Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
blog.cloudflare.com
Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
1–10 of 82 posts
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#2God, I hope this works; I do tire of the silly CAPTCHA test. I def get hit with it a lot more from outside the USA than within.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#3That's awesome and it's free, about to swap out my recaptchas
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#4Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#5I think changing the comma to a colon and adding "a" before "privacy-preserving" would make the title clearer.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#6Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
This already being worked on as part of Private Attestation Tokens and the best thing is Turnstile is using this already, read https://blog.cloudflare.com/eliminating-captchas-on-iphones-...
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#7Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
If you read the article you realise you need a valid, unique, device
> In June, we announced an effort with Apple to use Private Access Tokens. Visitors using operating systems that support these tokens, including the upcoming versions of macOS or iOS, can now prove they’re human without completing a CAPTCHA or giving up personal data.
> By collaborating with third parties like device manufacturers, who already have the data that would help us validate a device, we are able to abstract portions of the validation process, and confirm data without actually collecting, touching, or storing that data ourselves. Rather than interrogating a device directly, we ask the device vendor to do it for us.
The trick is that bot farms do not have access to correctly provisioned mobile phones (for now). Thus anyone with a valid mobile device gets a pass.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#8Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
Something about my browser trying to figure out if I'm not 'abusing' a website feels off to me. Perhaps because it's the user-agent acting in the interest of the website.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#9Can’t CAPTCHA be integrated into the browser? Can’t the browser vouch for the user?
That depends on whether you can trust the browser. For example, browsers have long had flags to indicate whether they’re being driven by webdriver, but you can simply recompile the browser without those flags.
Re: Turnstile: privacy-preserving alternative to CAPTCHA by Cloudflare
#10This is yet another example of Cloudflare centralizing the web. I’m tired of this. Sure the only previously viable solution was ReCAPTCHA from Google. But it’s Google. I depend on them for search. And, sure, their business model depends on them being able to track me online. But I know them. And it’s hard for me to live without them. So I’m ok with depending on them, but I worry about further centralization of the Internet if there’s an alternative. At the end of the day, I like the Internet how it is and how I’ve gotten used to it. Facebook is clearly evil, but I still check them from time to time to keep up with my friends, but a lot less than I used to. I, of course, need to use Google so even though their business is inherently about tracking me, what’s the alternative. But Cloudflare, they’re new. They disrupt what I’m used to. They add another player to the mix. So how dare they centralize the Internet?? This is total BS. I’ll stick with ReCAPTCHA.