Comment on MS new captcha: Why did it have to be that hard!?!?
HoneyMustardGas@lemmy.world 3 weeks agoI am usually good at puzzles but this was hard to see on my phone. The pictures were much smaller in my version compared to the image. It wasn’t an intelligence issue, it was a vision issue.
Dave@lemmy.nz 3 weeks ago
The checkbox is only the first step. When it’s a google recapcha, cloudflare, etc that have the checkbox, this is the trigger to check. It sees how long since you loaded the page to when the checkbox is checked, how the mouse moved (perfectly straight line or instant jump to position indicates bot), and other info they have about previous visits (they store a cookie on your PC and when you go to another site they know where you have been and can compare that against the much higher risk of a blank slate user or against whether you’ve tried the same form 100 times).
If you pass that, as 90%+ of users should, then you see no more. If you are like me, you use a VPN and fail the first check and have to do endless recapcha “click on the busses” until you give up and quit the site.
I hate the google ones. Not only do they make life unbearable for people with VPNs, they use the info about what sites you visit to sell ads. And half the time you don’t even know because the recapcha is the hidden in page one not the one in the form when you click the box.
The cloudflare ones are nicer. They virtually always pass me even though I’m behind a VPN, and although they technically can track me across sites (and probably do to track threat level), they aren’t in the business of selling ads.
I have also generally had a nice experience with hCapcha. And recently I came across one that is using proof of work, mCaptcha - not sure what to think on that as it probably uses excess energy but it’s nice to have your computer sort it out in the background. The idea here is a sort of rate limit. It takes 5 or 10 seconds to do the work to pass the test, but it all happens in the background while you fill the form in so you don’t notice. It slows down bots but doesn’t really detect them - more of a rate limiter or something designed to reduce the cost effectiveness of bots.
Thank you for coming to my ted talk.