: Google's Captcha in Firefox vs. in Chrome

#444

Post by therein »

Dylan16807 wrote: post #386
DownGoat wrote: post #290

Earlier quoted context omitted.

> Why make me solve a Captcha to see static content? Fair point, I usually run into this when using Tor, or VPN when accessing content behind Cloudflare, and or similar services. This is some anti abuse stuff, but is often overly agressive with giving you captchas. > Why make me solve a Captcha to log in when I've already completed one to register? So attackers cannot password spray. This is typically after attackers…

> So attackers cannot password spray. My password's not crackable, so it's annoying to be lumped in to that. I'd happily use a service-generated password to avoid login hassles.

I imagine what you are proposing then is to record the entropy on the password when you first register and for accounts with sufficient password entropy to not ask for a captcha after few failed attempts.

With that, the site gives away whether the account has a low entropy password or not.

Re: Google's Captcha in Firefox vs. in Chrome

#445

Post by wolco »

hombre_fatal wrote: post #432
basilgohar wrote: post #431

Earlier quoted context omitted.

By the account. 3 failed login attempts in a row, and you disallow further logins for 30 seconds. This should waste less time than reCAPTCHAs. I know it's not 1:1 in terms of pros/cons, but it gets a good subset of the advantages without the key disadvantages mentioned above.

So I can lock you out of your account with 3 attempts from any IP address?

For a minute usually. Prevents flooding. Not a bad approach unless the account is constantly hit. In those cases two factor auth makes sense.

Re: Google's Captcha in Firefox vs. in Chrome

#446

Post by swang »

jandrese wrote: post #208
mikro2nd wrote: post #195

Earlier quoted context omitted.

There's a third problem: quite a bit of the stuff they present is (almost) uniquely American and presents a recognition challenge in other cultural contexts. That yellow vehicle? Looks nothing like a bus in most other parts of the world. And so the rest of the world gets to learn what an American Bus looks like... Not, I think, what was intended.

Or it tells you to pick out pictures of cars and shows you a pickup truck. Now you have to figure out if people would call that a car or not. How about a delivery truck? A motorcycle? Or it will ask for pictures of crosswalks, and you have to decide if 3 pixels of a crosswalk in the corner of one of the pictures counts.

crosswalks are also an american term for pedestrian crossings.

Re: Google's Captcha in Firefox vs. in Chrome

#447

Post by therein »

scarejunba wrote: post #313
earenndil wrote: post #267

Earlier quoted context omitted.

Rather, if it does like you (because you frequently get it right), it'll ask you to give it extra data.

Fascinating. Conspiracy theories around software. Might make for a fun sci-fi creative writing exercise.

I always envisioned their devious model to be something like:

- You want to train on an unlabeled dataset, label it along the way.

- You have a set of untrusted validators, some with no history, some with known credibility and accuracy scores. And you have a lot of them.

- You do kind of a zero-knowledge proof by showing the unlabeled dataset to validators that you know you can trust because of their historical high success rate, which you've already established through asking them to label a dataset that you already have high confidence on.

Kind of like how a blue-green colorblind person could find out which pen is blue, which pen is green if he is surrounded by people he can't fully trust. Ask people around you and maybe even show the same person the same pen (or a really dead-easy captcha) twice in a row. If they lie to you both times, they are not to be trusted.

Re: Google's Captcha in Firefox vs. in Chrome

#448

Post by piyush_soni »

autoexec wrote: post #364
reaperducer wrote: post #319

Earlier quoted context omitted.

Your site isn't worth going to if I have to spend literally minutes "solving" captchas for googles stupid ai which is treating me like prove i'm a bot even when I prove i'm not. I've run into state and local tax agencies, utility companies, and large healthcare companies that require Google's reCAPTCHA. So, unless you don't want healthcare, to have water service at your home, or you're in the mood to just shut down y…

I've even seen state and government sites using Google's reCAPTCHA. People shouldn't be required to hand over their browsing history and other information to Google for essential services, especially to use government websites.

Thankfully, Indian government websites still use their own captchas - which though not as 'secure', works for most of the cases, and don't take minutes to solve.

Re: Google's Captcha in Firefox vs. in Chrome

#449

Post by piyush_soni »

reaperducer wrote: post #319
mitchty wrote: post #316

Earlier quoted context omitted.

> The problem with recaptcha alternatives is that they either are insecure or require time and money to continue to be ahead of bots. Sure great, but when I see behavior like the above, I just hit back and add the site to my routers firewall black list. If its this much of a PITA to "solve" a captcha, CORRECTLY but I keep getting the middle finger I don't give a crap anymore. Your site isn't worth going to if I have…

Your site isn't worth going to if I have to spend literally minutes "solving" captchas for googles stupid ai which is treating me like prove i'm a bot even when I prove i'm not. I've run into state and local tax agencies, utility companies, and large healthcare companies that require Google's reCAPTCHA. So, unless you don't want healthcare, to have water service at your home, or you're in the mood to just shut down y…

Of course if it's an essential service like healthcare, formal education, paying bills etc. people will be forced to use it (if there's no option to change that service itself). But for that fancy startup showing some content for to consume when it's not necessary, I will just close that website.

Re: Google's Captcha in Firefox vs. in Chrome

#450

Post by nonamechicken »

BearsAreCool wrote: post #348
squidi wrote: post #228

Earlier quoted context omitted.

E.g “Spot the fire hydrant” - oh, it’s those things that cops drive over in Hollywood movies. I don’t know if other counties have them too but it seems distinctly American and this capatcha is oddly common

Are you in america or using a vpn that shows as in america?

I am from India, not using VPN. Except for storefronts, everything I get looks like from US-traffic lights, cars, buses (including yellow school buses), cross walks etc.
Post reply on HN