brbposting comments on Bots can now solve CAPTCHAs better than humans

[–] brbposting@sh.itjust.works 21 points 2 years ago (5 children)

I love Microsoft’s email signup CAPTCHA:

Repeat ten times. Get one wrong, restart.

iPhones already have it

Private Access Tokens? Enabled by default in Settings > [your name] > Sign-In & Security > Automatic Verification. Neat that it works without us realizing it, but disconcerting nonetheless.

So, the spammers will need physical Android device farms…

permalink

fedilink

source

parent

hideshow 5 child comments

[–] OsrsNeedsF2P@lemmy.ml 17 points 2 years ago* (last edited 2 years ago) (2 children)

More industry insight: walls of phones like this is how company's like Plaid operate for connecting to banks that don't have APIs.

Plaid is the backend for a lot of customer to buisness financial services, including H&R Block, Affirm, Robinhood, Coinbase, and a whole bunch more

Edit: just confirmed, they did this to pass rate limiting, not due to lack of API access. They also stopped 1-2 years ago

permalink

fedilink

source

parent

hideshow 2 child comments

[–] brbposting@sh.itjust.works 2 points 2 years ago (1 child)

No way!! Can’t find anything about it online - is this info by the way of insiders? Thanks for sharing, would have NEVER guessed. Not even that they’d have to use Selenium much less device farms.

permalink

fedilink

source

parent

hideshow 1 child comment

[–] OsrsNeedsF2P@lemmy.ml 4 points 2 years ago

Yup insider info they definitely don't want public. Just confirmed the phone farms were to bypass rate limit, although they do use stuff like Selenium for API-less banks

permalink

fedilink

source

parent

[–] EliteDragonX@lemmy.world 6 points 2 years ago (1 child)

Oh my god. I lost my fucking mind at the microsoft one. You might aswell have them solve a PhD level theoretical physics question

permalink

fedilink

source

parent

hideshow 1 child comment

[–] brbposting@sh.itjust.works 3 points 2 years ago

Just noticed the screenshot shows 1 of 5.

So five wasn’t good enough… they had to double it. Do kinda respect that they’re fighting spammers, but wonder how Google does it with Gmail. They seem to have tightened then recently loosened up on their requirement for SMS verification (but this may be an inaccurate perception).

permalink

fedilink

source

parent