Bots can now solve CAPTCHAs better than humans

I've always done any square that includes any part of the thing, so the tire on the bus or the helmet of the motorcycle rider. That no longer works for me though, recently I keep getting more images and they seemingly never stop so I just give up on whatever I was trying to load. Its pretty ridiculous how shit the internet has become.

"select the bikes" That's a motorcycle and that's a moped. Those don't count-uh I fucking guess they do?

"Select the bus" Bro that's an intersection at 200 feet.

"Type the Captcha letters" Is that a lowercase r or a capital T?

IKR! i try and solve the CAPTCHA and theres a tiny 5 nanometer slice of crosswalk on another tile, and i have no idea if i need to click it or not. And then sometimes you don’t have that issue, and you click all the correct tiles, and then it just takes you to another one, and another one, and another one… they really need to improve it

I don't think it matters, as that isn't the real test. Instead, it's testing whether you are "behaving" as a human. Mouse movements, hesitation etc.

Have you considered that maybe you are a robot?

If it's like microscopic I just ignore it. Generally works pretty well. Trust your gut instincts.

Yes, every part, even the slivers. And the tires.

Do it slowly and don't be consistent, sometimes I select the tile with 3 pixels of the thing its supposed to contain, sometimes I leave 2 or 3 tiles that clearly contain the thing, sometimes I just select a tile that doesn't even match. Idk, it always works, I suppose the erratic behavior is what shows them I'm human or smth

It looks what most people do and people are lazy, so, i guess, select only the fully covered tiles?

I hate that captcha -- the Google captcha where a single image (like a picture of a street with traffic lights, bikes, buses, etc) is divided up -- it is the worst one by far.

You‘re doing it too fast most likely. Try doing it very slowly instead. I recently realized most captchas are designed for seniors, not tech savvy people. They will keep throwing them at you if you‘re too good at them. I think the joke that one day only AIs can solve captchas so you have to fail at them in order to be recognized as human has long become a reality in a way. Hope that helps.

I suggest you get an appointment with your local blade runner.

Proof of work. This won't stop all bots from getting into the system, but it will prevent large numbers of them from doing so.

What prevents the adversaries from guafanteeing their bots that then guarantee more bots?

Yeah kind of idiotic that the video kept saying that captchas are useless -- they're still preventing basic bots from filling forms. If you took them away, fraudsters wouldn't have to pay humans to solve them or use fancy bots any more, so bot traffic would increase

I wonder if such a system could be designed to be privacy-preserving.

https://imgs.xkcd.com/comics/constructive.png

I work in a related space. There is no good solution. Companies are quickly developing DRM that takes full control of your device to verify you're legit (think anticheat, but it's not called that). Android and iPhones already have it, Windows is coming with TPM and MacOS is coming soon too.

Edit: Fun fact, we actually know who is (beating the captchas). The problem is if we blocked them, they would figure out how we're detecting them and work around that. Then we'd just be blind to the size of the issue.

Edit2: Puzzle captchas around images are still a good way to beat 99% of commercial AIs due to how image recognition works (the text is extracted separately with a much more sophisticated model). But if I had to guess, image puzzles will be better solved by AI in a few years (if not sooner)

Pizza toppings. Glue is not a topping.

Isn't the real security from how you and your browser act before and during the captcha? The point was to label the data with humans to make robots better at it. Any trivial/novel task is sufficient generally, right?

Smell? :)

I think this is a non-issue

Captchas aren't easy to bypass - run of the mill scammers can't afford a bunch of servers running cutting edge LLMs for this

Captchas were never a guarantee - one person could sit there solving captchas for a good chunk of a bot farm anyways

So where does that leave us? Sophisticated actors could afford manually doing captchas and may even just be using a call-center setup to do astroturfing. My bigger concern here is the higher speed LLMs can operate at, not bypassing the captcha

Your run of the mill programmer can't bypass them, it requires actual skill and a time investment to build a system to do this. Captchas could be defeated programically before and still can now - it still raises the difficulty to the point most who could bother would rather work on something more worthwhile

IMO, the fact this keeps getting boosted makes me think this is softening us up to accept less control over our own hardware

Proof of work. For a legitimate account, it's a slight inconvenience. For a bot farm, it's a major problem.

I think this is a non-issue

Captchas aren't easy to bypass - run of the mill scammers can't afford a bunch of servers running cutting edge LLMs for this

Captchas were never a guarantee - one person could sit there solving captchas for a good chunk of a bot farm anyways

So where does that leave us? Sophisticated actors could afford manually doing captchas and may even just be using a call-center setup to do astroturfing. My bigger concern here is the higher speed LLMs can operate at, not bypassing the captcha

Your run of the mill programmer can't bypass them, it requires actual skill and a time investment to build a system to do this. Captchas could be defeated programically before and still can now - it still raises the difficulty to the point most who could bother would rather work on something more worthwhile

IMO, the fact this keeps getting boosted makes me think this is softening us up to accept less control over our own hardware

Do def people have captchas?

They may take our creative writing, they make take our digital art creation, they may take our ability to feed ourselves and our families. Hell, they may even take every single creative outlet humans have and relegate us to menial work in service of our capitalist overlords. But they will never take away clicking on boxes of pictures of bicycles and crosswalks!

when you have to click once, means they have been gathering all your actions up to that point, and for sure you are human. If you get asked to click images, means they don't have enough information yet, or you failed some security step (wrong password) and the site told captcha to be extra sure