Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

bitbucket.org

Post reply on HN
Print view View original

91–100 of 128 posts

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#91

Post by knicholes »

Freak_NL wrote: post #33
EGreg wrote: post #15

Earlier quoted context omitted.

Can someone please explain to me why smart people keep saying that we’ll just build software to detect deepfakes? When AlphaZero plays against itself it just gets better. Once that spread is so narrow, every deviation is in the range of possible error. And it can’t explain WHY a certain move is better or why the picture is a squirrel. And sometimes it can be wrong, but only on hilarious edge cases, in the rest we jus…

Sci-fi author John Varley covered this in one of his novels. In a society where anything digital can be manipulated, the veracity of a speech or event depends on a network of trust and people who witnessed the event in real life . If someone made a speech in front of hundreds of live, physically present spectators, these spectators can then verify the authenticity of any recording, and as long as there people in that…

Maybe there needs to be created a "Witness Coin" ledger, where events happened if enough people say they did.

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#92

Post by deegles »

EGreg wrote: post #15
nkingsy wrote: post #3

Step 1: Use Captcha to get free AI training data. Step 2: Sell improved AI. Step 3: Add edge cases to the Captcha that your AI can't handle yet. Go to step 1.

Can someone please explain to me why smart people keep saying that we’ll just build software to detect deepfakes? When AlphaZero plays against itself it just gets better. Once that spread is so narrow, every deviation is in the range of possible error. And it can’t explain WHY a certain move is better or why the picture is a squirrel. And sometimes it can be wrong, but only on hilarious edge cases, in the rest we jus…

There's a scifi book where AGI arises from the ever escalating battle between spam bots and spam detectors, sometimes it feels like we're not too far away from that :)

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#93

Post by [deleted] »

chrismorgan wrote: post #83
gnopgnip wrote: post #68

Earlier quoted context omitted.

Google doesn't pass or fail, it gives a score and leaves it up to the site operator.

You’re dealing with two different things. reCAPTCHA v2 and the badly named Invisible reCAPTCHA¹ assess the user and either let them in, or gate them on puzzle solving. So, it does pass or fail you, where fail means trap you in purgatory indefinitely (though some hold it’s actually hell rather than purgatory). reCAPTCHA v3 never presents a CAPTCHA for you to solve, but decides a score (in practice, I’ve only seen 0.1,…

[deleted]

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#96

Post by chris_va »

saagarjha wrote: post #75
gnopgnip wrote: post #68

Earlier quoted context omitted.

Google doesn't pass or fail, it gives a score and leaves it up to the site operator.

They only did that so they could shift the blame/responsibility of making the classification to website operators instead of themselves.

It's a library for web developers... Is it so terrible to return a float instead of a bool?

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#97

Post by saagarjha »

chris_va wrote: post #96
saagarjha wrote: post #75

Earlier quoted context omitted.

They only did that so they could shift the blame/responsibility of making the classification to website operators instead of themselves.

It's a library for web developers... Is it so terrible to return a float instead of a bool?

Yes, because it's going to return a small float for anything that Google thinks is "suspicious" (including using Safari or Firefox) and websites will block it as if Google returned "no", except Google is absolved of the criticism that they return bad results for people who value their privacy ("if you don't like it, you should set your confidence lower…")

Re: Beating Google ReCaptcha and the funCaptcha using AWS Rekognition

#98

Post by hinkley »

Is there really no way to passively collect enough data from the user agent to determine the likelihood that an actual human was involved?

I suppose there are a bunch of privacy and corner cases that would mess that up (for instance, composing a reply in a text editor and pasting it would be indistinguishable from a bot).

Has anyone tried? Are there write-ups I could read about?

Post reply on HN