x = exp(-i)
You probably don’t need ReCAPTCHA
71–80 of 246 posts
Re: You probably don’t need ReCAPTCHA
#72Earlier quoted context omitted.
I really dont know how well that will work against a dedicated attacker. I am much more confident in ReCAPTCHA of stopping bots compared to any roll your own solution. I dont want to hope that an alternative is good enough for my needs. I want the best when it comes to protecting my site. Any alternative needs to have a proven track record and support to make consider replacing ReCAPTCHA.
So you force your users to consent to sharing all of their data with Google? That’ll teach ‘em.
What's an alternative that works at scale, though? It's easy to say "this is bad for these reasons, don't use it" while ignoring that there's not really better options once you get targeted.
Re: You probably don’t need ReCAPTCHA
#73Earlier quoted context omitted.
Y'know, this would be a great project for Mozilla, if they have the resources for it. They're already doing that crowdsourced voice training data thing.
I bet CloudFlare has the bandwidth for it.
And yet they use reCaptcha. I hit it all the time accessing sites when I was in France.
Re: You probably don’t need ReCAPTCHA
#74Earlier quoted context omitted.
https://luminati.io/#pricing
How the hell do they get people to open up their home computer to be used this way?
Users of free mobile apps (mostly games) are offered the option of allowing use of their devices as proxies as an alternative to being interrupted by ads.
Re: You probably don’t need ReCAPTCHA
#75I used to use a script to combat uncustomized spam. A hidden input would get populated with my birthday in hex and then checked on the server. Every JS based client would be able to use the forms and we went back to math captcha for noscript.
Literally thousands of spam comments per day would stop instantly on deployment. We put this on over 400 sites and never had an issue of customized spam.
Definitely agree with recaptcha not being necessary. However, it's probably needed for popular sites which you're more likely to use. Do we see more recaptcha because of that?
Re: You probably don’t need ReCAPTCHA
#76Earlier quoted context omitted.
So you force your users to consent to sharing all of their data with Google? That’ll teach ‘em.
What's an alternative that works at scale, though? It's easy to say "this is bad for these reasons, don't use it" while ignoring that there's not really better options once you get targeted.
To clarify, I do think that this post gives good alternatives because most spam is not targeted. However, you must do something like this if you're a big site or a small site who pissed someone off
Re: You probably don’t need ReCAPTCHA
#77Re: You probably don’t need ReCAPTCHA
#78ReCAPTCHA has crossed into the domain of cattle-corralling users and thus should be considered harmful. If the system decides it doesn't like you (most likely because you're "too anonymous," but you don't really know) you will be presented with slower-loading images to click and more click-all-the-things rounds. To pretend this is about slowing down bots is disingenuous as best. On top of that, usage of ReCAPTCHA per…
There should be an open source captcha solution where all the labeled images can be used to develop a model available freely to the public.
and you don’t think that will be quickly used to make a tool to break the captchas?
Re: You probably don’t need ReCAPTCHA
#79Earlier quoted context omitted.
I've seen multiple comments suggesting HN uses ReCAPTCHA, but I have never encountered it myself, and I even have Javascript disabled and login through 'anonymous' IPs such as tor, so I'm unsure what these users could be doing that is 'worse' to trigger ReCAPTCHAs. If most users don't even know that ReCAPTCHA is used, that's a good sign that it is being used as little as possible, though.
I wonder if it's from CloudFlare and not HN directly.
It is from Cloudflare. They love reCaptcha. It’s ok to give free user data to Google if it means less work for them.
Re: You probably don’t need ReCAPTCHA
#80> The comment form of my blog is protected by what I refer to as “naive captcha”, where the captcha term is the same every single time. This has to be the most ineffective captcha of all time, and yet it stops 99.9% of comment spam.
This is what we did on one of our sites. 5 minutes to implement it using a few lines of code. Same result, couldn't be happier.