91–100 of 100 posts
Earlier quoted context omitted.
There's still no need for a click.
IMHO the need for a click is just to lazy loading and thus, reducing server demand
Earlier quoted context omitted.
Using clickjacking we can get lots of valid tokens, no need to solve challenges.
You don't think Google will figure something out when a bunch of tokens from different IP addresses are all being used by one IP?
Earlier quoted context omitted.
I would argue that the problem of spam and hackers is a greater burden on society as a whole than someone in Iran not being able to get past a captcha.
I see where you are coming from, specially considering that spam makes up for a significant volume of the entire internet traffic. However, I'd think it wiser for one spammer to go free than for one person to be denied access to legitimate content. I'm often being denied access to free content because I'm accessing from the "wrong" countries, and that's infuriating. If I start being locked out of free content due to…
How many photos are in the universe of possible photos? How long would it take for outsourcing the process to tag all photos so a script could then do the matching? Is the whole point of this to encourage hackers to get working on this AI challenge of identifying similar photos? Either they need to hire a lot of people to sit around making these sets or they have an automated way of creating these sets which can be r…
Probably sums it up best.
Earlier quoted context omitted.
You don't think Google will figure something out when a bunch of tokens from different IP addresses are all being used by one IP?
It can be helpful. There's (optional!) remoteip parameter server can use to send google IP address of current user. As in wordpress demo sometimes we can send requests with the browser.
Earlier quoted context omitted.
I see where you are coming from, specially considering that spam makes up for a significant volume of the entire internet traffic. However, I'd think it wiser for one spammer to go free than for one person to be denied access to legitimate content. I'm often being denied access to free content because I'm accessing from the "wrong" countries, and that's infuriating. If I start being locked out of free content due to…
Do you think content creators should not be able to control access based on their own criteria? Are you somehow "owed" access rights to free content?
But while I believe content creators should be able to control access, I think it's ridiculous to ban certain countries from access to certain content -- I don't quite see the point.
And also, being "owed" free content != being able to access free content you otherwise would be able to access were it not for a service like TOR or a VPN (e.g. escaping the Chinese firewall using a VPN service whose IP is banned from a website versus wanting to watch a movie but living in Germany instead of the U.S.)
Earlier quoted context omitted.
Yeah, seeing a few spam links on a website is much more burdensome than free speech!
That's not what I was talking about at all. And tell me how a being forced to solve a captcha prevents free speech.
Earlier quoted context omitted.
>>which you probably didn't care to read I did read it. My point is, you, or I, or anyone for that matter does not know the inner details of how it works. >>If they can track mouse movements why in incognito mode i'm not a human for them anymore? Maybe having a clean cookie history is not good enough during the risk assessment. Look, my entire point is, google is not a joke company. I am certain that they tested it f…
> I did read it. So what do you think about clickjacking issue? I made an assumption about their algo and maybe I'm wrong and they do track your mouse, but there's exploitable weakness. My post is 1) your algo seems simple 2) here's a bug in it.
If I do the click on your github page, I get a challenge. My clicks were never accepted as human on your github page. My clicks were always accepted as human on wordpress page.
Earlier quoted context omitted.
> I did read it. So what do you think about clickjacking issue? I made an assumption about their algo and maybe I'm wrong and they do track your mouse, but there's exploitable weakness. My post is 1) your algo seems simple 2) here's a bug in it.
The curious thing is, I could not replicate the clickjacking issue. Everytime I make a click on original wordpress registration page, I am verified as a human immediately. If I do the click on your github page, I get a challenge. My clicks were never accepted as human on your github page. My clicks were always accepted as human on wordpress page.
Earlier quoted context omitted.
> I did read it. So what do you think about clickjacking issue? I made an assumption about their algo and maybe I'm wrong and they do track your mouse, but there's exploitable weakness. My post is 1) your algo seems simple 2) here's a bug in it.
The curious thing is, I could not replicate the clickjacking issue. Everytime I make a click on original wordpress registration page, I am verified as a human immediately. If I do the click on your github page, I get a challenge. My clicks were never accepted as human on your github page. My clicks were always accepted as human on wordpress page.