Live data from Hacker News

Cap: Lightweight, modern open-source CAPTCHA alternative using proof-of-work

capjs.js.org

1–10 of 125 posts

Re: Cap: Lightweight, modern open-source CAPTCHA alternative using proof-of-work

#3
This is a neat idea.

I don't know enough about the underlying proof-of-work stuff to comment on how effective this could be, but I think it's pretty funny that the UI examples say "I'm a human".

I guess "there's only a few of me at most" or "I could allocate enough computation to this that I'm probably not up to no good" don't read as clearly.

Re: Cap: Lightweight, modern open-source CAPTCHA alternative using proof-of-work

#8

can someone ELI5 how these proof-of-work captchas work under the hood to detect whether i'm a bot or not?

They don't detect if you're a human exactly. What they do is they create a calculation expense that is negligible if there's one of you but adds up quickly if you're running a bot farm that needs to send out 10,000 requests a second.

So I click the button, my browser does a quick proof-of-work, no big deal.

But an automated script will have to complete that proof-of-work every time it encounters it, skyrocketing the cpu costs for the server.

Re: Cap: Lightweight, modern open-source CAPTCHA alternative using proof-of-work

#9
post #4

What does proof-of-work mean here and what makes it easy for humans and hard for bots?

I think it's only more expensive for bots, though just as easy for bots.

The problem with bots is they quite often farm this out to stolen resources. It makes sending whatever they are sending slower, but doesn't stop it.

Re: Cap: Lightweight, modern open-source CAPTCHA alternative using proof-of-work

#10
post #9
post #4

What does proof-of-work mean here and what makes it easy for humans and hard for bots?

I think it's only more expensive for bots, though just as easy for bots. The problem with bots is they quite often farm this out to stolen resources. It makes sending whatever they are sending slower, but doesn't stop it.

It will make server hijacking more noticeable and harder to hide.
Post reply on HN