Bots can now solve CAPTCHAs better than humans

https://www.youtube.com/watch?v=IWUHv3S8JVI

#tech #video

@technology@lemmy.world

top 50 comments

sorted by: hot top controversial new old
[–] 166 points 2 years ago (11 children)

Bro, everytime I get the select all the 'x' tiles (motorcycle, bicycle, bus, etc) one I never know if it means "all" of them, like even ones with just a little bit on the tile. Does it want the tires, too? It's bullshit. Never seems to be correct, what I select.

  • source
  • hideshow 15 child comments
  • [–] 100 points 2 years ago (2 children)

    I've always done any square that includes any part of the thing, so the tire on the bus or the helmet of the motorcycle rider. That no longer works for me though, recently I keep getting more images and they seemingly never stop so I just give up on whatever I was trying to load. Its pretty ridiculous how shit the internet has become.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 23 points 2 years ago (1 child)

    By now I'm up to filling one of these things. If they show me a second one, I'm out. Not wasting my time training some AI

  • source
  • parent
  • hideshow 2 child comments
  • [–] 15 points 2 years ago (3 children)

    so the tire on the bus

    Ok, part of the bus.

    the helmet of the motorcycle rider

    The helmet is not part of a motorcycle. I will fail that captcha every time if it requires it.

  • source
  • parent
  • hideshow 4 child comments
  • load more comments (2 replies)
  • [–] 35 points 2 years ago (2 children)

    "select the bikes" That's a motorcycle and that's a moped. Those don't count-uh I fucking guess they do?

    "Select the bus" Bro that's an intersection at 200 feet.

    "Type the Captcha letters" Is that a lowercase r or a capital T?

  • source
  • parent
  • hideshow 3 child comments
  • load more comments (1 reply)
  • [–] 11 points 2 years ago (3 children)

    I don't think it matters, as that isn't the real test. Instead, it's testing whether you are "behaving" as a human. Mouse movements, hesitation etc.

  • source
  • parent
  • hideshow 4 child comments
  • load more comments (2 replies)
  • load more comments (7 replies)
    [–] 104 points 2 years ago (2 children)

    me: clicks all the traffic lights

    <wrong!>

  • source
  • hideshow 3 child comments
  • [–] 52 points 2 years ago (5 children)

    I hate that captcha -- the Google captcha where a single image (like a picture of a street with traffic lights, bikes, buses, etc) is divided up -- it is the worst one by far.

  • source
  • parent
  • hideshow 8 child comments
  • [–] 30 points 2 years ago (1 child)

    I've always thought it was intentional so that humans could train the edge detection of the machine vision algorithms.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 24 points 2 years ago (4 children)

    What really stresses me out is the question of whether a human on a motorcycle becomes part of the motorcycle.

  • source
  • parent
  • hideshow 5 child comments
  • load more comments (3 replies)
  • load more comments (2 replies)
  • load more comments (1 reply)
    [–] 42 points 2 years ago

    So we just invert the logic now, right?
    Make the captcha impossibly hard to get right for humans but doable for bots, and let people in if they fail the test.

  • source
  • [–] 37 points 2 years ago (1 child)

    I haven't been able to solve CAPTHCAs in years.

  • source
  • hideshow 2 child comments
  • [–] 36 points 2 years ago

    Are you a robot?

    I guess not

  • source
  • [+] 26 points 2 years ago* (last edited 1 month ago) (6 children)
  • [–] 13 points 2 years ago (1 child)

    What prevents the adversaries from guafanteeing their bots that then guarantee more bots?

  • source
  • parent
  • hideshow 2 child comments
  • [+] 15 points 2 years ago* (last edited 1 month ago) (8 children)
  • load more comments (6 replies)
  • load more comments (4 replies)
    [–] 17 points 2 years ago (11 children)

    So what would be a good solution to this? What is something simple that bots are bad at but humans are good at it?

  • source
  • hideshow 15 child comments
  • [–] 92 points 2 years ago (1 child)
  • [–] 33 points 2 years ago* (3 children)

    I work in a related space. There is no good solution. Companies are quickly developing DRM that takes full control of your device to verify you're legit (think anticheat, but it's not called that). Android and iPhones already have it, Windows is coming with TPM and MacOS is coming soon too.

    Edit: Fun fact, we actually know who is (beating the captchas). The problem is if we blocked them, they would figure out how we're detecting them and work around that. Then we'd just be blind to the size of the issue.

    Edit2: Puzzle captchas around images are still a good way to beat 99% of commercial AIs due to how image recognition works (the text is extracted separately with a much more sophisticated model). But if I had to guess, image puzzles will be better solved by AI in a few years (if not sooner)

  • source
  • parent
  • hideshow 5 child comments
  • [+] 38 points 2 years ago (4 children)
  • load more comments (3 replies)
  • [–] 21 points 2 years ago (2 children)

    I love Microsoft’s email signup CAPTCHA:

    Repeat ten times. Get one wrong, restart.


    iPhones already have it

    Private Access Tokens? Enabled by default in Settings  > [your name] > Sign-In & Security > Automatic Verification. Neat that it works without us realizing it, but disconcerting nonetheless.

    So, the spammers will need physical Android device farms…

  • source
  • parent
  • hideshow 4 child comments
  • [–] 17 points 2 years ago* (last edited 2 years ago) (2 children)

    More industry insight: walls of phones like this is how company's like Plaid operate for connecting to banks that don't have APIs.

    Plaid is the backend for a lot of customer to buisness financial services, including H&R Block, Affirm, Robinhood, Coinbase, and a whole bunch more

    Edit: just confirmed, they did this to pass rate limiting, not due to lack of API access. They also stopped 1-2 years ago

  • source
  • parent
  • hideshow 2 child comments
  • load more comments (2 replies)
  • load more comments (1 reply)
  • [–] 8 points 2 years ago

    Isn't the real security from how you and your browser act before and during the captcha? The point was to label the data with humans to make robots better at it. Any trivial/novel task is sufficient generally, right?

  • source
  • parent
  • load more comments (7 replies)
    [+] 15 points 2 years ago* (last edited 1 year ago) (4 children)
    load more comments (4 replies)
    [–] 14 points 2 years ago (1 child)

    Hey, failing at being a human being while trying to highlight where the bicycle starts and end on the picture is my job! You won't take that away from me, you fucking robot!

  • source
  • hideshow 1 child comment
  • load more comments (1 reply)
    [–] 12 points 2 years ago

    am I gonna need an AI to solve captchas now?

    cause they've gotten so patently stupidly ridiculous that I cant even solve them as a somewhat barely functional biological intelligence.

  • source
  • [–] 10 points 2 years ago (1 child)

    If some sites only need me to click the one checkbox to prove I am a human, why aren't ALL sites using this method?!

  • source
  • hideshow 2 child comments
  • [–] 18 points 2 years ago

    when you have to click once, means they have been gathering all your actions up to that point, and for sure you are human. If you get asked to click images, means they don't have enough information yet, or you failed some security step (wrong password) and the site told captcha to be extra sure

  • source
  • parent
  • load more comments
    view more: next ›