Submitted 3 months ago by tek@calckey.world to technology@lemmy.world
Bots can now solve CAPCHAs better than humans
https://www.youtube.com/watch?v=IWUHv3S8JVI
#tech #video
@technology@lemmy.world
Bro, everytime I get the select all the ‘x’ tiles (motorcycle, bicycle, bus, etc) one I never know if it means “all” of them, like even ones with just a little bit on the tile. Does it want the tires, too? It’s bullshit. Never seems to be correct, what I select.
I don’t think it matters, as that isn’t the real test. Instead, it’s testing whether you are “behaving” as a human. Mouse movements, hesitation etc.
@kambusha Then why does it keep repeating it if I get a tiny detail or a letter wrong?
Yeah, and if you move the cursor convincingly enough, it will just give the check mark without showing any pictures.
It starts checking your browser, input devices, screen info, etc, before you even click the are you human box.
I suspect it knows you’re human and keeps track of those people who are good at clicking the image, so they can harvest more training data. They know who will keep trying, and give them more images to verify.
Ah. Smarter than it appears.
If it’s like microscopic I just ignore it. Generally works pretty well. Trust your gut instincts.
Yes, every part, even the slivers. And the tires.
Do it slowly and don’t be consistent, sometimes I select the tile with 3 pixels of the thing its supposed to contain, sometimes I leave 2 or 3 tiles that clearly contain the thing, sometimes I just select a tile that doesn’t even match. Idk, it always works, I suppose the erratic behavior is what shows them I’m human or smth
So we just invert the logic now, right?
Make the captcha impossibly hard to get right for humans but doable for bots, and let people in if they fail the test.
Are you a robot?
<fails captcha>
I guess not
Hey, failing at being a human being while trying to highlight where the bicycle starts and end on the picture is my job! You won’t take that away from me, you fucking robot!
They may take our creative writing, they make take our digital art creation, they may take our ability to feed ourselves and our families. But they will never take away clicking on boxes of pictures of bicycles and crosswalks!
am I gonna need an AI to solve captchas now?
cause they’ve gotten so patently stupidly ridiculous that I cant even solve them as a somewhat barely functional biological intelligence.
If some sites only need me to click the one checkbox to prove I am a human, why aren’t ALL sites using this method?!
when you have to click once, means they have been gathering all your actions up to that point, and for sure you are human. If you get asked to click images, means they don’t have enough information yet, or you failed some security step (wrong password) and the site told captcha to be extra sure
So what would be a good solution to this? What is something simple that bots are bad at but humans are good at it?
I work in a related space. There is no good solution. Companies are quickly developing DRM that takes full control of your device to verify you’re legit (think anticheat, but it’s not called that). Android and iPhones already have it, Windows is coming with TPM and MacOS is coming soon too.
I love Microsoft’s email signup CAPTCHA:
Repeat ten times. Get one wrong, restart.
iPhones already have it
Private Access Tokens? Enabled by default in Settings > [your name] > Sign-In & Security > Automatic Verification. Neat that it works without us realizing it, but disconcerting nonetheless.
So, the spammers will need physical Android device farms…
I know some sites have experimented with feeding bots bogus data rather than blocking them outright.
My employer spotted a bot a year or so ago that was performing a slow speed credential stuffing attack to try to avoid detection. We set up our systems to always return a login failure no matter what credentials it supplied. The only trick was to make sure the canned failure response was 100% identical to the real one so that they wouldn’t spot any change. Something as small as an extra space could have given it away.
Pizza toppings. Glue is not a topping.
Neither are pineapples. Fight me.
Isn’t the real security from how you and your browser act before and during the captcha? The point was to label the data with humans to make robots better at it. Any trivial/novel task is sufficient generally, right?
I think this is a non-issue
Captchas aren’t easy to bypass - run of the mill scammers can’t afford a bunch of servers running cutting edge LLMs for this
Captchas were never a guarantee - one person could sit there solving captchas for a good chunk of a bot farm anyways
So where does that leave us? Sophisticated actors could afford manually doing captchas and may even just be using a call-center setup to do astroturfing. My bigger concern here is the higher speed LLMs can operate at, not bypassing the captcha
Your run of the mill programmer can’t bypass them, it requires actual skill and a time investment to build a system to do this. Captchas could be defeated programically before and still can now - it still raises the difficulty to the point most who could bother would rather work on something more worthwhile
IMO, the fact this keeps getting boosted makes me think this is softening us up to accept less control over our own hardware
Smell? :)
Yes, or:
Which of these images makes you horny?
I think this is a non-issue
Captchas aren’t easy to bypass - run of the mill scammers can’t afford a bunch of servers running cutting edge LLMs for this
Captchas were never a guarantee - one person could sit there solving captchas for a good chunk of a bot farm anyways
So where does that leave us? Sophisticated actors could afford manually doing captchas and may even just be using a call-center setup to do astroturfing. My bigger concern here is the higher speed LLMs can operate at, not bypassing the captcha
Your run of the mill programmer can’t bypass them, it requires actual skill and a time investment to build a system to do this. Captchas could be defeated programically before and still can now - it still raises the difficulty to the point most who could bother would rather work on something more worthwhile
IMO, the fact this keeps getting boosted makes me think this is softening us up to accept less control over our own hardware
Of course they can! Humans have been training them on this task for 20 years.
There are two Brewster Rockit strips that are applicable here.
www.gocomics.com/brewsterrockit/2021/06/25 www.gocomics.com/brewsterrockit/2024/05/26
cupcakezealot@lemmy.blahaj.zone 3 months ago
<click the traffic lights>
me: clicks all the traffic lights
<wrong!>
Dark_Arc@social.packetloss.gg 3 months ago
I hate that captcha – the Google captcha where a single image (like a picture of a street with traffic lights, bikes, buses, etc) is divided up – it is the worst one by far.
GamingChairModel@lemmy.world 3 months ago
I’ve always thought it was intentional so that humans could train the edge detection of the machine vision algorithms.
AnarchistArtificer@slrpnk.net 3 months ago
What really stresses me out is the question of whether a human on a motorcycle becomes part of the motorcycle.
locuester@lemmy.zip 3 months ago
You can just click a couple squares and hit ok. It doesn’t have to be right.
paws@cyberpaws.lol 3 months ago
I hate when the captcha starts at 1/10, so much so that I’ll usually just walk away if I can.
CosmoNova@lemmy.world 3 months ago
You‘re doing it too fast most likely. Try doing it very slowly instead. I recently realized most captchas are designed for seniors, not tech savvy people. They will keep throwing them at you if you‘re too good at them. I think the joke that one day only AIs can solve captchas so you have to fail at them in order to be recognized as human has long become a reality in a way. Hope that helps.