Submitted 11 months ago by cupcakezealot@lemmy.blahaj.zone to mildlyinfuriating@lemmy.world
https://lemmy.blahaj.zone/pictrs/image/046d6865-ea47-4e7c-a433-4f3a3658b2cb.jpeg
did i say mildly i meant want to nuke it from orbit
I was trying to book a trip through a travel website, after the 3rd tedious captcha I ended up using another site. I get it, the bot vs captcha war is getting crazy but if your website is unusable then i’m not going to use it.
90% of captchas are just being used to train AI anyways.
Source: I don’t need a source I have this tinfoil hat
Tinfoil hat is a reputable source.
Yup. This has been their use since the ‘type these two words’ capchas which were used to train for OCR.
I personally never met this CAPTCHA, but my friend did during our phone call. It was utterly hilarious to hear him slowly going mad to the point of screaming at the computer. I was laughing my ass off. This is too dystopian to be true.
At that point I’d just do the audio version
I have this problem too. I have Proton VPN on and try to solve a reCAPTCHA. And it makes me do the “click until there’s none left” thing, which is a pain in the ass. I do it. And then just says Please try again. So I do the audio one and apparently I’m sending automated requests. Thanks google.
Seriously, what asshole came up with this? Some of us have trouble processing numbers.
and you have to answer like 10 of them blobcat, angryhammer
Getting locked out of my accounts by math ftw
Wait… am I misunderstanding this or are they asking you to just sit there and roll dice till you get all ones on 5 D6’s?
so there’s the number on the left and then on the right you have to use the arrows to scroll through until you find the picture with the dice that add up to the number on the left so you basically have to do maths like 10 times in a row
Ah, okay.
So it’s just a “find the right picture” rather than “roll dice till you get a roll of five”. That’s still annoying, but a lot less insane.
If memory serves the people behind this CAPTCHA are Palo Alto Networks.
Apparently they are the leader in cyber security and use AI everywhere.
So no wonder why these CAPTCHAs are so difficult, they’re probably training AIs.
What type of dice has a mix of pips and numerals?
AI generated type
I assume it’s generated or photoshopped. A proper D6 has opposing sides that sum to 7. Thus you should never be able to see 3 and 4 or 1 and 6 at the same time.
Where? What’s this for? I might just become a robot instead
the one in the post was specifically from the battle.net account android app but i’ve seen them other places too :(
I recently got one these signing in to github.
Weird - I see a lot of comments about how this is some evolution in the war of bots vs CAPTCHA, but I have come across this once, and it was many years ago. I just assumed it was a weird small captcha company that was doing their own thing
User friendly CAPTCHAs have been defeated. Current technology relies on extensive fingerprinting but if you want to take out bots using that, you’ll also be taking out anyone not on Windows 10+/macOS with GPU drivers installed and no fingerprint resistence.
“Type these letters” is no longer a good filter. Neither is basic math or recognising words. Even these dice games can be done by ChatGPT just fine once you bypass the “I can’t do CAPTCHAs” limitation that they put in front of it.
We used to be able to make CAPTCHAs just slightly more difficult. Add in some colours, blur the edges some more, use different fonts. That’s no longer an option; CAPTCHAs need to be increased in cognitive complexity instead.
This is a huge problem. As AI becomes more advanced, more disabled people will start losing access to services because they can’t get through the CAPTCHAs. Audio transcription AI is becoming more advanced by the month and I expect audio CAPTCHAs to soon become unusable. These more complex puzzles, which AI can’t automatically describe, will also cause sighted and mentally disabled people to lose access. The days of CAPTCHAs are soon over.
I can see three solutions for this, and all of the suck donkeyballs.
One is remote attestation tied to a hardware key (the thing Google tried to add and the thing Apple has added to Safari). Your access will be determined by your possession of real hardware. If someone hacks the manufacturer of your device and steals the keys, your access will soon be revoked. However, this requires bots to buy real devices, which makes them too costly to operate at huge scales. Running Linux or older versions of Windows/macOS will make accessing the internet impossible.
A variant of this is the “apps for everything” outcome, where websites will stop being useful and tell you to install an app instead. Apps can do a lot more (invasive) analysis of your system, and existing DRM solutions should keep most bots out.
Another is to just put pay walls and accounts in front of everything. No spam bot or crawler will pay a dollar for every account they need to create.
The last one is to centralise on a few hosting providers which can use traffic analysis across many websites to determine bot status. No more VPNs, even more websites behind Cloudflare, but simple, accessible CAPTCHAs.
The non-solution is to try and cling to CAPTCHAs. Soon CAPTCHAs will start excluding anyone under some kind of education level that’ll affect a significant portion of the population, but it’ll maintain the status quo for most neurotypical people.
Many websites already employ a combination of these measures, and it’s only going to get worse. For general accessibility and for keeping the internet free and somewhat democratic, I’m putting my money on option one: remote attestation. Hardware trust can be implemented in free operating systems (many people will get huffy about it but I’m sure they’ll prefer it to not being able to use the internet) and older systems will take a hit, but it’s the best of the outcomes I can see.
That’s definitely a new one in the AI v. Captcha arms race, and it’s only going to get worse from here. Build a better sword, need a better shield.
You can just watch the YouTube tutorial on how to do these
Yahtzee!
It’s the only way to be sure.
Showroom7561@lemmy.ca 11 months ago
The irony is that these puzzles, while designed to stop bot spam/fake registrations, are actually used to train AI/computer vision to be better… thus, creating the need for even more infuriating puzzles to be “solved” by humans.
Wogi@lemmy.world 11 months ago
Write a dissertation using exactly 53,285 words on the topic of sprinkler head water use efficiency patterns, discussing at length the difference between residential, commercial, and agricultural use cases. Cite at least 25 sources ordered numerically in APA.
‘OK, I guess I don’t need to comment on this article anyway.’
Showroom7561@lemmy.ca 11 months ago
“Page timeout. Please try again.”
Fuuuuuuuuuuuuuuuuuu
damirK@lemmy.world 11 months ago
And bots are already better than us at these tests. Might be better to assume if someone solves too quickly they are a bot. Sorry Mensa peeps
newscientist.com/…/2384228-bots-are-better-at-bea…
NumbersCanBeFun@kbin.social 11 months ago
Or just don’t do it? I have really high security setting on my web browser that breaks most sites. If I’m being asked to do something like this I either move to the next site or just pick up the phone and call the company. There really is no reason to feed into this behavior.
Lifecoach5000@lemmy.world 11 months ago
The phone? Call the company through my device that is dedicated to mostly doomscrolling? Thanks but no thanks pal!
oldGregg@lemm.ee 11 months ago